Fortinet FortiOS vs OPNsense comparison

Cancel
You must select at least 2 products to compare!
Cisco Logo
98,494 views|66,440 comparisons
Fortinet Logo
6,563 views|5,611 comparisons
OPNsense Logo
76,651 views|66,830 comparisons
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Fortinet FortiOS and OPNsense based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Fortinet FortiOS vs. OPNsense Report (Updated: November 2022).
653,584 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"IPS and Snort are very important because they also differentiate Cisco from other vendors and competitors.""It is extremely stable I would say — at least after you deploy it.""It's a flexible solution and is well-known in the community.""The remote VPN and IPsec VPN or site-to-site VPN features are valuable. The clustering feature is also valuable. We have two ISP links. Whenever there is a failover, users don't even get to know. The transition is very smooth, and the users don't notice any latency. So, remote VPN, site-to-site VPN, and failover are three very powerful features of Cisco ASA.""Cybersecurity resilience has been paramount. Because there is a threat of losing everything if ransomware or another sort of attack were to happen, the cybersecurity resilience has been top-notch.""They are easy to maintain.""I like that Cisco Firepower NGFW Firewall is reliable. Support is also good.""The most valuable feature is the anti-malware protection. It protects the endpoints on my network."

More Cisco Secure Firewall Pros →

"The initial setup is straightforward, and it is very customer friendly.""The solution constantly adds features that are useful and user-friendly such as the ability to tweak firewalls through the CLI.""Performance-wise, I think FortiOS is much better than its Juniper counterpart. Based on our actual experience and performance metrics, FortiOS-based products are much better than Juniper.""FortiOS's best features are its function as an internet gateway and how easy it is to manage.""The most valuable feature of Fortinet FortiOS network segregation, UTM, and antivirus, freight management protection, such as DDoS. Additionally, the CLI and the GUI are easy to use. The architecture makes sense, and the command in the CLI are organized well. They have quite a lot of features are easy to use, and are user-friendly. Any novice can use Fortinet FortiOS without an issue.""We've been happy with the pricing.""I personally think the site-to-site VPN is the most useful feature. A lot of firewalls have that, but to me, that's one of the features that's essential.""It's easy to use."

More Fortinet FortiOS Pros →

"OPNsense is highly stable.""The initial implementation process is simple.""It's more secure and more reliable.""We have found pretty much all the features of the solution to be valuable.""The technical support is very good.""The system in general is quite flexible.""The IDS and IPS features are valuable. From the usability perspective, there is a lot of good documentation. As IT professionals, we found it very easy to configure the firewall. It was easy to configure and use.""It has an open license. It works very well, and there is an update every month."

More OPNsense Pros →

Cons
"We only have an issue with time sync with Cisco ASA and NTP. If the time is out of sync, it will be a disaster for the failover.""I don't have to see all the object groups that have been created on that firewall. That's just something that I would really appreciate on the CLA, even though it already exists on the GUI.""The only improvement that we could make is maybe [regarding] the roadmap, to have better visibility as to what we are targeting ahead in the next few quarters.""There are some limitations with SSL. Regarding the security assessment for the ISO 27000 standard, there are certain features that Cisco needs to scale up. Not all products support it, so you need to be slightly careful, especially on the site track.""The Firepower FTD code is missing some old ASA firewalls codes. It's a small thing. But Firepower software isn't missing things that are essential, anymore.""The user interface is a little clunky and difficult to work with. Some things aren't as easy as they should be.""The initial setup could be simplified, as it can be complex for new users.""The only drawback of the user interface is when it comes to policies. When you open it and click on the policies, you have to move manually left and right if you want to see the whole field within the cell. Checkpoint has a very detailed user interface."

More Cisco Secure Firewall Cons →

"The solution could improve the log retention and reports.""Right now, all the features meet my requirements.""Right now, we have to contend with CLI. We'd like it to be easier. We need the features to be in a UI.""There are some features for FortiGate using FortiOS that can only be enabled via a command line. These aren't very advanced features they have been part of FortiOS for quite some time but they still aren't accessible from the graphical user interface. It makes it a little bit harder than it should be for us to manage the solution. That's my main concern with the user interface. Another concern we have is some elements for the user interface, if they're not properly configured, it could lead to hardware and performance degradation.""There is no flexibility.""Fortinet FortiOS could improve by having better authentication methods with Microsoft or Google Services.""There is some room for improvement in the support.""The reporting and monitoring could improve, they have a lot of limitations. The monitoring is not easy compared to the other firewall."

More Fortinet FortiOS Cons →

"The solution could be more secure.""The IPS solution could be more reliable.""The support for OPNsense is good because we have documents available on the internet. The support could improve a little.""I would like to see better SD-WAN performance.""The interface isn't so friendly user. But we have some technicians here who are quite confident with this tool. OPNSense could maybe add sets of rules so it's simpler to manage different groups with particular needs.""While they do have paid options that actually gives better features, for most of the clients, if they tend to take a paid option will instead opt for Fortinet.""The interface needs to be simplified. It is not user-friendly.""We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much."

More OPNsense Cons →

Pricing and Cost Advice
  • "This product is expensive."
  • "If we compare it with FortiGate and the co-existing ASA, FortiGate is better in price."
  • "They seem to be at the top end in terms of pricing, but they are worth the price. They are probably a little bit lower than Palo Alto. If the customers are relying on Cisco products and they are thinking more in terms of scaling to another layer in a year, it is pretty much in a good price range."
  • "We're using the smart license for this firewall. The models that we have require licensing for remote access."
  • "There are licensing costs."
  • "I just bought it off the shelf, and I'm using it with my previous one, so I have not spent that much."
  • "The price is fair. It's not the cheapest, but it's not bad."
  • "For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
  • More Cisco Secure Firewall Pricing and Cost Advice →

  • "The price of Fortinet FortiOS has been reasonable."
  • "There is a license required for the solution and the price is fair."
  • "The solution could have a better licensing model. It's a bit more expensive than other solutions. The annual subscription is very pricy in Fortinet. The cost could be reduced."
  • "It is not cheap; it is also not expensive. It is somewhere in the middle."
  • "The cost is around $40,000."
  • "The Fortinet solutions can be a bit expensive."
  • "I am on a two-year contract and I pay annually for Fortinet FortiOS."
  • "It would be better if it were cheaper. We have the firewall in our office, and the license is expiring in 20 to 25 days. We got a quote for almost 80,000 Pakistani Rupees, which is a little costly."
  • More Fortinet FortiOS Pricing and Cost Advice →

  • "OPNsense is an open-source solution and it is free to use."
  • "The solution is not expensive."
  • "As an appliance, it's in the medium price range."
  • "Its pricing is unbeatable in comparison to other firewalls. You can have a small instance that could be €80 a month with the hardware underneath. Azure Firewall and FortiGate are out of the question at this price. If you are on a public cloud, you need the underlying infrastructure. Other than that, there is no additional cost. If you have it on-prem, you have to buy the server or the appliance. The hardware cost is replaced with the infrastructure cost in the cloud. You also have costs for the public IPs and underlying VMs, but that's not related to OPNsense. It would be the same for a FortiGate deployment on Azure. You need a FortiGate license, and you need the underlying infrastructure that scales up depending on your needs."
  • "It is open source and free."
  • "The price of OPNsense is good."
  • More OPNsense Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    653,584 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and… more »
    Top Answer:One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet… more »
    Top Answer:It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
    Top Answer:In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
    Top Answer:The licensing costs are paid by our customers on a monthly basis and include maintenance and technical support provided… more »
    Top Answer:Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and… more »
    Top Answer:OPNsense could improve by making the configuration more web-based rather than shell or command-line-based.
    Top Answer:The price of OPNsense is good. I rate the price of OPNsense a five out of five.
    Comparisons
    Also Known As
    Cisco ASA Firewall, Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall
    Learn More
    Cisco
    Video Not Available
    OPNsense
    Video Not Available
    Overview

    Cisco Secure Firewall is a suite of Cisco ASA Firewall and Cisco Firepower NGFW Firewall among other Cisco products. 

    Anticipate, act, and simplify with Secure Firewall

    With workers, data, and offices located all over, your firewall must be ready for anything. Secure Firewall helps you plan, prioritize, close gaps, and recover from disaster—stronger.

    Turn intent into action

    Unify policy across your environment and prioritize what’s important. Having security resilience is about shoring up your architecture against threats and using automation to save time.

    Achieve superior visibility

    Regain visibility and control of your encrypted traffic and application environments. See more and detect more with Cisco Talos, while leveraging billions of signals across your infrastructure with security resilience.

    Drive efficiency at scale

    Only Secure Firewall includes license entitlement for Cisco SecureX, our open orchestration and XDR platform. The combination increases productivity across your teams and hybrid environments, while reducing threat dwell times.

    Make zero trust practical

    Secure Firewall makes a zero-trust posture achievable and cost-effective with network, microsegmentation, and app security integrations. Automate access and anticipate what comes next.

    Control all the security and networking capabilities in all your FortiGates across your entire network with one intuitive operating system. Improve your protection and visibility while reducing operating expenses and saving time with a truly consolidated next generation enterprise firewall platform.

    OPNsense is a user-friendly, fast-track, open-source FreeBSD-based firewall and routing platform. This software offers features that are generally available from costly commercial firewalls, with the added benefit of open and verifiable sources. The firewall provides users, developers, and organizations with an advantageous environment through transparency. The development of this project is driven by a strong focus on security and code quality.

    The solution offers a variety of components, such as:

    • Weekly security updates. These updates provide the user with the ability to reach new emerging threats in a timely manner through small increments.

    • Two major releases every year. These yearly releases are on a fixed release cycle and provide organizations with the ability to plan ahead of an upcoming upgrade.

    • A roadmap of instructions. Each major release provides a guide and a set of clear goals.

    A team of professionals developed OPNsense. Other professional and experienced software architects, engineers, and developers are encouraged to join in the development of the solution to make it as successful as possible. OPNsense offers a variety of rich features with each release. Each upgrade is based on FreeBSD for continual, long-term support and utilizes a freshly advanced MVC framework based on Phalcon. OPNsense is committed to helping businesses, school networks, remote offices, hotels, and other markets in keeping their data protected.

    OPNsense Core Features

    OPNsense continually offers a free, complete, high-end security platform with new releases and features. With each release, OPNsense focuses on providing more unique and better security features in a timely manner. These features include:

    • Captive Portal
    • Built-in reporting and monitoring tools including RRD Graphs
    • Network Flow Monitoring
    • Traffic Shaper
    • Support for Plugins
    • Granular Control Over State Table
    • Dynamic DNS
    • Two-factor authentication throughout the system
    • Netflow Exporter
    • Encrypted Configuration Backup to Google Drive
    • Forward Caching Proxy (transparent) with Blacklist Support
    • Stateful inspection firewall
    • DNS Server & DNS Forwarder
    • High Availability & Hardware Failover (with configuration synchronization & synchronized state tables)
    • DHCP Server and Relay
    • Virtual Private Network (site to site & road warrior, IPsec, OpenVPN & legacy PPTP support)
    • Intrusion Detection and Prevention
    • 802.1Q VLAN support

    Reviews from Real Users

    OPNsense is a favorite security solution among reviewers for a number of reasons. Two of those reasons include the user-friendliness of the solution, which makes it easy to use, and its ability to easily scale.

    For many, a user-friendly solution is essential. FiorindoDi A., a system administration specialist at a tech vendor, says, "The graphic user interface is very good and it is user-friendly, which makes the product easy-to-use."

    Peerspot reviewers speak of the scalability of the solution. For example, an anonymous cloud and infrastructure manager at a venture capital and private equity firm reviewer notes, "OPNsense is easy to scale when running on the hardware."

    Offer
    Learn more about Cisco Secure Firewall
    Learn more about Fortinet FortiOS
    Learn more about OPNsense
    Sample Customers
    There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
    Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
    CompuNet Systems GmbH,
    Top Industries
    REVIEWERS
    Financial Services Firm16%
    Comms Service Provider13%
    Computer Software Company9%
    Government8%
    VISITORS READING REVIEWS
    Comms Service Provider21%
    Computer Software Company19%
    Government7%
    Educational Organization5%
    REVIEWERS
    Comms Service Provider18%
    Financial Services Firm12%
    Manufacturing Company12%
    Transportation Company9%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Comms Service Provider19%
    Government7%
    Educational Organization5%
    REVIEWERS
    Comms Service Provider30%
    Logistics Company20%
    Aerospace/Defense Firm10%
    Financial Services Firm10%
    VISITORS READING REVIEWS
    Comms Service Provider27%
    Computer Software Company16%
    Government8%
    Educational Organization5%
    Company Size
    REVIEWERS
    Small Business36%
    Midsize Enterprise24%
    Large Enterprise40%
    VISITORS READING REVIEWS
    Small Business28%
    Midsize Enterprise19%
    Large Enterprise53%
    REVIEWERS
    Small Business49%
    Midsize Enterprise17%
    Large Enterprise33%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise18%
    Large Enterprise54%
    REVIEWERS
    Small Business70%
    Midsize Enterprise10%
    Large Enterprise20%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise21%
    Large Enterprise53%
    Buyer's Guide
    Fortinet FortiOS vs. OPNsense
    November 2022
    Find out what your peers are saying about Fortinet FortiOS vs. OPNsense and other solutions. Updated: November 2022.
    653,584 professionals have used our research since 2012.

    Fortinet FortiOS is ranked 10th in Firewalls with 47 reviews while OPNsense is ranked 7th in Firewalls with 12 reviews. Fortinet FortiOS is rated 8.4, while OPNsense is rated 8.2. The top reviewer of Fortinet FortiOS writes "Great IPS and DNS filtering with useful tutorials available  ". On the other hand, the top reviewer of OPNsense writes "Unbeatable pricing and easy to configure and use, but it can be configured only through the GUI, and the integration with Azure cloud is difficult". Fortinet FortiOS is most compared with Fortinet FortiWeb, Fortinet FortiGate, Fortinet FortiManager, Infoblox Advanced DNS Protection and Huawei NGFW, whereas OPNsense is most compared with pfSense, Untangle NG Firewall, Sophos XG, Fortinet FortiGate and Check Point NGFW. See our Fortinet FortiOS vs. OPNsense report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.