How to replace traffic inspector -> pfsense, linux, freebsd?

Question

firewall

A small enterprise uses a traffic inspector to access the Internet.
There is an experience of implementation of the gateway based on freebsd(pf). I do not want to raise a similar configuration, there is a desire to study either another distribution kit or system, tighter than ubuntu and try to implement "Internet access" on it.
Began to stare at pfSense, since it is made from freeBSD, probably attracted the web interface.
What software would you replace? If it's not difficult to immediately indicate + and - your recommended software.
Thank you.

Answer 1

I studied this issue, from free solutions, the choice fell on pfSense - the project is alive, regular updates are released, the existing community also includes Russian-speaking users.
Of course, I had to refine it with a file, but on the whole it suits me, for a week it has been in combat mode in the branch, it works stably. If so, I will put in the rest.
From improvements - google pfsense + lightsquid + ipcad. To count all traffic.

Answer 2

If you don't need HTTPS, you can turn it off essno
. There's a squid, a firewall, and + analysis of visits, etc. in the kit.