GajShield Next Generation Firewall vs Netgate pfSense comparison

GajShield and Netgate are both solutions in the Firewalls category. GajShield is ranked #41 with an average rating of 7.0, while Netgate is ranked #2 with an average rating of 8.8. GajShield holds a 0.2% mindshare in Firewalls, compared to Netgate’s 9.3% mindshare. Additionally, 100% of GajShield users are willing to recommend the solution, compared to 93% of Netgate users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Netgate pfSense and GajShield Next Generation Firewall are popular choices among tech buyers looking for robust firewall solutions. While both have their merits, Netgate pfSense stands out due to its competitive pricing and user-friendly deployment. GajShield Next Generation Firewall, however, seems to have the upper hand with its advanced features.

Features: Netgate pfSense includes VPN support, traffic shaping, and robust security protocols. GajShield Next Generation Firewall offers comprehensive threat prevention capabilities, advanced data leak prevention features, and superior security features.

Room for Improvement: Netgate pfSense users suggest enhancements in documentation, technical support, and third-party tool integration. GajShield Next Generation Firewall users recommend better integration with third-party tools, more intuitive reporting capabilities, and improvements in usability aspects.

Ease of Deployment and Customer Service: Netgate pfSense is recognized for its straightforward installation process and responsive customer service. GajShield Next Generation Firewall is noted for more complex deployment but offers in-depth customer support.

Pricing and ROI: Users find Netgate pfSense to be cost-effective with a strong return on investment due to its lower setup costs and licensing fees. GajShield Next Generation Firewall, although pricier, is considered worth the investment due to its high-end features and long-term benefits.

To learn more, read our detailed GajShield Next Generation Firewall vs. Netgate pfSense Report (Updated: February 2026).

Buyer's Guide

GajShield Next Generation Firewall vs. Netgate pfSense

February 2026

Download the complete report

Helped 881,733 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of February 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.7%, down from 20.9% compared to the previous year. The mindshare of GajShield Next Generation Firewall is 0.2%, up from 0.1% compared to the previous year. The mindshare of Netgate pfSense is 9.3%, down from 15.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	18.7%
Netgate pfSense	9.3%
GajShield Next Generation Firewall	0.2%
Other	71.8%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Nazish Sameer Shaikh

Senior Network Security Engineer at UNITE HERE HEALTH

Simplifies the management of complex data networks, but its technical support could be improved

Sometimes, we have to use SD-WAN support for the solution, which can be improved by adapting some features that will help our approach to network services. The solution can adapt some of the tools where we, as network engineers, can adjust to the changing application needs. Also, the solution can provide us with multiple support, allowing us to create a network segment. The solution’s technical support could be improved.

Read full review

Michael-Collins

Chief information security officer at Center for Information Management, Inc.

Provides visibility that enables users to make data-driven decisions

pfSense flexibility overall is pretty good. They are making some really big improvements. That said, they're a long way from enterprise. They advertise things that they don't have. I've worked for probably 30% of the Corporate 100, and they won't tolerate the high availability and it being as buggy as it is. The fact that if you configure it incorrectly without any visual indications that it's not done in the way Netscape does, then it will not only break the firewall, it will break both firewalls. The only way you can even try to recover is by getting new images from Netgate. You have to open up a tech support case, download the image for, then reimage the firewalls, and reapply your configuration. The fact that you can completely brick your firewalls just by having a configuration that they allow, and they don't even don't tell you there's a problem until they both go down. That's totally unacceptable in an enterprise. As a standalone firewall, they're excellent. As an enterprise, we're not touching it with a ten-foot pole. It’s difficult to configure and use add-on features. It's really easy to add them. On the website, they say “Oh, we do this, this, and this.” However, they do a lot through third-party add-ons. The problem is, if there's any problems at all, the very first thing they want you to do is disable those add-ons. So that's not really supporting anything. There are two ways that firewalls are viewed: talking to the firewall and talking through the firewall. If you're talking about “to the firewall,” then it's a very robust, very secure firewall. However, it doesn't have things that they claim helps with protecting data, most of it's third party. If you want to do all these things that are typically associated with enterprise-level firewalls, most of them are done by a third party. It's not actually cooked into their product. I like their OSPF. I wish it was more current. The only bugs that are in the OSPF are ones that have been known about for almost two years. Maybe they're they're victims of their own success. Their growth curve has outstripped their technical support and has outstripped their ability to develop. They're just growing so fast. They're trying to do everything. Updates from third parties can take too long. For example, if there's a problem with a package and no available update is available, you have to wait. Since it's via a third party, there's no definable schedule, as the update needs to come from a third-party open organization with no financial interest to make the process faster. Sometimes, there's more finger-pointing than resolution. In, OSPF, they give you lots of information. However, when it comes to hardcore troubleshooting of different routing zones or things like that, then you had to keep dropping down to the CLI in order to get it. And that's where your experience can change quite a bit. If you're running OSPF on Cumulus or some of the other big routing or switching solutions, then they're running much newer versions of it, which are all bug-patched and fixed. However, pfSense is running on an operating system that is not theirs. They don't necessarily have full control over it. When you get a real enterprise firewall, and when you hook up the redundancy, you expect redundancy to work and be predictable. And never ever will the redundancy crash your system. If you don't create the interfaces in the exact same order on both firewalls every single time, if so much as one interface is out of order, if the command line is different because of the way the operating system works, you will slowly corrupt your configuration to the point where it'll break.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The antivirus, malware, anti-malware, anti-spam, IP VPN connections, and firewall rules bring the most value for me and my clients."

"The most valuable feature of Fortinet FortiGate is URL filtering."

"The GUI is good."

"The security on offer is very good."

"I really like the captive portal feature for our guest network. It has nice VLAN features in terms of separating our network. The anti-virus is also good."

"The ease of setting the solution up is a valuable aspect for us."

"It is a very user-friendly solution. Moreover, Foritgate offers good performance."

"The solution effectively blocks unwanted traffic."

More Fortinet FortiGate pros

"The most valuable feature of the GajShield Next Generation Firewall is the user-friendly settings, dashboards, and anti-threat protection. Additionally, the solution upgrades frequently which is good because we receive new features."

"Gajshiled's enterprise cloud and DLP-level features give it an advantage over other products."

"It is a stable solution."

"It is an easily scalable solution...The initial setup was very easy."

"The solution's outcome is very high, and we often use it in a very high-traffic environment."

"GajShield has improved our mobile device-based connectivity."

"GajShield Next Generation Firewall's best feature is the network DLP."

"It works. I put pfSense in, and it works. I can't think of any trouble I ever had with it. It runs on heat-sensitive appliances. They don't need a fan, so they don't overheat. It is affordable, fast, and very high-speed. It is built on BSD Unix, and it pretty much runs on any Intel processor."

"The support is excellent quality."

"pfSense allows us to spread the hours of connection and do the filtering on the pfSense site."

"What I like about pfSense is that it works well and runs on an inexpensive appliance."

"The features I have found best are ease of use, GUI, and performance."

"The solution's most valuable features are its ease of use and versatility."

"We can run it on any hardware."

"PfSense was quite a bit less expensive than some other alternatives, and it's worked as well as we could hope."

More Netgate pfSense pros

Cons

"In the scenarios coming from Sophos, it has not."

"FortiGate IPS is somewhat pricey compared to other solutions. There is also room for improvement in terms of the radio signals. The FortiGate WiFi has a relatively short range. I've found there is a lag in its zero-day malware response that could be better, and FortiGate could integrate better with other brands of equipment or identity management solutions."

"There could be more integration between the logging and analytical platforms to make it more seamless and integrated."

"The Wi-Fi controller needs a lot of improvement."

"The solution has limited scalability."

"There have been several vulnerabilities in the firewall. It is hackable, some of the images are hackable."

"The initial setup is medium complex and takes between five days and a week."

"Fortinet FortiGate can improve by integrating the web application firewall and the DDoS protection part of the solution. Having a WAF feature, web application firewall, and proxy together would be a good benefit."

More Fortinet FortiGate cons

"Gajshield can improve SD-WAN compatibility at an enterprise cloud level."

"We face issues with some configuration parts that we don't understand in the solution, and sometimes we face issues with the VPN connection."

"We raised a support ticket, and the project didn't get a proper response. There was a skill issue in TAC support."

"Sometimes, we have to use SD-WAN support for the solution, which can be improved by adapting some features that will help our approach to network services."

"The firewall configuration and administration screens could use some improvement."

"GajShield Next Generation Firewall would be improved with the addition of a load-balancing feature."

"GajShield Next Generation Firewall could improve the flow of the settings. If somebody's using a Cisco firewall or any other brand and they want to use GajShield Next Generation Firewall the platform's UI is a bit different. If it was more similar to the others it would be better."

"Strategy and vision of the product are the areas with shortcomings where improvements can be made so that Netgate pfSense can figure out where the product should go in the future."

"Some of the features I am looking for are still not there in pfSense, like, for example, content control. Because I have kids, I want to control the content or what they watch. There is a feature in pfSense called pfBlocker, but it is limited."

"One area of improvement would be better communication. They kind of left a lot of people in the dark and misled them about the pfSense Plus Edition. I feel like they automatically switched people over and then followed that up with a required subscription model. That aggravated a lot of customers, including me, but I stuck with it regardless."

"I think if you have paid for a year of service, it shouldn't matter how many times you need to request to rekey the license as long as it is not every other day."

"The user interface can be improved to make it easier to add more features. And pfSense could be better integrated with other solutions, like antivirus."

"If a user doesn't have a large amount of experience in Linux systems, they will have problems using this solution. Users need to be highly skilled in troubleshooting competency. Users who do not have such skills will find the product difficult to use."

"The main problem with pfSense is that we have to use proxy solutions."

"The documentation doesn't align with what I'm seeing on the console."

More Netgate pfSense cons

Pricing and Cost Advice

"Pricing for Fortinet FortiGate SWG is more suitable for enterprise or large-sized organizations because they are the ones who can afford it versus small and medium-sized organizations."

"It is cost-effective, and provides a good value for your money. The pricing, and license renewal, is very reasonable for us."

"I rate the pricing an eight and a half on a scale of one to ten, where one is low, and ten is high."

"There is no challenge in Fortinet FortiGate pricing."

"While Fortinet FortiGate has a higher price point compared to Sophos XG, its user-friendly interface justifies the cost."

"The price of FortiGate is reasonable as I plan to buy new switches. The initial gadgets are already booted, and the pricing seems normal on the market. As for additional costs, I haven't subscribed to many extra features, so I'm only using what I need. Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us."

"For the performance that we get, the price is reasonable. There are cheaper options, but they may not deliver the same kind of performance that we want. For the performance they provide, the price is acceptable."

"Fortinet is the least expensive solution."

More Fortinet FortiGate pricing and cost advice

"GajShield is a cheaper solution as of now. The subscription is yearly."

"GajShield Next Generation Firewall is reasonably priced."

"GajShield Next Generation Firewall is cheaper than the other products in the market. The licensing costs for the solution are on a yearly basis."

"GajShield Next Generation Firewall is not that expensive, and its pricing is better than Palo Alto."

"It was about 15% cheaper compared to Sophos."

"The price of the GajShield Next Generation Firewall is very attractive when compared to other solutions."

"I like the fact that it is open-source."

"pfSense offers a surprisingly affordable enterprise-grade solution for small businesses."

"I would like to see the solution's price reduced."

"pfSense is excellent for a low total cost of ownership. pfSense pricing is extremely competitive, and it delivers exactly what is advertised."

"This solution was about $150,000 cheaper than the closest competitor over a three year period."

"I buy the appliance and accept whatever comes with it, but I am not bought into paid support. When it comes to the pricing of the appliances, they are pretty competitive. The price is pretty competitive."

"Netgate pfSense has a great pricing model."

"We are using the open-source version which is free. We are testing the solution to see if we are going to go to the enterprise version which requires a license and is not free."

More Netgate pfSense pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

881,733 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

No data available

Comms Service Provider

13%

Computer Software Company

12%

Manufacturing Company

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	357
Midsize Enterprise	133
Large Enterprise	189

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	1
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	168
Midsize Enterprise	33
Large Enterprise	29

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about GajShield Next Generation Firewall?

The solution's outcome is very high, and we often use it in a very high-traffic environment.

See all answers

What needs improvement with GajShield Next Generation Firewall?

Sometimes, we have to use SD-WAN support for the solution, which can be improved by adapting some features that will ...

See all answers

What is your primary use case for GajShield Next Generation Firewall?

GajShield Next Generation Firewall helps us with security solutions and platforms. It helps us configure the network....

See all answers

Help me find the best open source router

You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...

See all answers

How do I choose between Fortinet FortiGate and pfSense?

Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...

See all answers

What is the difference between PfSense and OPNsense?

Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 14% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 4% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Sophos Firewall vs GajShield Next Generation Firewall

Compared 25% of the time

Fortinet FortiGate-VM vs GajShield Next Generation Firewall

Compared 20% of the time

WiJungle vs GajShield Next Generation Firewall

Compared 14% of the time

More GajShield Next Generation Firewall Competitors

OPNsense vs Netgate pfSense

Compared 55% of the time

Sophos Firewall vs Netgate pfSense

Compared 6% of the time

Cisco Secure Firewall vs Netgate pfSense

Compared 2% of the time

KerioControl vs Netgate pfSense

Compared 2% of the time

Sophos UTM vs Netgate pfSense

Compared 2% of the time

More Netgate pfSense Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

February 2026

Download Fortinet FortiGate product report

Buyer's Guide

GajShield Next Generation Firewall

January 2026

GajShield Next Generation Firewall report

Download GajShield Next Generation Firewall product report

Buyer's Guide

Netgate pfSense

January 2026

Download Netgate pfSense product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

GajShield NGFW

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

GajShield Next Generation Firewall (NGFW) is a cutting-edge cybersecurity solution designed to protect organizations from advanced threats and secure their network infrastructure. With its advanced features and robust capabilities, GajShield NGFW offers comprehensive security, high performance, and simplified management.

GajShield NGFW provides real-time visibility and control over network traffic, allowing organizations to monitor and manage their network effectively. It offers deep packet inspection (DPI) technology, which enables the identification and analysis of application-layer protocols, ensuring that only authorized applications are allowed to pass through the firewall.

This next-generation firewall also incorporates advanced threat intelligence and behavior-based analytics to detect and prevent sophisticated cyber threats. It uses machine learning algorithms to identify and block malicious activities, ensuring that organizations are protected against zero-day attacks and advanced persistent threats (APTs).

GajShield NGFW offers a wide range of security features, including an intrusion prevention system (IPS), virtual private network (VPN), web filtering, and data loss prevention (DLP). These features help organizations enforce security policies, prevent unauthorized access, and protect sensitive data from being leaked or compromised.

Furthermore, GajShield NGFW provides granular control over user access and application usage, allowing organizations to define and enforce policies based on user roles and responsibilities. It also offers bandwidth management capabilities, enabling organizations to prioritize critical applications and ensure optimal network performance.

With its intuitive and user-friendly interface, GajShield NGFW simplifies the management and administration of network security. It provides centralized control and monitoring, allowing administrators to configure policies, generate reports, and receive real-time alerts on security events.

GajShield Next Generation Firewall is a comprehensive cybersecurity solution that offers advanced threat protection, network visibility, and simplified management. With its powerful features and robust capabilities, it helps organizations safeguard their network infrastructure and protect against evolving cyber threats.

GajShield

Netgate pfSense is an open-source firewall and router software known for scalability, cost-effectiveness, and community support. It includes customizable packages for varied network management needs, offering solid performance and straightforward management for diverse setups.

Netgate pfSense provides an impressive range of functionalities including firewall capabilities, VPN options, and extensive customization through packages. Its low resource usage and high availability make it viable for businesses of all sizes, especially when dealing with tailored network demands. Despite its strengths, users suggest improvements in ease of use, mobile compatibility, and support for plug-ins. Enhanced centralized management, better documentation, and additional security features are frequent requests.

What are the key features of Netgate pfSense?

Scalability: Suits any network size from small home setups to large enterprises.
Open-source: Offers transparency and flexibility, allowing for community-driven development.
Firewall Capabilities: Provides robust protection against unauthorized access.
VPN Options: Supports secure remote connectivity with various VPN protocols.
Customizable Packages: Allows users to personalize functionalities to fit network needs.
High Availability: Ensures continuous network operations with redundancy features.
Load Balancing: Distributes traffic efficiently across multiple paths or connections.
Traffic Shaping: Manages bandwidth allocation to optimize network performance.

What benefits should users consider in reviews?

Cost-effectiveness: Significant savings due to low operational costs and open-source nature.
Performance: Reliable service delivery with minimal hardware demands.
User-friendly Interface: Intuitive design that simplifies complex network management.
Community Support: Access to extensive community resources for troubleshooting and advice.
Comprehensive Documentation: Detailed guides and tutorials to facilitate installation and configuration.

In education and healthcare, Netgate pfSense is employed for secure connectivity and efficient traffic management, accommodating distinct demands of remote access and content filtering. Organizations in these sectors often utilize features such as load balancing and VPNs to maintain secure and reliable network operations while integrating with services like Active Directory for streamlined identity management. Small to medium-sized enterprises benefit from its affordability and robust functionality, making it a go-to choice for managed service environments requiring effective network security and control.

Netgate

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Zodiac Clothing

Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring

Buyer's Guide

GajShield Next Generation Firewall vs. Netgate pfSense

February 2026

Free Report: GajShield Next Generation Firewall vs. Netgate pfSense

Find out what your peers are saying about GajShield Next Generation Firewall vs. Netgate pfSense and other solutions. Updated: February 2026.

DOWNLOAD NOW

881,733 professionals have used our research since 2012.

See our GajShield Next Generation Firewall vs. Netgate pfSense report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.