One case where I would use pfsense. Let's say you are a system admin of an small private school, you get an alert email from Comcast saying that copyrighted content was downloaded using torrents. You deploy pfsense and with 30 clicks you have snort configured and set to block torrent connections.