


OPNsense and WatchGuard Firebox compete in the network security solutions category. OPNsense appears to have the upper hand due to its cost-effectiveness and flexibility without licensing fees, appealing to small and mid-sized businesses.
Features: OPNsense is appreciated for its rich feature set, including IPsec VPN, Let's Encrypt certificate integration, and advanced reporting and visibility options. Its open-source nature provides significant flexibility and customization. WatchGuard Firebox is recognized for its Active Directory integration, threat detection and response capabilities, and comprehensive security suite, offering a layered security approach.
Room for Improvement: OPNsense users express a need for better virtual server integration and enhanced VPN solutions, citing ease-of-use challenges and insufficient documentation for non-technical users. WatchGuard Firebox, while powerful, is critiqued for its complex interface and expensive licensing. Suggestions include improved reporting and easier policy management to enhance usability.
Ease of Deployment and Customer Service: OPNsense relies heavily on community support due to its open-source nature, which some find inconsistent. It supports on-premises deployment with some hybrid options. WatchGuard Firebox offers broader deployment choices, including public cloud systems. Its customer service is well-rated, though setup may require external expertise.
Pricing and ROI: OPNsense is a cost-effective solution due to its lack of licensing fees, making it attractive for businesses seeking to lower operational costs while maintaining robust features. WatchGuard Firebox, while competitively priced in its segment, can be costly compared to open-source alternatives. Its comprehensive feature set and support provide valuable ROI with customizable subscription models.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
The network attacks reduced by approximately 60% after using that, even without customizing the custom configuration yet.
For a very little investment, I was able to increase the security of my network.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Compared to some open-source projects with weak support, OPNsense stands out for having both a strong community and commercial backing options.
I mainly rely on community support since the solution is open source.
If you say you do not have one, it is finished. This is where the monopoly starts.
On a scale of one to 10, I would rate the technical support of the WatchGuard Firebox a 10.
Finally, we connected with someone, and I would rate their support as eight or nine out of ten once we were able to speak with them.
The technical support is good.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
OPNsense is an extremely scalable solution.
I use Zenarmor, pinning it to one core for packet inspection, and the CPU performance seems very good.
OPNsense's scalability is excellent; I just need to resize my hardware and upgrade the server, and voilà, I am good to go.
The user interface and features compared to newer firewalls are not up to the mark, which includes functionalities such as filtering, web filtering, threat protection, user identity, and UTM features that need improvement.
If we're going for more concurrent users, we need to change the entire box.
I find the WatchGuard Firebox scalable, as it's easy to change configurations from this product to another one.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
For home and small network use, OPNsense is also reliable, providing enterprise-grade security at no cost.
OPNsense is the same, but it does have a way of installing the Realtek drivers, which gives you a lot more stability overall on the system.
The only challenge faced was its inadequacy to manage large voice traffic effectively, even with dedicated hardware.
There are issues with traffic hitting the firewall, which could indicate performance problems related to throughput.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
I would like the APIs to be more mature and more developed and have more options to automate threat hunting.
Enhancing its performance for significant amounts of data traffic would make it closer to a perfect solution.
It would be beneficial if they could create some videos on how to set it up themselves.
The cost for renewal after three years is 75% of the hardware cost, which is a significant problem.
When implementing a rule using a group of IPs, it is not possible to do that directly.
It is also difficult to diagnose issues if any devices get compromised; for example, if someone hacks our system, it becomes hard to trace who made changes or accessed the firewall.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
It is free.
They use AI for packet inspection, which integrates with OPNsense and pfSense.
I consider the pricing of OPNsense to be high when compared with other market products.
When we tried to renew the Palo Alto license, the cost was beyond any reasonable range.
It's expensive us here.
I have faced challenges with the WatchGuard Firebox regarding price since we work with customers who use the Stormshield product, which is less expensive and French-made.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
The most valuable features include the basic firewall functionality and the GeoIP location services.
I can have a Wi-Fi VLAN and feel secure that the server network or the VM network that I have on a different VLAN are isolated, and they cannot talk to one another, which adds a great level of security.
It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost.
The Firebox offers valuable features such as network security, URL filtering, UTM features, intrusion prevention and detection, and authentication.
Basically, we have received a good return on investment.
I utilize AI within the WatchGuard Firebox, as we use the interconnection with threat syncs, and AI is implemented.
| Product | Market Share (%) |
|---|---|
| Fortinet FortiGate | 19.1% |
| OPNsense | 11.5% |
| WatchGuard Firebox | 2.7% |
| Other | 66.69999999999999% |



| Company Size | Count |
|---|---|
| Small Business | 357 |
| Midsize Enterprise | 132 |
| Large Enterprise | 188 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 5 |
| Large Enterprise | 8 |
| Company Size | Count |
|---|---|
| Small Business | 92 |
| Midsize Enterprise | 25 |
| Large Enterprise | 15 |
Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.
Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.
What are Fortinet FortiGate's key features?Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.
OPNsense is an adaptable open-source firewall and routing platform appreciated for its flexibility, scalability, and user-friendly interface. It is equipped with robust security features and offers excellent reporting and visibility, essential for small businesses and home setups.
OPNsense stands out for its modular design, allowing cost-effective customization. This system supports VPNs and various firewall capabilities, making it suitable for securing networks from malicious traffic. Its frequent updates and extensive documentation, combined with a supportive online community, enhance user experience. However, there is room for improvement in integration with virtual servers and Azure. Scalability and hardware updates are important for large-scale environments, and users desire more reliable VPN solutions and enhanced threat intelligence tools.
What are OPNsense's most important features?OPNsense is implemented in industries requiring VPN and firewall functions, supporting site-to-site connections, protecting servers, and managing commercial network traffic. Companies apply it for security, UTM, SD-WAN, content filtering, intrusion detection, and prevention, utilizing its open-source nature and effectiveness as a next-generation firewall.
WatchGuard Firebox is a high-performance firewall known for its ease of setup, offering robust security with layered protection and centralized management capabilities.
WatchGuard Firebox stands out for its intuitive management and high throughput, addressing security needs with features like VPN, web filtering, and threat detection. Its centralized control and reporting abilities, along with Active Directory integration, make it popular among varied organizations. Its user-friendly interface and ongoing updates enhance usability and reliability. However, there's a call for better cloud-based administration, scalability, and improved integration with third-party vendors.
What are the key features of WatchGuard Firebox?WatchGuard Firebox is implemented across industries to secure internet gateways and protect data in multi-site businesses. Its applications span from Unified Threat Management (UTM) and intrusion prevention to compliance support in business environments requiring secure connectivity through VPNs.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.