Try our new research platform with insights from 80,000+ expert users

Huawei NGFW vs OPNsense comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
317
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Huawei NGFW
Ranking in Firewalls
31st
Average Rating
7.2
Reviews Sentiment
7.2
Number of Reviews
22
Ranking in other categories
Unified Threat Management (UTM) (13th)
OPNsense
Ranking in Firewalls
3rd
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
39
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of December 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.5%, up from 17.3% compared to the previous year. The mindshare of Huawei NGFW is 0.8%, up from 0.4% compared to the previous year. The mindshare of OPNsense is 14.6%, down from 17.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

DineshKumar28 - PeerSpot reviewer
Effective threat prevention with responsive customer support
We are using Fortinet FortiGate as a firewall Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability. The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in…
Muhammad-Nadeem - PeerSpot reviewer
A scalable and easy-to-setup product that can be used to configure different policies for specific users
In other next-generation firewalls, if you are creating virtual systems, they will create separate hardware resources for different virtual systems. Other products will create a different routing table when we create a routing protocol. In Huawei, the routing table, control plan, and data plan will share the resources. Every virtual system should have separate resources, routing tables, and hardware resources. We have created multiple segments and virtual systems, and we don't want one segment to communicate with another. The product must divide the virtual firewalls with different utilization systems. The hardware, routing switch, and security bundle should be separate and different. The solution does not have sandboxing features. It should provide a sandboxing solution. It should also work on zero-day attacks. The solution should be comparable with the products provided by Palo Alto, Check Point, and Cisco.
Eddy Ramirez - PeerSpot reviewer
Good interface and firewall capabilities and overall easy to use
The security has improved as we can isolate the network. We can do attrition prevention via a tool that comes with the solution. We can have a VPN solution in place for those that work from home, outside the network, in a secure manner. We also like that it offers good authentication. It offers radius-based authentication, which has been useful for the company. The main platform is under the Open VPN firewall. The solution has high availability. When we have different ISPs, we can actually load balance those links or actually put some priority or even classify the traffic that might go into one ISP or another.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The threat prevention is the solution's most valuable aspect."
"It's great for capturing the traffic and troubleshooting it."
"The features that I have found most valuable are that it is good to use, and most importantly, the pricing. The customer especially likes the discount when they trade up or something like that."
"FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime."
"Fortigate is very scalable to serve our customers' needs. We have scaled already from fifty to more than a hundred instances of Fortinet FortiGate. Around 20 staff are required for deployment and maintenance, mostly engineers."
"I have found Fortinet FortiGate to be scalable."
"I like Fortinet's cloud management. It allows me to manage all my devices in different branches for three cloud accounts. Even though I use on-prem devices, I can manage everything on the cloud."
"It blocks the vulnerabilities that can negatively impact us."
"The solution's implementation is pretty easy."
"The operational management dashboard is easy to use for the customers."
"The UI is quite good."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"The most useful feature is the performance of the firewalls and networking operations."
"The security is good. It's as effective as anything else on the market."
"The solution's initial setup process is easy."
"I had no difficulty using the Huawei NGFW."
"I find the solution to be user-friendly. It has a lot of reports and easy settings."
"It's open source."
"OPNsense could improve by making the configuration more web-based rather than shell or command-line-based."
"We can open a new VPN connection easily. It's much easier than with Fortinet in our experience."
"What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control."
"The most valuable features of OPNsense are the GUI and frequent updates."
"The most valuable features in OPNsense are reporting and visibility."
"The solution has high availability."
 

Cons

"NGN, reporting and controls."
"We had a minor problem where there was a major system upgrade on the hardware platfrom and the Mac client was not available as soon as it might have been. The PC client was available immediately, but we had to wait a month or so, before there was a mac client. I was slightly irritated that it was not ready on time, but it was eventually resolved."
"There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes."
"The graphical user interface of Fortinet's FortiGate product does not function well with text-based interfaces."
"Fortinet FortiGate is a stable solution. However, my issue is the performance only. When I use all the profiles, this affects the performance. From the beginning, I should have had a better sizing of the box."
"Security is a continuous process. In every product, there is a requirement for improvement. Its pricing should also be improved according to Indian market requirements. They must also improve on the reporting part. Its reporting can be more precise. If we can get a real-time report in a specific format, it will be helpful for customers to know about the current status of their security."
"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."
"There is a lot of improvement needed with SSL-VPN."
"The WAF capability in the Huawei Firewall is missing."
"The user interface could be more user-friendly."
"Huawei also need to improve spam techniques and add a web application firewall. Currently, Huawei does not have a built-in web application firewall (WAF) like Fortinet does."
"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."
"The solution does not have sandboxing features."
"The tool does not have web functionality. It needs to also have high end firewalls."
"The tool lacks features."
"The solution could be more secure and have better integration."
"OPNsense struggles to handle large volumes of voice traffic, indicating scalability issues in that specific use case."
"The support for OPNsense is good because we have documents available on the internet. The support could improve a little."
"I would like better documentation concerning the provided packages and their integration."
"The solution would not be suitable for anything large-scale."
"The user interface could be improved, and the DNS section should be more intuitive."
"OPNsense could improve by making the configuration more web-based rather than shell or command-line-based."
"Given that OPNsense plays a pivotal role as a firewall, safeguarding against various threats, having a reliable backup ensures uninterrupted protection even if unforeseen events impact the primary virtual machine."
"pfSense has better performance and quicker updates."
 

Pricing and Cost Advice

"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
"While Fortinet FortiGate has a higher price point compared to Sophos XG, its user-friendly interface justifies the cost."
"The price for the device and software is high. However, the solution is of good quality and has a lot of features."
"We are on an annual license to use Fortinet FortiGate."
"Fortinet FortiGate as a less expensive solution than Palo Alto."
"In terms of the market, it's not a cheap product, but it's cost-effective."
"The pricing of the solution is very competitive."
"Go for long term pricing negotiated at the time of purchase."
"Huawei is 30% cheaper than Arista."
"The solution is inexpensive."
"The solution isn't cheap. It's market price."
"The pricing is cheap."
"When you compare the price with other products, it's quite cost-effective. But the problem is always after, let's say, two years or three years later because they are not able to provide updates or patches very quickly."
"The price of the license of this solution is high."
"I believe that we are entitled to a one-year extension on our licensing."
"Licensing fees are billed on an annual basis."
"OPNsense is an open-source solution and it is free to use."
"It's a free solution."
"It costs about $1000."
"OPNsense is open source software so at this time it is free for us to use."
"It is not an expensive product. Basically, I deployed it because it was the fastest solution to satisfy our needs in open source."
"I would rate the pricing a nine out of ten, especially considering the availability of a free community edition."
"It is free."
"It's not expensive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Computer Software Company
18%
Financial Services Firm
11%
Comms Service Provider
8%
Educational Organization
7%
Computer Software Company
16%
Comms Service Provider
11%
Government
8%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Huawei NGFW?
The solution's implementation is pretty easy.
What is your experience regarding pricing and costs for Huawei NGFW?
The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.
What needs improvement with Huawei NGFW?
Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What do you like most about OPNsense?
What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control.
What is your experience regarding pricing and costs for OPNsense?
I consider the pricing of OPNsense to be high when compared with other market products. However, as a free firewall p...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series
No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
KMITL, Peking University
1. Deciso B.V. 2. iXsystems, Inc.  3. EuroBSDCon  4. Netgate  5. Claranet  6. Voleatech  7. Open Systems AG  8. Securebit AG  9. Proxmox Server Solutions GmbH  10. AVM Computersysteme Vertriebs GmbH  Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.
Find out what your peers are saying about Huawei NGFW vs. OPNsense and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.