OPNSense Firmware

OPNsense firmware is an NEXT Generation firewall and router distribution based on hardenBSD that is functionally competitive with expensive, proprietary commercial firewalls.

OPNSense software-based appliances can be configured as a stateful packet filtering firewall, a LAN or WAN router, VPN Appliance, DHCP Server, DNS Server, or can be configured for other applications and special purpose appliances. This next generation pfSense security appliance features include:

Stateful packet filtering firewall or pure router
Routing policy per gateway and per-rule for failover and load balancing
Transparent layer 2 firewall
Support for IPV6, NAT, BGP
Captive portal with MAC filtering, RADIUS support, etc
VPN: IPsec, OpenVPN, L2TP
Dynamic DNS client
Reporting and monitoring features with real time information

Overview

Configuration

How you configure the pfSense software is largely dependant on the needs you're trying to meet.

If you need professional assistance configuring your deployment, you can use our commercial support and local implementation to help get you up and running.

OPNsense Firmware Features

OPNsense is a highly configurable, full-featured solution that meets any need from the edge to the cloud.

Applications

VPN Server
High Availability
Load Balancing
Traffic Shaping

Captive Portal
UTM Device
Firewall / Router
DNS / DHCP Server

IDS / IPS
Transparent Caching Proxy
Web Content Filter
And more ...

Features

Firewall and Router

Stateful Packet Inspection (SPI)
GeoIP blocking
Anti-Spoofing
Time based rules
Connection limits
Dynamic DNS
Reverse proxy
Captive portal guest network
Supports concurrent IPv4 and IPv6
NAT mapping (inbound/outbound)
VLAN support (802.1q)
Configurable static routing
IPv6 network prefix translation
IPv6 router advertisements
Multiple IP addresses per interface
DHCP server
DNS forwarding
Wake-on-LAN
PPPoE Server

VPN

IPsec and OpenVPN
Site-to-site and remote access VPN support
SSL encryption
VPN client for multiple operating systems
L2TP/IPsec for mobile devices
Multi-WAN for failover
IPv6 support
Split tunneling
Multiple tunnels
VPN tunnel failover
NAT support
Automatic or custom routing
Local user authentication or RADIUS/LDAP

Intrusion Prevention System

Snort-based packet analyzer
Multiple rules sources and categories
Emerging threats database
IP blacklist database
Pre-set rule profiles
Per-interface configuration
Suppressing false positive alerts
Deep Packet Inspection (DPI)
Optional open-source packages for application blocking

Enterprise Reliability

Optional multi-node High Availability Clustering
Multi-WAN load balancing
Automatic connection failover
Bandwidth throttling
Traffic shaping wizard
Reserve or restrict bandwidth based on traffic priority
Fair sharing bandwidth
User data transfer quotas

User Authentication

Local user and group database
User and group-based privileges
Optional automatic account expiration
External RADIUS authentication
Automatic lockout after repeated attempts

Proxy and Content Filtering

HTTP and HTTPS proxy
Non Transparent or Transparent caching proxy
Domain/URL filtering
Anti-virus filtering
SafeSearch for search engines
HTTPS URL and content screening
Website access reporting
Domain Name blacklisting (DNSBL)
Usage reporting for daily, monthly, etc.

Administration

Configuration

Web-based configuration
Setup wizard for initial configuration
Remote web-based administration
Customizable dashboard
Easy configuration backup/restore
Configuration export/import
Encrypted automatic backup to Netgate server
Variable level administrative rights
Multi-language support
Simple updates
Forward-compatible configuration
Serial console for shell access and recovery options

System Security

Web interface security protection
CSRF protection
HTTP Referer enforcement
DNS Rebinding protection
HTTP Strict Transport Security
Frame protection
Optional key-based SSH access

Reporting & Monitoring

Dashboard with configurable widgets
Local logging
Remote logging
Local monitoring graphs
Real-time interface traffic graphs
SNMP monitoring
Notifications via web interface, SMTP, or Growl
Hardware monitoring
Networking diagnostic tools

Call Sales and Support

Please whatsapp/call office +852.23700993 or Email : sales_team @ 1sthost.com for enquiry ...

Customer Login

Support Center

Overview

Configuration

OPNsense Firmware Features

Applications

Features

Firewall and Router

VPN

Intrusion Prevention System

Enterprise Reliability

User Authentication

Proxy and Content Filtering

Administration

Configuration

System Security

Reporting & Monitoring

Call Sales and Support