Hey everyone! We're planning to upgrade our perimeter firewall soon and are considering options like OPNsense or pfSense, moving away from our current SonicWall NSA-series because the cost of security service licenses has skyrocketed recently. We're particularly interested in feedback regarding two hardware options: the Netgate 8300 series and the OPNsense DEC4240 appliance. I'd love to hear your thoughts on their reliability, especially since we aim to set them up in a high availability (HA) configuration with hot standby. Additionally, I'm curious about the effectiveness of their web-filtering and anti-malware plugins, as well as experiences with ZenArmor concerning stability, performance, and ease of configuration. Lastly, can we expect these systems to last over five years? Any insights or real-world experiences would be greatly appreciated!
3 Answers
It's tough to predict how well they'll last for five years unless you’ve actually used a model from around that time. And just a heads-up, if it matters for your decision, the hardware for pfSense comes from an Israeli manufacturer.
Setting up web filtering on OPNsense can be quite a hassle. There’s no simple 'enable' option; you need to install and manage plugins yourself. Depending on your organization's structure, this could be either a positive or negative thing.
I prefer OPNsense over pfSense because of its user-friendly interface and the variety of available packages. It really makes things easier when setting up different functionalities.
That’s true! I find that the web filtering is easier to manage with pfSense since it has the SquidGuard plugin, which offers a more robust blocklist. But honestly, with most sites using HTTPS now, web filtering is becoming less effective unless you're using SSL interception.