Evaluating OPNsense vs Netgate Firewall Appliances for Reliability and Performance
Asked by
TechWizard88
Hey everyone! We're planning to upgrade our perimeter firewall soon and are considering options like OPNsense or pfSense, moving away from our current SonicWall NSA-series because the cost of security service licenses has skyrocketed recently. We're particularly interested in feedback regarding two hardware options: the Netgate 8300 series and the OPNsense DEC4240 appliance. I'd love to hear your thoughts on their reliability, especially since we aim to set them up in a high availability (HA) configuration with hot standby. Additionally, I'm curious about the effectiveness of their web-filtering and anti-malware plugins, as well as experiences with ZenArmor concerning stability, performance, and ease of configuration. Lastly, can we expect these systems to last over five years? Any insights or real-world experiences would be greatly appreciated!
Answers
I prefer OPNsense over pfSense because of its user-friendly interface and the variety of available packages. It really makes things easier when setting up different functionalities.
Reply to this answer
Setting up web filtering on OPNsense can be quite a hassle. There’s no simple 'enable' option; you need to install and manage plugins yourself. Depending on your organization's structure, this could be either a positive or negative thing.
Reply to this answer
It's tough to predict how well they'll last for five years unless you’ve actually used a model from around that time. And just a heads-up, if it matters for your decision, the hardware for pfSense comes from an Israeli manufacturer.
Reply to this answer
Add your answer
Answers are reviewed before publication.
SecuritySavant21: That’s true! I find that the web filtering is easier to manage with pfSense since it has the SquidGuard plugin, which offers a more robust blocklist. But honestly, with most sites using HTTPS now, web filtering is becoming less effective unless you're using SSL interception.