


Cisco IOS Security and OPNsense compete in network security solutions. OPNsense seems to have an upper hand due to its comprehensive features and customization capabilities.
Features: Cisco IOS Security offers advanced threat protection, scalability, and robust support. OPNsense provides user-friendly configuration options, a rich plugin ecosystem, and significant customization capabilities.
Room for Improvement: Cisco IOS Security can improve its intuitive management tools, faster update cycles, and more flexible licensing options. OPNsense needs better documentation, enhanced multi-WAN support, and improved error handling.
Ease of Deployment and Customer Service: Cisco IOS Security offers straightforward deployment and excellent customer service. OPNsense is easy to set up but has mixed support quality, making Cisco IOS Security favored for reliable service.
Pricing and ROI: Cisco IOS Security tends to have higher setup costs, delivering good ROI due to reliability and support. OPNsense has lower initial costs and satisfactory ROI, appealing to budget-conscious users, thus more cost-effective.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
The return on investment is satisfactory with Cisco products as they have long lifespans, and our customers are satisfied with them.
The network attacks reduced by approximately 60% after using that, even without customizing the custom configuration yet.
For a very little investment, I was able to increase the security of my network.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
My impression is that the support quality has deteriorated over time.
Compared to some open-source projects with weak support, OPNsense stands out for having both a strong community and commercial backing options.
I mainly rely on community support since the solution is open source.
If you say you do not have one, it is finished. This is where the monopoly starts.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
OPNsense is an extremely scalable solution.
I use Zenarmor, pinning it to one core for packet inspection, and the CPU performance seems very good.
OPNsense's scalability is excellent; I just need to resize my hardware and upgrade the server, and voilà, I am good to go.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
We find Cisco products stable and thoroughly tested before new software or firmware versions are released.
I find Cisco IOS Security to be a very stable product.
For home and small network use, OPNsense is also reliable, providing enterprise-grade security at no cost.
OPNsense is the same, but it does have a way of installing the Realtek drivers, which gives you a lot more stability overall on the system.
The only challenge faced was its inadequacy to manage large voice traffic effectively, even with dedicated hardware.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Cisco changes their licensing policy quite frequently, which is becoming confusing and complicated.
I would like the APIs to be more mature and more developed and have more options to automate threat hunting.
Enhancing its performance for significant amounts of data traffic would make it closer to a perfect solution.
It would be beneficial if they could create some videos on how to set it up themselves.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
The cost of Cisco IOS Security for customers is on the higher end of pricing compared to the competition, depending on the targeted customers.
It is free.
They use AI for packet inspection, which integrates with OPNsense and pfSense.
I consider the pricing of OPNsense to be high when compared with other market products.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
This solution, called Network Access Controller, handles authentication, authorization, and accounting for devices accessing the network.
The best features of Cisco IOS Security are its integration with software management tools such as Cisco DNA Center and Cisco ICE, which provide centralized policy and network access control.
The most valuable features include the basic firewall functionality and the GeoIP location services.
I can have a Wi-Fi VLAN and feel secure that the server network or the VM network that I have on a different VLAN are isolated, and they cannot talk to one another, which adds a great level of security.
It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost.
| Product | Market Share (%) |
|---|---|
| Fortinet FortiGate | 19.1% |
| OPNsense | 11.5% |
| Cisco IOS Security | 0.4% |
| Other | 69.0% |



| Company Size | Count |
|---|---|
| Small Business | 357 |
| Midsize Enterprise | 132 |
| Large Enterprise | 188 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 14 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 5 |
| Large Enterprise | 8 |
Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.
Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.
What are Fortinet FortiGate's key features?Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.
OPNsense is an adaptable open-source firewall and routing platform appreciated for its flexibility, scalability, and user-friendly interface. It is equipped with robust security features and offers excellent reporting and visibility, essential for small businesses and home setups.
OPNsense stands out for its modular design, allowing cost-effective customization. This system supports VPNs and various firewall capabilities, making it suitable for securing networks from malicious traffic. Its frequent updates and extensive documentation, combined with a supportive online community, enhance user experience. However, there is room for improvement in integration with virtual servers and Azure. Scalability and hardware updates are important for large-scale environments, and users desire more reliable VPN solutions and enhanced threat intelligence tools.
What are OPNsense's most important features?OPNsense is implemented in industries requiring VPN and firewall functions, supporting site-to-site connections, protecting servers, and managing commercial network traffic. Companies apply it for security, UTM, SD-WAN, content filtering, intrusion detection, and prevention, utilizing its open-source nature and effectiveness as a next-generation firewall.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.