Features Atomic configuration reload Sane defaults PF(4) like filters In- and Outbound Soft-reconfiguration