客戶登錄

技術支援中心

1sthost_support
24小時技術支援 :
解決問題/技術
支援/提供服務
的系統, 讓我們
工程師跟進您
的問題...

辦公時間
致電辦公室

+852.2370 0993

非辦公時間
緊急技術支援
Chat 服務
WhatsApp:
+852.2370 0993

1sthost Web Design

Read more...

OPNSense Firmware
There are no translations available.

opnsense_250x50.png

 

 

 

OPNsense firmware is an NEXT Generation firewall and router distribution based on hardenBSD that is functionally competitive with expensive, proprietary commercial firewalls.

OPNSense software-based appliances can be configured as a stateful packet filtering firewall, a LAN or WAN router, VPN Appliance, DHCP Server, DNS Server, or can be configured for other applications and special purpose appliances. This next generation pfSense security appliance features include:
  • Stateful packet filtering firewall or pure router
  • Routing policy per gateway and per-rule for failover and load balancing
  • Transparent layer 2 firewall
  • Support for IPV6, NAT, BGP
  • Captive portal with MAC filtering, RADIUS support, etc
  • VPN: IPsec, OpenVPN, L2TP
  • Dynamic DNS client
  • Reporting and monitoring features with real time information

Overview

Configuration

How you configure the pfSense software is largely dependant on the needs you're trying to meet.

If you need professional assistance configuring your deployment, you can use our commercial support and local implementation to help get you up and running.

OPNsense Firmware Features

OPNsense is a highly configurable, full-featured solution that meets any need from the edge to the cloud.

Applications

  • VPN Server
  • High Availability
  • Load Balancing
  • Traffic Shaping
  • Captive Portal
  • UTM Device
  • Firewall / Router
  • DNS / DHCP Server
  • IDS / IPS
  • Transparent Caching Proxy
  • Web Content Filter
  • And more ...

Features

Firewall and Router

  • Stateful Packet Inspection (SPI)
  • GeoIP blocking
  • Anti-Spoofing
  • Time based rules
  • Connection limits
  • Dynamic DNS
  • Reverse proxy
  • Captive portal guest network
  • Supports concurrent IPv4 and IPv6
  • NAT mapping (inbound/outbound)
  • VLAN support (802.1q)
  • Configurable static routing
  • IPv6 network prefix translation
  • IPv6 router advertisements
  • Multiple IP addresses per interface
  • DHCP server
  • DNS forwarding
  • Wake-on-LAN
  • PPPoE Server

VPN

  • IPsec and OpenVPN
  • Site-to-site and remote access VPN support
  • SSL encryption
  • VPN client for multiple operating systems
  • L2TP/IPsec for mobile devices
  • Multi-WAN for failover
  • IPv6 support
  • Split tunneling
  • Multiple tunnels
  • VPN tunnel failover
  • NAT support
  • Automatic or custom routing
  • Local user authentication or RADIUS/LDAP

Intrusion Prevention System

  • Snort-based packet analyzer
  • Multiple rules sources and categories
  • Emerging threats database
  • IP blacklist database
  • Pre-set rule profiles
  • Per-interface configuration
  • Suppressing false positive alerts
  • Deep Packet Inspection (DPI)
  • Optional open-source packages for application blocking

Enterprise Reliability

  • Optional multi-node High Availability Clustering
  • Multi-WAN load balancing
  • Automatic connection failover
  • Bandwidth throttling
  • Traffic shaping wizard
  • Reserve or restrict bandwidth based on traffic priority
  • Fair sharing bandwidth
  • User data transfer quotas

User Authentication

  • Local user and group database
  • User and group-based privileges
  • Optional automatic account expiration
  • External RADIUS authentication
  • Automatic lockout after repeated attempts

Proxy and Content Filtering

  • HTTP and HTTPS proxy
  • Non Transparent or Transparent caching proxy
  • Domain/URL filtering
  • Anti-virus filtering
  • SafeSearch for search engines
  • HTTPS URL and content screening
  • Website access reporting
  • Domain Name blacklisting (DNSBL)
  • Usage reporting for daily, monthly, etc.

Administration

Configuration

  • Web-based configuration
  • Setup wizard for initial configuration
  • Remote web-based administration
  • Customizable dashboard
  • Easy configuration backup/restore
  • Configuration export/import
  • Encrypted automatic backup to Netgate server
  • Variable level administrative rights
  • Multi-language support
  • Simple updates
  • Forward-compatible configuration
  • Serial console for shell access and recovery options

System Security

  • Web interface security protection
  • CSRF protection
  • HTTP Referer enforcement
  • DNS Rebinding protection
  • HTTP Strict Transport Security
  • Frame protection
  • Optional key-based SSH access

Reporting & Monitoring

  • Dashboard with configurable widgets
  • Local logging
  • Remote logging
  • Local monitoring graphs
  • Real-time interface traffic graphs
  • SNMP monitoring
  • Notifications via web interface, SMTP, or Growl
  • Hardware monitoring
  • Networking diagnostic tools

netgate-xg-2758-dual.jpg

 

Call Sales and Support

Please whatsapp/call office +852.23700993 or Email : sales_team @ 1sthost.com for enquiry ...