Not too long ago I setup pfsense and wrote an article, since then I have accrued a tremendous amount of logs, which I can analyse and tune the network with; I have to say that I am thoroughly impressed. Using Ntop, pftop, and Snort alongside everything else is absolutely amazing. The only downfall I can think of is that I have yet to find a solution that EASILY impliments blocklists and offers automated updating [of the lists]. I'm frantically searching for a solution at the moment. I've looked at using moblock or iplist and a few others as alternatives but have thus far come up with no luck of finding anyone who has gotten this working on PfSense. My firewall & IDS offer amazing functionality and I don't see any way that I would replace  it, but I have moved on to possibly creating a transparent firewall in Linux that will allow me to filter content going to the LAN after PfSense has gotten ahold of it. Using this configuration: