


OPNsense and Palo Alto Networks K2-Series are both prominent firewall solutions catering to different user needs. Users appreciate the pricing and support of OPNsense, while many find that despite its higher cost, Palo Alto Networks K2-Series offers superior features justifying the investment.
Features: OPNsense's flexibility and open-source nature allow extensive customization. The active community contributes to its development, ensuring a wide range of plugins. Its ease of integration with other systems is beneficial to users. Palo Alto Networks K2-Series offers advanced threat detection, which many consider state-of-the-art. Its automated security measures ensure proactive protection. Comprehensive compliance features help businesses adhere to industry standards.
Room for Improvement: OPNsense users highlight the need for better documentation. The interface could be more user-friendly, and the learning curve is often steep for beginners. Additionally, enhancing the scalability of the platform would benefit larger enterprises. Palo Alto Networks K2-Series users note a steep learning curve. Simplifying the management processes would improve user experience. They also desire more intuitive reporting tools to better understand security metrics.
Ease of Deployment and Customer Service: OPNsense is praised for its straightforward deployment process. The active community support is a major advantage. Its deployment is often quicker, requiring less technical expertise. Palo Alto Networks K2-Series, while powerful, requires significant expertise for deployment and configuration. Extensive customer service and support resources provide assistance once it is set up. Users find the initial setup challenging but beneficial in the long run.
Pricing and ROI: OPNsense is often chosen for its cost-effectiveness. Lower setup costs make it accessible for smaller businesses. The open-source model reduces overall expenses. Palo Alto Networks K2-Series involves higher initial expenses. It is viewed as a valuable long-term investment due to its security advantages. The advanced features justify the higher cost for those seeking robust security. The return on investment is significant through reliability and advanced protection.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
The network attacks reduced by approximately 60% after using that, even without customizing the custom configuration yet.
For a very little investment, I was able to increase the security of my network.
For CN-Series, there is no competitor which works the same way as Palo Alto does.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Compared to some open-source projects with weak support, OPNsense stands out for having both a strong community and commercial backing options.
I mainly rely on community support since the solution is open source.
If you say you do not have one, it is finished. This is where the monopoly starts.
I would rate tech support from Palo Alto Networks at around eight out of ten points because we had dedicated people assigned to us.
We get Gold support from them, and they are pretty good.
I would rate the technical support for the Palo Alto Networks K2-Series from Palo Alto as nine out of ten points.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
OPNsense is an extremely scalable solution.
I use Zenarmor, pinning it to one core for packet inspection, and the CPU performance seems very good.
OPNsense's scalability is excellent; I just need to resize my hardware and upgrade the server, and voilà, I am good to go.
Vertical scaling allows you to purchase more powerful devices with additional RAM, compute, and larger model form factors.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
For home and small network use, OPNsense is also reliable, providing enterprise-grade security at no cost.
OPNsense is the same, but it does have a way of installing the Realtek drivers, which gives you a lot more stability overall on the system.
The only challenge faced was its inadequacy to manage large voice traffic effectively, even with dedicated hardware.
Palo Alto typically doesn't have many glitches.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
It would be better for customers to get immediate replacements even with a standard subscription.
I would like the APIs to be more mature and more developed and have more options to automate threat hunting.
Enhancing its performance for significant amounts of data traffic would make it closer to a perfect solution.
It would be beneficial if they could create some videos on how to set it up themselves.
Enhancing web traffic protection would be a great upgrade.
L1 engineers cannot work on the Palo Alto Networks K2-Series because it's too complex, which requires L2 and above level of engineers.
With AI, if there is a Precision AI bundle that you're planning on exploring, then that definitely needs a significant uplift because currently it doesn't work for all the known models.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
They use AI for packet inspection, which integrates with OPNsense and pfSense.
I consider the pricing of OPNsense to be high when compared with other market products.
OPNsense is free, the licensing and setup was easy.
It's a little bit expensive.
The pricing for the Palo Alto Networks K2-Series solution is affordable.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
The firewall and VPN features are the most valuable in protecting our customers' networks.
The most valuable features include the basic firewall functionality and the GeoIP location services.
I can have a Wi-Fi VLAN and feel secure that the server network or the VM network that I have on a different VLAN are isolated, and they cannot talk to one another, which adds a great level of security.
It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost.
Overall, the K2-Series helps in much more protection, and dashboard compliances are being met.
We had configured dynamic user groups and App-ID based policies, which makes it all Zero Trust.
Mainly, it is very easy to understand, and the logs are very good.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiGate | 18.3% |
| OPNsense | 10.3% |
| Palo Alto Networks K2-Series | 0.2% |
| Other | 71.2% |



| Company Size | Count |
|---|---|
| Small Business | 363 |
| Midsize Enterprise | 135 |
| Large Enterprise | 190 |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 6 |
| Large Enterprise | 8 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 7 |
| Large Enterprise | 13 |
Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.
Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.
What are Fortinet FortiGate's key features?Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.
OPNsense is an adaptable open-source firewall and routing platform appreciated for its flexibility, scalability, and user-friendly interface. It is equipped with robust security features and offers excellent reporting and visibility, essential for small businesses and home setups.
OPNsense stands out for its modular design, allowing cost-effective customization. This system supports VPNs and various firewall capabilities, making it suitable for securing networks from malicious traffic. Its frequent updates and extensive documentation, combined with a supportive online community, enhance user experience. However, there is room for improvement in integration with virtual servers and Azure. Scalability and hardware updates are important for large-scale environments, and users desire more reliable VPN solutions and enhanced threat intelligence tools.
What are OPNsense's most important features?OPNsense is implemented in industries requiring VPN and firewall functions, supporting site-to-site connections, protecting servers, and managing commercial network traffic. Companies apply it for security, UTM, SD-WAN, content filtering, intrusion detection, and prevention, utilizing its open-source nature and effectiveness as a next-generation firewall.
Designed to handle growing throughput needs due to increasing amounts of application-, user-, and device-generated data, the K2-Series offers amazing performance and threat prevention capabilities to stop advanced cyberattacks and secure mobile network infrastructure, subscribers, and services.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.