OPNsense Reviews

The primary use case is managing security and commercial network traffic.

The DNS-level filtering is impressive for thwarting time scanners. The VPN functionality is also crucial for my needs, as I connect to multiple locations simultaneously. Running the CBN server on the VPN is exceptionally reliable and efficient.

The interface is user-friendly, but there's room for improvement in terms of intuitiveness. The bundle management aspect requires additional attention to make it more intuitive, especially for inspecting high-level traffic. This is crucial, especially for larger companies where the existing features might not be the most optimal choice, given limitations like printer constraints. For high availability, it's crucial to have a method in place where a designated component oversees the entire process. Given that OPNsense plays a pivotal role as a firewall, safeguarding against various threats, having a reliable backup ensures uninterrupted protection even if unforeseen events impact the primary virtual machine. It would be beneficial if OPNsense supported additional virtualization platforms like Hyper-V from Microsoft and VMware, similar to how Kaspersky has integrated them.

I have been working with it for approximately six months.

It usually demonstrates a high level of stability, with some minor challenges. I would rate it nine out of ten.

During the installation process, there were some limitations, but it was generally fine for specific tasks. Aside from these aspects, it demonstrated good scalability. I would rate it eight out of ten.

I haven't come across a dedicated support page. I've never had to use it, and generally, with open-source solutions like OPNsense, there's an assumption that there isn't an official support team, unlike proprietary options such as SysTrack, Sophos, or FortiGate.

I would rate the initial setup as seven out of ten because sometimes we are facing issues, particularly with IP addressing. It takes a couple of hours to navigate and make the necessary preparations. Given that OPNsense is open-source, there isn't official support available at the moment, which adds an extra layer of complexity to issue resolution.

Initially, I activated Hyper-V and downloaded the installation file. The setup process was straightforward but not entirely seamless. The installation itself took around fifteen minutes, but there was a hiccup during the assignment of IP addresses, particularly for WAN and LAN. OPNsense can function both as a production machine and an operating system, but for the latter, a server with two network cards is required—one for WAN and one for LAN.

It is a free solution, and when you compare it to alternatives like FortiGate, which is quite powerful but also costly, the value becomes evident. Even with options like Sophos, where responsiveness might not be as high as FortiGate, the significant cost factor still applies. The contrast in functionality and the price difference makes OPNsense an attractive option, providing all the necessary features without the hefty price tag associated with some commercial solutions.

It's crucial to have a firewall solution that aligns seamlessly with an open-source approach. Connecting it twice allows for a comprehensive understanding of the network, analyzing factors such as traffic volume, technical specifics, and the nature of inbound and outbound traffic. This step is paramount in selecting the right firewall, considering it provides a holistic view of the network's dynamics. Overall, I would rate it seven out of ten.

The solution is basically an open-source firewall - a next-generation firewall solution. Now we actually use it at a client or company's request. They use it if they prefer something that is more versatile than a Cisco or Fortinet device.

The security has improved as we can isolate the network.

We can do attrition prevention via a tool that comes with the solution.

We can have a VPN solution in place for those that work from home, outside the network, in a secure manner.

We also like that it offers good authentication. It offers radius-based authentication, which has been useful for the company. 

The main platform is under the Open VPN firewall.

The solution has high availability. When we have different ISPs, we can actually load balance those links or actually put some priority or even classify the traffic that might go into one ISP or another.

The interface, specifically the web interface, is very easy to use. 

The firewall functions have been quite helpful. 

Since the pandemic, the VPN component has been crucial now that everything is basically remote.

It's stable.

We've witnessed a solid ROI. 

There are helpful online forums for troubleshooting.

It's open-source and technically free to use.

The reporting part could be better. They actually provide some dashboards; however, when you have to relay information to upper management, there's no way to actually have some sort of executive summary. When you present it to a manager, there's way too much information in there. Having some sort of API to be able to pull out just the information we need to share would be ideal. 

If we could install agents on computers and have that information correlated by the IES, that would be ideal. 

I've been using the solution for ten years. 

It is fairly stable. It will always depend on the resources that you've given it. That said, historically, every time we log into the console, it will alert us to the bug and ask us to update it. In all of the years, only one bug scared me away from a feature. However, that bug only lasted a month. 

We have about six people on the solution in between companies. The numbers of users vary from around 120 users to up to 5,000 users.

I typically use the forum. They don't actually have a contract that you can buy from them for support. Instead, there's a web forum you can reach out to. I know a couple of people on the forum that actually develop the tool, and they are helpful. I've used them only three times over ten years. 

We used to use Cisco or Nortel Solutions. We also worked with Linux. It was very manual in terms of configurations.

The initial setup is very easy. In terms of configuration, you should have a design on hand. The system will only assess whatever you tell it to. For us, it is easy as we use a dedicated server for it. Right now, we're using a virtual machine. What we do is download and install, and that's it.

If you have everything in place, it might only take about three or four hours to deploy it. That's plenty of time to get the job done. Usually, one or two people handle the deployment process.

I always handle the deployment myself in-house. 

We have witnessed an ROI in less than three months. Money-wise, if I go and look at all the solution that costs money, you're looking at $5,000 in yearly fees. In this solution, you won't have any recurring fees, and even if you have to pay for equipment and setup, you save that money within three months. 

The solution isn't exactly free. Basically, you need to invest in the equipment, and you'll have to install the solution and use resources. You'll have to train people to use the tool. However, if you go to their website, you can simply download the solution for free. While the solution is free, you need resources, people, and training. 

We did look into other solutions. However, we did not find anything that compared to this solution. 

I'm an end-user. 

It's important, before starting, to understand your network and the features you need. If you need certain features, you need to ensure that the company you choose has them, and you need to consider the cost involved in attaining the usability you need. 

I'd rate the solution nine out of ten. You do need to have a bit of management experience to be able to troubleshoot effectively. 

The most valuable feature is the Dual WAN in OPNSense, which offers advanced capabilities. It has cost-effective communication options and the flexibility to deploy on your hardware. I like the security aspects, particularly through package managers. It allows for subscription-based enhancements, providing an additional layer of security to the network.

I would like better documentation concerning the provided packages and their integration. Improved guidance on package usage and integration beyond relying on external tutorials or community support would be beneficial. Additionally, having community support available for the free edition, which is suitable for home users, would be valuable.

I have been using the solution for the past two months.

The solution is stable. I rate it an eight out of ten.

In terms of scalability, I rate it around eight out of ten because it excels in handling various tasks. Beyond security features, it supports routing, VPN setups, and traffic monitoring with additional packages like Snort and Suricata. This flexibility allows for a wide range of functionalities. I have 200 users for the solution.

The initial setup was straightforward for me. It took me approximately two days to set up the system initially. Subsequently, I began testing by progressively increasing the number of connections, deploying it through the unified features, and carefully monitoring specific ports while observing how it handles DHCP releases, IPs, and overall traffic. This process extended over about a week.

To begin the initial setup, you need to search for and download the ISO to initiate the process, followed by a two-step procedure. Afterwards, you proceed with command-line configurations, including setting up IP addresses. Once this initial phase is complete, navigation through the graphical user interface (GUI) becomes more straightforward. However, certain commands and configurations may still pose challenges. I rate it a seven out of ten.

I would rate the pricing a nine out of ten, especially considering the availability of a free community edition. This makes it an excellent solution for small businesses, home use, or scenarios with around fifty connections or computers.

I have worked with MikroTik and Ubiquiti Networks EdgeRouter.

I would recommend testing the solution. It’s good for security features. For the community version of the solution, I rate it an eight out of ten.

I'm using it as a proxy in several scenarios.  

There are a lot of features I like. One of the most valuable features is the network checking. Additionally, the firewall and web filtering functionalities are highly useful.

There are some add-ons that need enhancements to make management easier for users, especially the reporting features. Some reports don't show the level of detail I'm looking for, and I've had trouble installing certain add-ons, especially for Internet bandwidth shaping within my company. So, this is an area of improvement for me. 

I have been using OPNsense for more than six years. I currently use the latest version.

I would rate stability a seven out of ten. I've encountered some instability after a recent update.

It just doesn't respond, so I have to restart it over and over again to try to figure out what the problem is. I haven't been able to find the problem yet.

I would rate the scalability a nine out of ten. There is room for improvement.

In my organization, there are 400 users, and OPNsense serves as our gateway and proxy for all of them. Therefore, all the users go through the gateway. 

The initial setup is very easy. The installation just takes minutes, but setting up everything may take a couple of hours.

It's reasonably priced. It's not expensive.

Overall, I would rate the solution an eight out of ten. I just want to say that it's the best open-source firewall. Strongly recommended.

It is a firewall.

The VPN has helped us a lot. 

It has firewall and VPN capabilities, which are very valuable features.

The scalability needs improvement.

I have been working with OPNsense for the past five years. 

I would rate the stability a six out of ten because we've encountered issues with OPNsense when establishing a side-to-side VPN using IPSec.

I would rate the scalability a five out of ten. 

The configuration and access VPN functionality in OPNsense are satisfactory and work well. Currently, I prefer using Azure Firewall for my firewall needs, even though it might not be the absolute best option. My preference is due to a lack of experience with other Windows-based solutions.

The deployment process takes almost an hour. The installation process involves several steps. First, you need to install the software. Then, configure the interfaces as needed. After that, establish the necessary rules for the software to function correctly. Finally, configure the VPN settings to ensure secure communication. I rate the solution a seven out of ten. 

I would rate the pricing a three out of ten. 

It's easy to configure, and it's good. I rate it a seven out of ten. 

The tool's integration is more like a button press. 

pfSense has better performance and quicker updates.

I have been working with the product for six months. 

The tool is more stable than pfSense because it has the drivers for my network card, Realtek. I didn't know at the time because manufacturers sometimes don't advertise what network cards they come with. I bought a computer with Realtek, and pfSense says immediately, out of the box, that it doesn't work with Realtek cards. OPNsense is the same, but it does have a way of installing the Realtek drivers, which gives you a lot more stability overall on the system.

I didn't contact the tool's technical team yet. 

The tool's deployment is easy. Apart from Cisco firewalls and Fortinet, if we talk about Untangle, pfSense, OPNsense, and so on, they are fairly quick to set up. It's not something you spend too much time on. It's a firewall, so you can spend months tweaking the system. If you know what you're doing, you can spend forever on logs, checking and tweaking the system because there's always a new update or feature coming up. Then you start playing with them, tweaking settings, checking logs, blocking or unblocking different things.

You can stay in that loop forever. But for a startup, the initial configuration is fairly easy and quick. It can be completed in 30 minutes. 

I've used the free version. My computer with two network cards at home allows me to try as many different software options as I want. I did pay for the license, but it was for the Zenarmor license, which is the packet inspection tool. They use AI for packet inspection, which integrates with OPNsense and pfSense.

I'm not using OPNsense at the moment. I work with many different technologies and keep testing various setups. Currently, I've gone fully customized. I'm using a Linux server configured as my router and firewall, and I'm using Zenarmor for packet inspection.

This setup allowed me to easily configure SSL VPN and port forwarding for specific ports, which isn't as straightforward with other systems. I've tried several, including Untangle, pfSense, and OPNsense, but found them somewhat restrictive.

OpenSense is quite good. I like it. It has many services and is somewhat similar to the WatchGuard system. I honestly have no complaints; it was a very good experience. It's easy to set up, especially if you know what you're doing. It also offers a nice library of add-ons.

However, if you have appliances with Intel network cards, I would probably go for pfSense instead. Firmware updates and other updates come a bit faster, making it a more reliable service than OPNsense. 

Everything that comes up on OPNsense appears first on pfSense. Some features are not yet available on OPNsense, and they haven't announced a release date. However, I'm confident they will eventually release these features, as they have previously done.

Ultimately, choosing between pfSense and OPNsense is more of a personal preference since they are very similar. Both are FreeBSD systems, operating in similar situations and offering comparable functionality.

Now, I'm just using a Linux server. I can monitor the system, reboot the card, install Apache, and redirect web servers within my home directly to the firewall. This eliminates the need for third-party boxes or other connected computers, allowing me to do everything in the same box. It gives me a lot more freedom.

That's the main reason I stopped using the other systems. I used OPNsense for about six months, which shows I've tried various solutions to find the best one. Despite all the good things I'm saying about OPNsense, I did stay with it longer than pfSense.

I traveled to China, so I used my home as my VPN instead of paying for one. They block VPN services in China, so I was using OpenVPN at home. OpenVPN is a known service, but it gets blocked there. The only way to do it was through SSL VPN, which worked fine. But, talking about OPNsense, everything was working fine. I had no problems. I just had to move away because I needed to use port 443 for something else on my web server, and I can't have a web server together with other stuff. It's a bit more complicated to configure because I use Nginx and Apache, too. You can install these tools on OPNsense, but I found it more complicated than just going onto the command line and doing it.

If you want to use something like OPNsense for FreeBSD, use pfSense instead. Unless, obviously, like me, the person in question has some hardware incompatibility with pfSense. Only then would I go for OPNsense. Because, I mean, they're the same systems, but pfSense is a bit better in terms of overall performance, and security updates come quicker and more often.

I rate the overall product an eight out of ten. 

We use the solution to secure our network and kid’s Internet usage. Since COVID-19, remote work has become relatively standard.

OPNsense is easy to use and open source. When the setup is complete, you can forget about the software itself. You can check the logs occasionally and set up some automatic reporting. 

The user interface could be improved, and the DNS section should be more intuitive.

I have been using OPNsense for a few days. We use the updated version of the solution.

I rate the solution’s stability a ten out of ten.

I rate the solution’s scalability a nine out of ten.

I’ve used pfSense and openWRT before.

The initial setup is straightforward. Being an engineer myself, I have no issues with systems on networks. The installation took around two hours to complete. When you download a system, it takes time. I’ve also installed one package named Zenarmor.

Overall, I rate the solution a nine out of ten.

We use OPNsense in our company to secure our servers.

To be honest with you, I feel that its valuable features are that it is simple and free.

The interface of the solution is an area with shortcomings. The interface of the solution could be made better.

The user experience when we create policies can be made easier. Also, maybe some features should be added to the cloud.

I have been using OPNsense for around six years. Also, I don't remember the version of the solution I am using.

Stability-wise, I rate the solution a ten out of ten.

We have 25 users who are all technical people using OPNsense in my organization.

Scalability-wise, I rate the solution a seven out of ten.

As technical people, we have used many solutions previously for our company and customers. For customers, we have used Fortinet, Palo Alto, and others.

I didn't switch from Palo Alto to OPNsense. I use OPNsense because Palo Alto is used for enterprises. For me, I prefer open-source products. It's more flexible for us.

I believe the setup phase was a fusion of straightforwardness and complexity. It's not complicated, so it's fine.

It's deployed on-premises because we put it on our server, and it is hosted in Germany.

It's a free solution.

The solution requires no maintenance.

I would recommend OPNsense to others.

Overall, I rate the solution between seven to eight out of ten.

We started working with a tier-four data center cloud service provider company, and we wish to develop our cloud instance/VM hosted.

We use OPNsense for content filtering, securing networks through DNSs and overcoming the challenges of ransomware, and securing different types of malware-virus attacks.

This is causing a lot of issues because we are focusing more and more on securing our customers' data.

It includes backup, recovery, archival, and now coming up with securing cloud instances/VMs. It is really essential for us.

Example: a firewall as a service can be provided to those who mainly work from home or Soho, Freelancers - clients.

OpNsense has given the most fundamental security service/support to our clients in an unstructured world like freelancers, consultants, soho users, etc. That is based on NIST guidelines, so, overall basic security postures are in place.

The most valuable features are content filtering, DNS level filtering and blocking unwanted Global IPs, built-in scanners and authentication capabilities, HA, etc.

I think that the most important aspect is a step-by-step run-book for its installation and deployment on small as well as on commodity hardware. Plus, clubbing the services into several (pre-configured) modules, detailing a BASIC, STANDARD, RATIONALIZED, and DYNAMIC (Enterprise ready) modules, and then custom configurable module, in that case even novice users can configure and start experiencing its benefits. On the same, documentation should be developed keeping the above five modules in mind.

The initial installation menu should clearly identify the existing IP class/subnet and suggest its challenges and benefits in configuration, and the respective error log should be shown on a screen on the same panel. They should also provide "modules" wise installation video links and their changes with previous versions for reference.

Our primary focus is to ensure the protection of customers' and consumers' data and critical IT/Dynamic infrastructure, for the same we have to do critical tunings, though, we practiced it in such a way that we have developed a habit of tuning things using a checklist based on clients "Mutual Value Discussions" (assessment session).

Added capabilities of add-ons/filters/extensions and its tunable help us detecting and alerting clients in sensitive environments when a malicious URL is detected in the traffic (e.g. messaging services/emails and/or other communications on the fly). This additional layer of protection helps in further safeguarding user data and preventing potentially damaging malware from being transmitted within the LAN environment.

We started using OPNsense in the last three or four years. Now they are pretty mature.

When we demonstrated this software and the firewall, the main thing is the customer's confidence.

If I remember correctly, it was 19.x version.

We have been operating here in our lab for several months, and everything appears to be extremely stable.

We also attempted a different method of providing the load factor, adjusting the various parameters, cross-checking the network jitters, detected security threats or not by other third-party software/hardware equivalents. It appears to be rather reliable, though, with the stated data points above, it is not yet ready for the enterprise yet.

Most of the BSD/FreeBAS or Linux-based software-defined firewalls support vertical and horizontal scaling 'scaling out and scaling up'(this all depends on how it has been architecture) based on the requirements.

Keeping Technology and Architecture governance with the leading practice of security, availability, and scalability as critical elements in mind. Few stated features make these products scalable and highly available, though, based on load and constant monitoring would require tuning from time to time.

To date, we managed to support clients ourselves and whenever we received feedback we come to know that support cost is very high, it is not as local as we are, for small soho, WFH, freelancers, and young startups they prefer locally available partners and hence they are not even interested in talking on those factors.

Neutral

A few years back, cybersecurity was not a problem for small and micro businesses, but since 2019 or so, that has seen a massive uphill, then, we were using built-in features of different types of OS-level firewalls with basic filtering, blocking the ports, orchestrating based on local FQDN based filtering, NATing, few BIND/DNS based filtering, implementing proxy's like Squid, etc. Best since these techniques are not good for business, we have to find other methodologies to protect clients' environments. Till recently, we also tried using Hardware firewalls, which most of our clients did not like because of known/unknown reasons.

A few years back when we first began using it, we were unable to find a proper document detailing different network scenarios for IP allocations for 2NIC cards. We went through aggressive discussion, reading blogs, and setting-up labs we started getting the knack for all possible configurable elements and started running several tests, packet forwarding, bombarding networks in the most ethical way possible, and verifying results. e.g. We created two separate networks, with WAN and LAN networks assigned to different classes. The menu-driven setup process is relatively easy, but you must know which IP address to define in the router, WAN section, and LAN sections. If this is clearly explained, the basic and fundamental aspects of your network will be in place, allowing you to set it up quickly.

Then we recommend clients purchase easily available commodity hardware-based motherboards with two NIC/Ethernet cards built-in, it simplified our tasks and so on.

We took some help from our old industry connections, and systems integrators, and later our lab practices and tests started solving most of the issues.

It is now organic, and growing (hope to improve better - though accidents do happen, e.g, COVID, Share market / Financial institution meltdown, the war between nations, and now CyberWarFare picked up!) these are the few key factors which disturb the business one way or other.

The best is to read through the terms and conditions, and fine-prints, and to spend time identifying support and operational cost, most of these elements are covered on the website, etc.

We made an attempt, but it appears that forming a partnership would not be done as the other party is requesting a significant amount of money, which we find to be very expensive to start with.

We are exploring the possibility of locating a domestic partner who has a partnership with either PfSense or OPNsense to partner with.

Subsequently, if we are successful in finding a suitable domestic partner, they would be able to offer these services to us.

While this software is certainly capable of getting used by masses, it is important to have the pragmatic knowledge to support and operate the system effectively and keep key parameters monitored for new cyber challenges.

It is crucial to have a clear understanding of exactly what you are looking to accomplish and to have access to the necessary data in order to effectively configure and use the system.

pfsense - Software-defined firewalls have been around for a while. Whereas, OPNsense came later into business.

I would rate OPNsense a seven out of ten.

The primary use case of OPNsense for me is VPN and firewall rules.

URL blocking, Wireguard, Tail Scale, Engine Blocker, and VPN are the most valuable features for me.

There is room for improvement in SSL inspection because that's where OPNsense, the open-source firewall software, just doesn't work well. So, I really use it for inspection.

I have been using this solution for five years. I am using the latest version now.

It is a pretty much stable solution. I rate it an eight out of ten. I haven't experienced much complexity with stability. Mostly there are a lot of false positives when the firewall is on. The inspection may not be very good compared to CSP4 Fortinet. But other than that, it's okay because I really like the user interface for business purposes. We can do all things through GUI, and things come in line.

It's very flexible and scalable, and I would rate the scalability an eight out of ten. It can adapt to changing needs easily. Around twenty customers are currently using OPNsense.

I haven't contacted customer support. I usually resolve any issues through online forums and the community web page.

I have experience with Cisco as well. I moved to OPNsense because it is free.

The initial setup is pretty straightforward. The deployment process took three to four hours. When I install OPNsense on the premises, I usually allow everything; after that, I go to one location. I work remotely on that firewall or VPN, so the first step is to put it online and remotely access the VPN server or firewall there. After that, I installed and configured it while working remotely.

I'm an integrator, so I mostly use OPNsense for VPN purposes and firewalls, and I use a couple of plugins for web blocking, and that's it. Only one person is required for deployment and maintenance; therefore, I handle all the deployment and maintenance.

I haven't used any licensed operations. But when companies get bigger, they'll probably need a license model. The old companies where I have worked with OPNsense were small.

I would suggest using OPNsense because there's no cost and a good interface. You don't need to use the command line to configure anything like on Cisco; sometimes, you don't need all the technical knowledge to operate OPNSense. Additionally, you have good community support.

Overall, I would rate the solution a nine out of ten.