Netgate pfSense Plus Firewall/VPN/Router vs OPNsense comparison

Netgate pfSense Plus Firewall/VPN/Router vs. OPNsense

Download the complete report

Helped 902,495 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Joseph Koomson

IP Network Security Specialist at MTN Ghana

Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.

Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.

Read full review

Jim Voige

Site Manager at a consultancy with 11-50 employees

High availability routing has secured our network and delivers reliable support every day

One downside of Netgate pfSense Plus Firewall_VPN_Router is the need for a better understanding of what hardware it would run on. Right now, we're using Netgate's hardware, but I'm interested in knowing if there are other hardware options available, particularly heavier duty hardware, because the Supermicro 1537 version we have only has a single power supply, which is a shortcoming in an IT environment where dual power supplies are ideal. The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options. I'm familiar with the costs of Supermicro servers, and I believe Netgate charges a premium for their server hardware without enough upside to justify it. The pricing is not justified.

Read full review

Moutaz Sheikh Alard

ISO 27001 Lead Implementer at a consultancy with 11-50 employees

Has helped simulate enterprise security setups and strengthens network segmentation practices

For my capstone, I use OPNsense for my project and its broader benefits for enterprise and cybersecurity context. OPNsense is an open source based firewall and routing platform. It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost. This platform has a modular design, a clean web-based GUI, and frequent updates that prioritize security and usability. It competes with commercial firewalls such as Cisco ASA, FortiGate, and Palo Alto, but stands out because it's community-driven, cost-effective, and transparent. I find OPNsense's feature of acting as a central firewall and gateway most valuable, providing robust point segmentation between the internal network and DMZs in my capstone project, intrusion detection to monitor malicious traffic, VPN services for secure remote access, and logging and monitoring for compliance and auditing. This allows me to simulate a real-world enterprise environment on a smaller scale, demonstrating both security hardening and network efficiency. OPNsense impacts my projects and home network positively because its cost-effectiveness is perfect for lab and enterprise setup without expensive licensing. The flexibility, easy VLAN and DMZ configuration supports different zones such as web servers, mail servers, and log servers. The security-first design for IDS/IPS integration helps me showcase modern defense-in-depth strategies. The user-friendly management through the web GUI makes it possible to manage complex firewall rules clearly, which is critical when documenting and presenting a capstone. Scalability is also an advantage. Although my project is lab-based, OPNsense can scale into production deployments in SMBs and enterprise.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Overall, the pricing of the solution is very good. The product offers good value."

"The initial setup was very easy and straightforward."

"We were looking for the VPN feature and controlling the inflow and outflow of all the traffic within the site and across the sites, and we are also using it for the VPN and VLANs."

"Palo Alto did a good job on the IPv6 interfaces and security policies."

"The common valuable feature for FortiGate is its UTM functionality, which includes various features under a license that is commonly implemented."

"If anyone asks me for my experience with Fortinet solutions, I would recommend FortiGate, especially if they need to use it for security."

"The most valuable feature of FortiGate is FortiView which provides proactive monitoring."

"I highly recommend Fortinet as a leader in integrated suite information security capabilities."

More Fortinet FortiGate pros

"It's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."

"They are more satisfied with Netgate pfSense Plus Firewall_VPN_Router in terms of its flexibility and customer support."

"My experience with the product is that it is a stable and good product that is easy to use."

"I do not have complaints about Netgate pfSense Plus Firewall_VPN_Router with Firewall, VPN, and Router; it is really comfortable for use, and it does a pretty good job."

"Overall, the entire Netgate pfSense Plus Firewall_VPN_Router product has been reliable, though some of their smaller gear aimed at remote offices hasn't been cost-effective."

"We use pfSense and Netgate pfSense Plus Firewall/VPN/Router to establish a VPN tunnel between our client and our headquarters to transfer data between client and our equipment; it's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."

"I find the solution to be user-friendly. It has a lot of reports and easy settings."

"OPNsense impacts my projects and home network positively because its cost-effectiveness is perfect for lab and enterprise setup without expensive licensing, and the flexibility, easy VLAN and DMZ configuration supports different zones such as web servers, mail servers, and log servers."

"For the initial setup of OPNsense, I find that it is very simple."

"The system in general is quite flexible."

"Overall, I would rate OPNsense as nine out of ten."

"The solution is easy to use and is accessible."

"Based on my experience, the main benefits OPNsense provides for me are due to the limitation in getting financials to implement the most marketable solutions available in the market, which pushed me to find other open-source-related or cheaper solutions, and that is how I came upon OPNsense and pfSense, but OPNsense was the choice in this decision, providing a simple but also effective solution on a low budget."

"The most valuable feature of OPNsense is compatibility."

More OPNsense pros

Cons

"Support could be improved."

"I'm happy with the product, however the licensing fees could be lower."

"The solution could improve by being more secure."

"One of the weaknesses of the solution is something we noticed, especially after comparing the tool with SD-WAN features, since, unfortunately, in a massive scale size environment, the solution is not good. I"

"Their licensing should also be improved. The activation or renewal of the product should be done from the date of renewal, not from the date on which the license expired."

"IP tracing works only so-so."

"It would be nice if backups could more easily migrate between different models."

"There were quite a few problems with the stability of the system."

More Fortinet FortiGate cons

"They have to learn something more from FortiGate."

"The most significant drawback in recent years has been the cessation of firmware release downloads."

"The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options."

"The effectiveness of Netgate pfSense Plus Firewall_VPN_Router traffic shaping is quite good, but I am not very satisfied with the interface for control."

"I would assess the effectiveness of Netgate pfSense Plus Firewall_VPN_Router's traffic shaping as good, but I would give a six marks only for that compared to others because in the past few years, there has been a stop of improvement or lack of improvement showing in Netgate pfSense Plus Firewall_VPN_Router."

"While they do have paid options that actually gives better features, for most of the clients, if they tend to take a paid option will instead opt for Fortinet."

"The support service isn't very accessible, so you have to look at the forums to solve some issues."

"We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much."

"Pricing in my opinion is just too expensive. It makes no sense. It moves in the direction of a monopoly."

"OPNsense could improve by making the configuration more web-based rather than shell or command-line-based."

"In terms of improvement, the performance could be enhanced."

"There should be more technical documentation."

"OPNsense struggles to handle large volumes of voice traffic, indicating scalability issues in that specific use case."

More OPNsense cons

Pricing and Cost Advice

"Its price is good."

"When you look at these end security systems and firewalls, these firewalls even five years ago were $50,000 or perhaps $25,000 to implement in some types of customer sites. Now we're talking about tools that are $1,000. In this case, it might have been $500 or something like that."

"Each feature costs money, so it is important to study your needs."

"I rate the pricing an eight and a half on a scale of one to ten, where one is low, and ten is high."

"The beauty is the price performance ratio is great with FortiGate. It provides all the features we needed and the price is comparable with others' firewalls. The price is quite competitive with the firewalls with similar features."

"It is cost-effective, and provides a good value for your money. The pricing, and license renewal, is very reasonable for us."

"Fortinet prices are around $600 for the small 40F model, and for licenses, the simplest option is about $300 for a year. They sell licenses that can last for 1, 2, 3, or 5 years."

"The product is expensive compared to one of its competitors."

More Fortinet FortiGate pricing and cost advice

Information not available

"It is free."

"Its pricing is unbeatable in comparison to other firewalls. You can have a small instance that could be €80 a month with the hardware underneath. Azure Firewall and FortiGate are out of the question at this price. If you are on a public cloud, you need the underlying infrastructure. Other than that, there is no additional cost. If you have it on-prem, you have to buy the server or the appliance. The hardware cost is replaced with the infrastructure cost in the cloud. You also have costs for the public IPs and underlying VMs, but that's not related to OPNsense. It would be the same for a FortiGate deployment on Azure. You need a FortiGate license, and you need the underlying infrastructure that scales up depending on your needs."

"I'm using the free version of OPNsense. I didn't check the pricing for the solution because I still need to test it before getting the approval to purchase OPNsense, and it isn't easy to get approval from the higher-ups."

"The solution is not expensive."

"OPNsense is open source software so at this time it is free for us to use."

"OPNsense is an open-source solution and it is free to use."

"It is open source and free."

"We are using the paid version."

More OPNsense pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

902,495 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

Manufacturing Company

Financial Services Firm

Construction Company

38%

Comms Service Provider

10%

Healthcare Company

Manufacturing Company

Comms Service Provider

17%

Computer Software Company

Manufacturing Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	369
Midsize Enterprise	139
Large Enterprise	195

No data available

By reviewers
Company Size	Count
Small Business	32
Midsize Enterprise	6
Large Enterprise	8

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What needs improvement with Netgate pfSense Plus Firewall/VPN/Router?

Netgate pfSense Plus Firewall/VPN/Router regularly provides updates. One aspect they can improve is that most people ...

What is your primary use case for Netgate pfSense Plus Firewall/VPN/Router?

We work with Netgate products. We are a reseller and consultant. We have been working with Netgate and Fortinet for a...

What advice do you have for others considering Netgate pfSense Plus Firewall/VPN/Router?

For metrics to measure its impact, we do not measure in a formal way. We use bandwidth monitoring to check how effect...

What is the difference between PfSense and OPNsense?

Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...

What is your experience regarding pricing and costs for OPNsense?

Setup cost is almost zero as one can simulate the whole environment using open source version. Pricing seems fair eno...

What needs improvement with OPNsense?

When I talk about VPN, I am not completely satisfied with the VPN functions of OPNsense. What I have received so far ...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 2% of the time

More Fortinet FortiGate Competitors

VyOS Platform vs Netgate pfSense Plus Firewall/VPN/Router

Compared 42% of the time

More Netgate pfSense Plus Firewall/VPN/Router Competitors

Netgate pfSense vs OPNsense

Compared 52% of the time

IPFire vs OPNsense

Compared 6% of the time

Sophos Firewall vs OPNsense

Compared 5% of the time

Sophos UTM vs OPNsense

Compared 3% of the time

Cisco Secure Firewall vs OPNsense

Compared 3% of the time

More OPNsense Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Netgate pfSense Plus Firewall/VPN/Router

Download Netgate pfSense Plus Firewall/VPN/Router product report

Netgate pfSense Plus Firewall/VPN/Router report

OPNsense

Download OPNsense product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Netgate pfSense Plus Firewall/VPN/Router offers open-source, license-free software with strong VPN options and robust networking capabilities, supporting secure, scalable, and reliable IT infrastructure integration.

Netgate pfSense Plus Firewall/VPN/Router stands out with its open-source framework, providing organizations the freedom from annual license renewals and enabling focus on CAPEX. It integrates seamlessly within IT environments, offering extensive package availability for broad functionality. Equipped with WireGuard, OpenVPN, and IPsec, it ensures robust VPN configurations. Its traffic shaping, load balancing, and failover functionalities enhance network performance, while Multi-WAN connections boost uptime. Users benefit from its affordability, scalability, VLAN support, and consistent secure operations. However, clearer communication on antivirus capabilities and interface improvements for speed is needed. The equipment's transition to cloud-based firmware updates has seen mixed reception.

What are the key features of Netgate pfSense Plus Firewall/VPN/Router?

License-Free Software: Avoid annual renewals, allowing financial focus on CAPEX.
Strong VPN Options: Supports WireGuard, OpenVPN, and IPsec for secure connections.
Traffic Shaping and Load Balancing: Optimizes network performance and reliability.
Multi-WAN Capability: Enhances connectivity and ensures consistent uptime.
VLAN Support: Allows efficient network segmentation and management.
Open-Source Nature: Provides transparency and continuous community-driven enhancements.

What benefits and ROI should users look for in reviews?

Cost Efficiency: Reduces expenditure with license-free, open-source software.
Scalability: Grows with organizational demands without added costs.
Reliability: Ensures secure, stable connections with minimal downtime.
Ease of Use: Simplified configuration and management for technical teams.
Community Support: Backed by a knowledgeable user community for ongoing support.

In educational settings, such as universities and engineering colleges, Netgate pfSense Plus Firewall/VPN/Router facilitates secure VPN tunnels for data transfer. It sees application as a high-availability BGP setup among consultants and resellers, ensuring reliability and network efficiency.

Netgate

OPNsense is an adaptable open-source firewall and routing platform appreciated for its flexibility, scalability, and user-friendly interface. It is equipped with robust security features and offers excellent reporting and visibility, essential for small businesses and home setups.

OPNsense stands out for its modular design, allowing cost-effective customization. This system supports VPNs and various firewall capabilities, making it suitable for securing networks from malicious traffic. Its frequent updates and extensive documentation, combined with a supportive online community, enhance user experience. However, there is room for improvement in integration with virtual servers and Azure. Scalability and hardware updates are important for large-scale environments, and users desire more reliable VPN solutions and enhanced threat intelligence tools.

What are OPNsense's most important features?

Flexibility: Easily customizable due to its open-source nature.
Robust Security: Advanced security features for network protection.
User-Friendly Interface: Simplified management and configuration.
Frequent Updates: Regular improvements and new features.
Dense Documentation: Extensive resources and community support.

What benefits should users look for in reviews?

Cost-Effectiveness: Open-source design reduces costs.
Scalability: Ability to grow with business needs.
Customizability: Tailored solutions for different requirements.
Community Support: Access to a strong network of resources and peers.

OPNsense is implemented in industries requiring VPN and firewall functions, supporting site-to-site connections, protecting servers, and managing commercial network traffic. Companies apply it for security, UTM, SD-WAN, content filtering, intrusion detection, and prevention, utilizing its open-source nature and effectiveness as a next-generation firewall.

OPNsense

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

1. Deciso B.V. 2. iXsystems, Inc. 3. EuroBSDCon 4. Netgate 5. Claranet 6. Voleatech 7. Open Systems AG 8. Securebit AG 9. Proxmox Server Solutions GmbH 10. AVM Computersysteme Vertriebs GmbH Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.

Netgate pfSense Plus Firewall/VPN/Router vs. OPNsense