Netgate pfSense Plus Firewall/VPN/Router vs OPNsense comparison

Netgate pfSense Plus Firewall/VPN/Router vs. OPNsense

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Jim Voige

Site Manager at a consultancy with 11-50 employees

High availability routing has secured our network and delivers reliable support every day

One downside of Netgate pfSense Plus Firewall_VPN_Router is the need for a better understanding of what hardware it would run on. Right now, we're using Netgate's hardware, but I'm interested in knowing if there are other hardware options available, particularly heavier duty hardware, because the Supermicro 1537 version we have only has a single power supply, which is a shortcoming in an IT environment where dual power supplies are ideal. The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options. I'm familiar with the costs of Supermicro servers, and I believe Netgate charges a premium for their server hardware without enough upside to justify it. The pricing is not justified.

Read full review

Moutaz Sheikh Alard

ISO 27001 Lead Implementer at a consultancy with 11-50 employees

Has helped simulate enterprise security setups and strengthens network segmentation practices

For my capstone, I use OPNsense for my project and its broader benefits for enterprise and cybersecurity context. OPNsense is an open source based firewall and routing platform. It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost. This platform has a modular design, a clean web-based GUI, and frequent updates that prioritize security and usability. It competes with commercial firewalls such as Cisco ASA, FortiGate, and Palo Alto, but stands out because it's community-driven, cost-effective, and transparent. I find OPNsense's feature of acting as a central firewall and gateway most valuable, providing robust point segmentation between the internal network and DMZs in my capstone project, intrusion detection to monitor malicious traffic, VPN services for secure remote access, and logging and monitoring for compliance and auditing. This allows me to simulate a real-world enterprise environment on a smaller scale, demonstrating both security hardening and network efficiency. OPNsense impacts my projects and home network positively because its cost-effectiveness is perfect for lab and enterprise setup without expensive licensing. The flexibility, easy VLAN and DMZ configuration supports different zones such as web servers, mail servers, and log servers. The security-first design for IDS/IPS integration helps me showcase modern defense-in-depth strategies. The user-friendly management through the web GUI makes it possible to manage complex firewall rules clearly, which is critical when documenting and presenting a capstone. Scalability is also an advantage. Although my project is lab-based, OPNsense can scale into production deployments in SMBs and enterprise.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product has an inbuilt IPS software. We can configure it to block specific anonymous attacks that are happening."

"The setup is easy."

"The most valuable aspects of FortiGate NGFW are its top-notch reputation in peer reviews, user-friendly interface, and excellent support."

"FortiGate IPS is really easy to use. I don't have any problems with this."

"FortiGate Next Generation Firewall's design is good...I am very impressed with the product's stability."

"FortiGate Next Generation Firewall has a simple configuration."

"Fortinet FortiGate has many valuable features, such as IDS, and intrusion detection. It has security features that are in part with the technologies that are available in the market."

"Simple interface and easy to deploy."

More Fortinet FortiGate pros

"I do not have complaints about Netgate pfSense Plus Firewall_VPN_Router with Firewall, VPN, and Router; it is really comfortable for use, and it does a pretty good job."

"Overall, the entire Netgate pfSense Plus Firewall_VPN_Router product has been reliable, though some of their smaller gear aimed at remote offices hasn't been cost-effective."

"It's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."

"It has firewall and VPN capabilities, which are very valuable features."

"I feel that its valuable features are that it is simple and free."

"I have found the solution has some great features overall, such as guest access capabilities, dashboards, and ease of use. There is plenty of documentation and support and it has the plugins that I needed."

"I mostly rely on the solution's network intrusion detection and prevention system, along with other systems, CMs, and log management."

"OPNsense is easy to use and open source."

"What I like best about OPNsense is that, as a firewall, it's pretty good. I'm quite impressed with it. I had an excellent experience with OPNsense, which helped me achieve the targets I wanted."

"OPNsense is very stable, easy to upgrade, and maintain."

"The initial implementation process is simple."

More OPNsense pros

Cons

"Vulnerabilities owing to viruses in the OS need to be reduced in FortiGate Next Generation Firewall from an improvement perspective."

"Fortinet's support team consists of a huge networking team, because of which there is a delay in response at times."

"There's a limitation wherein you can only have about 30 virtual or secondary IPs on a particular interface."

"The solution could be more evenly structured."

"Fortinet needs to continue to improve network traceability. Other than that, we haven't run into anything that would give me any concern."

"Updating the software during issues can be quite convoluted, especially if there is an unexpected attack, such as on a Saturday."

"Fortinet needs more memory to save the log files. We need it to save the logs on the hardware and not in the cloud. I know this feature is available in FortiCloud, but if we need this log locally, it is not available."

"Technical support needs to be improved."

More Fortinet FortiGate cons

"The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options."

"The effectiveness of Netgate pfSense Plus Firewall_VPN_Router traffic shaping is quite good, but I am not very satisfied with the interface for control."

"There should be more technical documentation."

"There is room for improvement in SSL inspection."

"The solution would not be suitable for anything large-scale."

"There are a few weaknesses. For example, there is a lack of some features that I have in certain commercial products."

"OPNsense showed me some problems when using it in different environments. The problem is integration with a virtual server."

"The ability to set the VPN IP address would be a welcome addition."

"SD-WAN (software-defined wide area network) is integrated into some restricted service providers for OPNSense."

"I would like better documentation concerning the provided packages and their integration."

More OPNsense cons

Pricing and Cost Advice

"Pricing for Fortinet FortiGate SWG is more suitable for enterprise or large-sized organizations because they are the ones who can afford it versus small and medium-sized organizations."

"The price of FortiGate support is too expensive."

"It is a cost-effective solution that meets the user's needs."

"A year or two years back, its price was competitive and reasonable. That was one of the reasons that people easily switched to Fortinet. Over the last two years, the prices have increased drastically. However, the prices of others have also increased. An advantage is there from the price point but not as much as it was previously."

"The product is expensive compared to one of its competitors."

"I rate the price of Fortinet FortiGate SWG a seven and a half out of ten since it is not a cheap solution, though I feel it is a good product for the money one pays."

"The price range is quite acceptable and normal."

"It is too expensive for us. My organization is very small, and we have a total of ten users. We have three internal users and seven external users. The FortiGate 100D series is too expensive for renewing the licenses."

More Fortinet FortiGate pricing and cost advice

Information not available

"The solution is not expensive."

"We are using the paid version."

"It is a free solution, and when you compare it to alternatives like FortiGate, which is quite powerful but also costly, the value becomes evident."

"I would rate the pricing a nine out of ten, especially considering the availability of a free community edition."

"It is free."

"I would rate the pricing three out of ten."

"Its pricing is unbeatable in comparison to other firewalls. You can have a small instance that could be €80 a month with the hardware underneath. Azure Firewall and FortiGate are out of the question at this price. If you are on a public cloud, you need the underlying infrastructure. Other than that, there is no additional cost. If you have it on-prem, you have to buy the server or the appliance. The hardware cost is replaced with the infrastructure cost in the cloud. You also have costs for the public IPs and underlying VMs, but that's not related to OPNsense. It would be the same for a FortiGate deployment on Azure. You need a FortiGate license, and you need the underlying infrastructure that scales up depending on your needs."

"The price of OPNsense is good."

More OPNsense pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

No data available

Comms Service Provider

17%

Computer Software Company

11%

Manufacturing Company

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	357
Midsize Enterprise	133
Large Enterprise	188

No data available

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	5
Large Enterprise	8

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What needs improvement with Netgate pfSense Plus Firewall/VPN/Router?

One downside of Netgate pfSense Plus Firewall_VPN_Router is the need for a better understanding of what hardware it w...

What is your primary use case for Netgate pfSense Plus Firewall/VPN/Router?

We use Netgate pfSense Plus Firewall_VPN_Router as a high availability BGP solution.

What advice do you have for others considering Netgate pfSense Plus Firewall/VPN/Router?

We use the Plus version of Netgate pfSense Plus Firewall_VPN_Router, which comes automatically with any Netgate hardw...

What is the difference between PfSense and OPNsense?

Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...

What do you like most about OPNsense?

What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control.

What is your experience regarding pricing and costs for OPNsense?

My experience with pricing, setup cost, and licensing is that since OPNsense is free, the licensing and setup was eas...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 6% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 3% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

No data available

Netgate pfSense vs OPNsense

Compared 46% of the time

IPFire vs OPNsense

Compared 11% of the time

Sophos Firewall vs OPNsense

Compared 9% of the time

Sophos UTM vs OPNsense

Compared 3% of the time

Untangle NG Firewall vs OPNsense

Compared 2% of the time

More OPNsense Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Firewalls

Download Netgate pfSense Plus Firewall/VPN/Router product report

Netgate pfSense Plus Firewall/VPN/Router report

OPNsense

Download OPNsense product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Information not available

Netgate

OPNsense is an adaptable open-source firewall and routing platform appreciated for its flexibility, scalability, and user-friendly interface. It is equipped with robust security features and offers excellent reporting and visibility, essential for small businesses and home setups.

OPNsense stands out for its modular design, allowing cost-effective customization. This system supports VPNs and various firewall capabilities, making it suitable for securing networks from malicious traffic. Its frequent updates and extensive documentation, combined with a supportive online community, enhance user experience. However, there is room for improvement in integration with virtual servers and Azure. Scalability and hardware updates are important for large-scale environments, and users desire more reliable VPN solutions and enhanced threat intelligence tools.

What are OPNsense's most important features?

Flexibility: Easily customizable due to its open-source nature.
Robust Security: Advanced security features for network protection.
User-Friendly Interface: Simplified management and configuration.
Frequent Updates: Regular improvements and new features.
Dense Documentation: Extensive resources and community support.

What benefits should users look for in reviews?

Cost-Effectiveness: Open-source design reduces costs.
Scalability: Ability to grow with business needs.
Customizability: Tailored solutions for different requirements.
Community Support: Access to a strong network of resources and peers.

OPNsense is implemented in industries requiring VPN and firewall functions, supporting site-to-site connections, protecting servers, and managing commercial network traffic. Companies apply it for security, UTM, SD-WAN, content filtering, intrusion detection, and prevention, utilizing its open-source nature and effectiveness as a next-generation firewall.

OPNsense

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

1. Deciso B.V. 2. iXsystems, Inc. 3. EuroBSDCon 4. Netgate 5. Claranet 6. Voleatech 7. Open Systems AG 8. Securebit AG 9. Proxmox Server Solutions GmbH 10. AVM Computersysteme Vertriebs GmbH Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.

Netgate pfSense Plus Firewall/VPN/Router vs. OPNsense