From Virtual Private Networking to Intrusion Detection, Best in class, FREE Open Source Project.
Version 21.1 - 'Marvelous Meerkat'
From Virtual Private Networking to Intrusion Detection, Best in class, FREE Open Source Project.
Sophos is Sophos which has a UTM offering for home users, presumably so that you try it out commercially. OPNsense is an UTM as well, especially if you add the Sensei plugin. It has a Firewall, WAF, Spam protection, malware scanning etc. If you use and combine the plugins correctly. Sadly not everything can be combined. PfSense report + Fortinet FortiGate (114) + pfSense (32) + Cisco ASA Firewall (82) + Cisco Firepower NGFW Firewall (36) + Check Point NGFW (66) + Sophos XG (64) + Kerio Control (31) + Palo Alto Networks NG Firewalls (60) + Palo Alto Networks VM-Series (15) + SonicWall TZ (24) + Palo Alto Networks K2-Series (12. PfSense report + Fortinet FortiGate (114) + pfSense (32) + Cisco ASA Firewall (82) + Cisco Firepower NGFW Firewall (36) + Check Point NGFW.
Summary, kind of. I replaced my Sophos UTM with OPNsense. Sophos phones home too much, is not open source. OPNsense in comparison to pfSense: - using better BSD, with ASLR (the only check I did so far) - licensed under BSD 2-Clause, vs Apache 2.0 - nicer GUI:) - not running PHP as a root user. 'Sophos UTM is good but to sofisticated for my needs. So I tried OPNsense and now EVERYTHING is as I want to have it. It is simple and with a great GUI.' Boris Hoppe CEO CompuNet Systems GmbH 'OPNsense provides more features, more reliability and more performance than any other commercial firewall product we had in use ever before.
Also checkout the Business Edition
Commercial firmware repository, OVA image, Central Management, integrated GeoIP database, 20% discount on business support package and an easy way to support the project!
SUBSCRIBE
OPNsense® FEATURES
Free & Open source - Everything essential to protect your network and more
FIREWALL
Stateful firewall with support for IPv4 and IPv6 and live view on blocked or passed traffic.Sophos Utm Download
MULTI WAN
Multi WAN capable including load balancing and failover support.
VIRTUAL PRIVATE NETWORKING
Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.
HARDWARE FAILOVER
When you cannot afford downtime use our automatic and seamless hardware failover with state synchronization utilizing the common address redundancy protocol (CARP) to get the highest possible availability.SD-WAN
For easy setup, configuration and monitoring the ZeroTier plugin can be used to setup your Software Defined WAN within minutes.
INTRUSION DETECTION & PREVENTION
Get rid of the Trojans & CNC bots with state of the art inline intrusion prevention utilizing Suricata and Proofpoint's Emerging Threats Open rules integrated. Optional ET PRO (commercial subscription) or ET PRO Telemetry (sign-up for free).
TWO FACTOR AUTHENTICATION
2FA is supported throughout the system, for both the user interface as services such as VPN.
ROUTING PROTOCOLS
Pluggable support for OSPF and BGP using the Free Range Router project.
WEB FILTERING
Fully integrated web proxy with access control and support for external blacklists to filter unwanted traffic.
Other options include firewall aliases and DNS blacklisting.
INTUITIVE USER INTERFACE
The most intuitive fully responsive user interface you'll find in any open source firewall with integrated search option.
MULTI LANGUAGE
User selectable language support including English, Czech, Chinese, French, German, Italian, Japanese, Portuguese, Russian and Spanish.
ONLINE DOCUMENTATION
Fully searchable free online documentation.
WEB APPLICATION FILTERING - SENSEI (FREE & COMMERCIAL OPTION)
As part of our cooperation with Sunny Valley Networks a free version of Sensei can be installed as plugin.
For enhanced features a commercial version can be acquired online directly from Sunny Valley Networks.
AND MUCH MORE
CAPTIVE PORTAL, TCP/HTTP LOAD BALANCER, NETFLOW MONITORING, REST API, and more...
BUSINESS EDITION
The OPNsense® Business Edition is intended for companies, enterprises and professionals looking for a more selective upgrade path (lags behind the community edition), additional
commercial features and who want to support the project in a more commercial way compared to donating. Order your license today direct from our online shop.
OPNsense is a Deciso® Open Source Project
Deciso B.V. started the OPNsense project in 2014 with its first official release in 2015.
CHECKOUT DECISO