Netgate pfSense Plus Firewall/VPN/Router vs OPNsense comparison

Netgate pfSense Plus Firewall/VPN/Router vs. OPNsense

Download the complete report

Helped 900,644 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Mageshwaran S

Solution Architect at airtel

Enables customers to manage security effortlessly with intuitive features and easy integration

In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.

Read full review

Jim Voige

Site Manager at a consultancy with 11-50 employees

High availability routing has secured our network and delivers reliable support every day

One downside of Netgate pfSense Plus Firewall_VPN_Router is the need for a better understanding of what hardware it would run on. Right now, we're using Netgate's hardware, but I'm interested in knowing if there are other hardware options available, particularly heavier duty hardware, because the Supermicro 1537 version we have only has a single power supply, which is a shortcoming in an IT environment where dual power supplies are ideal. The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options. I'm familiar with the costs of Supermicro servers, and I believe Netgate charges a premium for their server hardware without enough upside to justify it. The pricing is not justified.

Read full review

Moutaz Sheikh Alard

ISO 27001 Lead Implementer at a consultancy with 11-50 employees

Has helped simulate enterprise security setups and strengthens network segmentation practices

For my capstone, I use OPNsense for my project and its broader benefits for enterprise and cybersecurity context. OPNsense is an open source based firewall and routing platform. It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost. This platform has a modular design, a clean web-based GUI, and frequent updates that prioritize security and usability. It competes with commercial firewalls such as Cisco ASA, FortiGate, and Palo Alto, but stands out because it's community-driven, cost-effective, and transparent. I find OPNsense's feature of acting as a central firewall and gateway most valuable, providing robust point segmentation between the internal network and DMZs in my capstone project, intrusion detection to monitor malicious traffic, VPN services for secure remote access, and logging and monitoring for compliance and auditing. This allows me to simulate a real-world enterprise environment on a smaller scale, demonstrating both security hardening and network efficiency. OPNsense impacts my projects and home network positively because its cost-effectiveness is perfect for lab and enterprise setup without expensive licensing. The flexibility, easy VLAN and DMZ configuration supports different zones such as web servers, mail servers, and log servers. The security-first design for IDS/IPS integration helps me showcase modern defense-in-depth strategies. The user-friendly management through the web GUI makes it possible to manage complex firewall rules clearly, which is critical when documenting and presenting a capstone. Scalability is also an advantage. Although my project is lab-based, OPNsense can scale into production deployments in SMBs and enterprise.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is used in my company since its management is very comfortable"

"Overall Fortinet FortiGate is a good solution."

"Whenever we raise a complaint with FortiGate, their response and resolution times are minimal."

"FortiGate Next Generation Firewall (NGFW) 's most valuable features are reporting and filtering."

"It's a good product that significantly enhances security and protects organizational data."

"The most valuable feature of Fortinet FortiGate SWG is its stability."

"In a scenario where FortiGate Next Generation Firewall (NGFW) notably enhanced my customer's network performance, we discussed many points."

"The reliability of Fortinet FortiGate is through the roof, we're experiencing 99.999% availability consistently."

More Fortinet FortiGate pros

"Overall, the entire Netgate pfSense Plus Firewall_VPN_Router product has been reliable, though some of their smaller gear aimed at remote offices hasn't been cost-effective."

"They are more satisfied with Netgate pfSense Plus Firewall_VPN_Router in terms of its flexibility and customer support."

"I do not have complaints about Netgate pfSense Plus Firewall_VPN_Router with Firewall, VPN, and Router; it is really comfortable for use, and it does a pretty good job."

"My experience with the product is that it is a stable and good product that is easy to use."

"We use pfSense and Netgate pfSense Plus Firewall/VPN/Router to establish a VPN tunnel between our client and our headquarters to transfer data between client and our equipment; it's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."

"It's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."

"I have found the solution has some great features overall, such as guest access capabilities, dashboards, and ease of use. There is plenty of documentation and support and it has the plugins that I needed."

"Based on my experience, the main benefits OPNsense provides for me are due to the limitation in getting financials to implement the most marketable solutions available in the market, which pushed me to find other open-source-related or cheaper solutions, and that is how I came upon OPNsense and pfSense, but OPNsense was the choice in this decision, providing a simple but also effective solution on a low budget."

"The most valuable features of OPNsense are the GUI and frequent updates."

"OPNsense is a great tool for problem-solving with a VPN."

"The most valuable feature is the Dual WAN in OPNSense, which offers advanced capabilities."

"OPNsense is easy to use and open source."

"I find everything valuable in OPNsense; the configuration and reporting aspects are what we require, reporting on user access and data consumed is fascinating in OPNsense, and the configuration offers a clear idea of everything that I have configured in DHCP."

"The interface and the dashboard are the most valuable features of this solution."

More OPNsense pros

Cons

"The product does need better support in the cloud environment. It's not exactly cloud-native right now."

"We haven't tapped into most of the functionalities that Fortinet FortiGate offers because we're using it just for gateway security. One of the things that I would prefer is a more expansive use of their analyzer. They could do more work on FortiAnalyzer in terms of the data and the information coming from it."

"The one concern I have with Fortinet FortiGate is the firmware versions, which often have many bugs when upgraded, leading us to revert back to older versions multiple times in my lifecycle."

"Fortinet FortiGate IPS could improve the VPN. There are times it is slow."

"Currently, FortiGate is providing SSL VPN. But they're missing some features that are available in Palo Alto's SSL VPN."

"With the standard support subscription, if the device goes down, the customer has to first ship the box, and then Fortinet sends the replacement. With the higher support, the customer has to ship the device after they have the replacement. It would be better for customers to get immediate replacements even with a standard subscription."

"The speed of the detection could be improved. The prevention mechanisms and implementation are not easy and could be better."

"The firmware needs improvement because there are bugs when a new release comes through."

More Fortinet FortiGate cons

"The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options."

"They have to learn something more from FortiGate."

"I would assess the effectiveness of Netgate pfSense Plus Firewall_VPN_Router's traffic shaping as good, but I would give a six marks only for that compared to others because in the past few years, there has been a stop of improvement or lack of improvement showing in Netgate pfSense Plus Firewall_VPN_Router."

"The most significant drawback in recent years has been the cessation of firmware release downloads."

"The effectiveness of Netgate pfSense Plus Firewall_VPN_Router traffic shaping is quite good, but I am not very satisfied with the interface for control."

"In terms of improvement, the performance could be enhanced."

"There are a few weaknesses. For example, there is a lack of some features that I have in certain commercial products."

"The ability to set the VPN IP address would be a welcome addition."

"An area for improvement in OPNsense is the hardware, which needs to be updated more frequently. DNS blocking is another good feature I want to be added to the solution. pfSense has a peer-blocking feature that I also want to see in OPNsense."

"To use Intrusion detection and Antivirus Plugin it is necessary to configure proxy; without a proxy, you cannot use the ClamAV antivirus plugin."

"I would like better documentation concerning the provided packages and their integration."

"We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much."

"When using the solution at the beginning was difficult. There was a steep learning curve."

More OPNsense cons

Pricing and Cost Advice

"The pricing for this solution is reasonable."

"The platform offers a reasonable price point compared to its competitors."

"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."

"Fortinet FortiGate as a less expensive solution than Palo Alto."

"While Fortinet FortiGate has a higher price point compared to Sophos XG, its user-friendly interface justifies the cost."

"It is a cost-effective solution that meets the user's needs."

"It could be more competitive and cost-effective."

"When comparing this solution to others, I would rate it a ten out of ten in terms of pricing. However, the issue of requiring a separate license for redundancy is a drawback, and I would rate it a nine out of ten."

More Fortinet FortiGate pricing and cost advice

Information not available

"It is not an expensive product. Basically, I deployed it because it was the fastest solution to satisfy our needs in open source."

"OPNsense is open source software so at this time it is free for us to use."

"It's a free solution."

"It is free."

"The solution is not expensive."

"The price of OPNsense is good."

"I've used the free version. My computer with two network cards at home allows me to try as many different software options as I want. I did pay for the license, but it was for the Zenarmor license, which is the packet inspection tool. They use AI for packet inspection, which integrates with OPNsense and pfSense."

"I would rate the pricing a nine out of ten, especially considering the availability of a free community edition."

More OPNsense pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

900,644 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Construction Company

38%

Comms Service Provider

10%

Healthcare Company

Manufacturing Company

Comms Service Provider

17%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	370
Midsize Enterprise	138
Large Enterprise	195

No data available

By reviewers
Company Size	Count
Small Business	32
Midsize Enterprise	6
Large Enterprise	8

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What needs improvement with Netgate pfSense Plus Firewall/VPN/Router?

Netgate pfSense Plus Firewall/VPN/Router regularly provides updates. One aspect they can improve is that most people ...

What is your primary use case for Netgate pfSense Plus Firewall/VPN/Router?

We work with Netgate products. We are a reseller and consultant. We have been working with Netgate and Fortinet for a...

What advice do you have for others considering Netgate pfSense Plus Firewall/VPN/Router?

For metrics to measure its impact, we do not measure in a formal way. We use bandwidth monitoring to check how effect...

What is the difference between PfSense and OPNsense?

Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...

What is your experience regarding pricing and costs for OPNsense?

Setup cost is almost zero as one can simulate the whole environment using open source version. Pricing seems fair eno...

What needs improvement with OPNsense?

When I talk about VPN, I am not completely satisfied with the VPN functions of OPNsense. What I have received so far ...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 2% of the time

More Fortinet FortiGate Competitors

VyOS Platform vs Netgate pfSense Plus Firewall/VPN/Router

Compared 42% of the time

More Netgate pfSense Plus Firewall/VPN/Router Competitors

Netgate pfSense vs OPNsense

Compared 52% of the time

IPFire vs OPNsense

Compared 6% of the time

Sophos Firewall vs OPNsense

Compared 5% of the time

Sophos UTM vs OPNsense

Compared 3% of the time

Cisco Secure Firewall vs OPNsense

Compared 3% of the time

More OPNsense Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Netgate pfSense Plus Firewall/VPN/Router

Download Netgate pfSense Plus Firewall/VPN/Router product report

Netgate pfSense Plus Firewall/VPN/Router report

OPNsense

Download OPNsense product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Netgate pfSense Plus Firewall/VPN/Router offers open-source, license-free software with strong VPN options and robust networking capabilities, supporting secure, scalable, and reliable IT infrastructure integration.

Netgate pfSense Plus Firewall/VPN/Router stands out with its open-source framework, providing organizations the freedom from annual license renewals and enabling focus on CAPEX. It integrates seamlessly within IT environments, offering extensive package availability for broad functionality. Equipped with WireGuard, OpenVPN, and IPsec, it ensures robust VPN configurations. Its traffic shaping, load balancing, and failover functionalities enhance network performance, while Multi-WAN connections boost uptime. Users benefit from its affordability, scalability, VLAN support, and consistent secure operations. However, clearer communication on antivirus capabilities and interface improvements for speed is needed. The equipment's transition to cloud-based firmware updates has seen mixed reception.

What are the key features of Netgate pfSense Plus Firewall/VPN/Router?

License-Free Software: Avoid annual renewals, allowing financial focus on CAPEX.
Strong VPN Options: Supports WireGuard, OpenVPN, and IPsec for secure connections.
Traffic Shaping and Load Balancing: Optimizes network performance and reliability.
Multi-WAN Capability: Enhances connectivity and ensures consistent uptime.
VLAN Support: Allows efficient network segmentation and management.
Open-Source Nature: Provides transparency and continuous community-driven enhancements.

What benefits and ROI should users look for in reviews?

Cost Efficiency: Reduces expenditure with license-free, open-source software.
Scalability: Grows with organizational demands without added costs.
Reliability: Ensures secure, stable connections with minimal downtime.
Ease of Use: Simplified configuration and management for technical teams.
Community Support: Backed by a knowledgeable user community for ongoing support.

In educational settings, such as universities and engineering colleges, Netgate pfSense Plus Firewall/VPN/Router facilitates secure VPN tunnels for data transfer. It sees application as a high-availability BGP setup among consultants and resellers, ensuring reliability and network efficiency.

Netgate

OPNsense is an adaptable open-source firewall and routing platform appreciated for its flexibility, scalability, and user-friendly interface. It is equipped with robust security features and offers excellent reporting and visibility, essential for small businesses and home setups.

OPNsense stands out for its modular design, allowing cost-effective customization. This system supports VPNs and various firewall capabilities, making it suitable for securing networks from malicious traffic. Its frequent updates and extensive documentation, combined with a supportive online community, enhance user experience. However, there is room for improvement in integration with virtual servers and Azure. Scalability and hardware updates are important for large-scale environments, and users desire more reliable VPN solutions and enhanced threat intelligence tools.

What are OPNsense's most important features?

Flexibility: Easily customizable due to its open-source nature.
Robust Security: Advanced security features for network protection.
User-Friendly Interface: Simplified management and configuration.
Frequent Updates: Regular improvements and new features.
Dense Documentation: Extensive resources and community support.

What benefits should users look for in reviews?

Cost-Effectiveness: Open-source design reduces costs.
Scalability: Ability to grow with business needs.
Customizability: Tailored solutions for different requirements.
Community Support: Access to a strong network of resources and peers.

OPNsense is implemented in industries requiring VPN and firewall functions, supporting site-to-site connections, protecting servers, and managing commercial network traffic. Companies apply it for security, UTM, SD-WAN, content filtering, intrusion detection, and prevention, utilizing its open-source nature and effectiveness as a next-generation firewall.

OPNsense

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

1. Deciso B.V. 2. iXsystems, Inc. 3. EuroBSDCon 4. Netgate 5. Claranet 6. Voleatech 7. Open Systems AG 8. Securebit AG 9. Proxmox Server Solutions GmbH 10. AVM Computersysteme Vertriebs GmbH Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.

Netgate pfSense Plus Firewall/VPN/Router vs. OPNsense