OPNsense Reviews

The solution is basically an open-source firewall - a next-generation firewall solution. Now we actually use it at a client or company's request. They use it if they prefer something that is more versatile than a Cisco or Fortinet device.

The security has improved as we can isolate the network.

We can do attrition prevention via a tool that comes with the solution.

We can have a VPN solution in place for those that work from home, outside the network, in a secure manner.

We also like that it offers good authentication. It offers radius-based authentication, which has been useful for the company. 

The main platform is under the Open VPN firewall.

The solution has high availability. When we have different ISPs, we can actually load balance those links or actually put some priority or even classify the traffic that might go into one ISP or another.

The primary use case of this solution is to detect and block malicious traffic, malicious files, and malicious links to protect the internal network from any external malicious website that may contain a virus or malware.

The most valuable features in OPNsense are reporting and visibility. 

The visibility is awesome. With the visibility, you can see the data source, data destination, the source port, destination port, protocols, the most used, the malicious files that have been detected and blocked, the countries the customer has visited, and the IPs based on Suricata.

OPNsense also has ClamAV, which is a great tool.

We are using it for intrusion detection and prevention. The firewall comes with a lot of third-party modules, and we also use proxy functionalities.

In our company, we are using it as an appliance, but we are bringing companies to the cloud. We ourselves do not have an Azure layer, but we have got a contract from a customer to bring them to the cloud. So, we are installing it there and monitoring it, but it is not owned by our company. OPNsense is available on appliances, but we have made a special integration with Azure. There is a special mechanism in Azure to deploy firewalls, and we have installed three or four of them.

We always have the latest version on the firewalls. One should run the updates very frequently.

We are onboarding cloud solutions for customers. We are on Azure. Especially on Azure, when the customers start, they always have small environments. We were looking for the best firewall solution for small environments, not big environments. We needed a small firewall, and we came across OPNsense. For small customers, we will use OPNsense in the future due to cost reasons. These are small installations, and Azure Firewall is very expensive.

Our primary use case of this solution is for VPN connections. We are currently supporting an SAP company, which has many customers, and most customers need a site-to-site active set connection for maintaining the SAP systems. We currently have round about 200 VPNs.

The feature I find most valuable is that the program helped me to realize all the requested functionality that was needed:

- IPsec VPN connections to remote gateways from various Vendors

- IPsec VPN connections with SNAT (our local network in use at remote site)

- IPsec connections with DNAT (remote network in use at our local site)

- Let's Encrypt certificate for WebGUI

- SSH Access by Putty to the device

The primary use case is managing security and commercial network traffic.

The DNS-level filtering is impressive for thwarting time scanners. The VPN functionality is also crucial for my needs, as I connect to multiple locations simultaneously. Running the CBN server on the VPN is exceptionally reliable and efficient.

The primary use case of OPNsense for me is VPN and firewall rules.

URL blocking, Wireguard, Tail Scale, Engine Blocker, and VPN are the most valuable features for me.

The most valuable feature is the Dual WAN in OPNSense, which offers advanced capabilities. It has cost-effective communication options and the flexibility to deploy on your hardware. I like the security aspects, particularly through package managers. It allows for subscription-based enhancements, providing an additional layer of security to the network.

I would like better documentation concerning the provided packages and their integration. Improved guidance on package usage and integration beyond relying on external tutorials or community support would be beneficial. Additionally, having community support available for the free edition, which is suitable for home users, would be valuable.

I use OPNsense primarily for network security. It involves basic firewall operations and GeoIP location functionalities. I've got multiple versions running, some on hardware purchased and some on VPSs.

The most valuable features include the basic firewall functionality and the GeoIP location services. OPNsense is very stable, easy to upgrade, and maintain. I can work efficiently, knowing it does what it needs to do.