I deployed (migrated from a Unifi USG) over to pfSense on a CME platform 2 weeks ago, added pfBlockNG last week and Siricata over the weekend, although it looks like Siricata chows my CPU/Memory.
As far as min specs are concerned (looking at the pfSense site), for a 100Mbps line I chose the below platform, hoping it will be strong enough, considering the platform below ism much more capable than the minimums... but thinking I might end up ugrading it not to long as I"m moving over to a 200Mbps Fiber line before end of the year (I'm burning the cpu at 90% and memory is also at like 90% and thats on my current 20Mbps VDSL).
Def liking the platform.
Intel(R) Celeron(R) CPU N2940 @ 1.83GHz
Current: 1826 MHz, Max: 1827 MHz
4 CPUs: 1 package(s) x 4 core(s)
AES-NI CPU Crypto: No
QAT Crypto: No
+8GB RAM
G