No more typing reviews! Try our Samantha, our new voice AI agent.

OPNsense vs Stormshield Network Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OPNsense
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
47
Ranking in other categories
Firewalls (7th)
Stormshield Network Security
Average Rating
7.8
Reviews Sentiment
5.4
Number of Reviews
18
Ranking in other categories
Unified Threat Management (UTM) (12th)
 

Featured Reviews

PM
IT Manager at a comms service provider with 201-500 employees
Open-source firewall has provided affordable real-time protection and secure remote access
In my opinion, OPNsense could improve by incorporating either an open side of wireless management or a way that you can also manage your interconnected devices. You could easily have SNMP, Simple Network Management Protocol, incorporated in it so that you can easily manage the devices and easily get the information about the devices that you are managing. Additionally, the inclusion of Pi-hole would allow you to create an ad-free network instead of adding it on a separate device. I would prefer that incorporated into OPNsense, or if it is there, I would appreciate guidance on how to use it.
Zsolt Jónás - PeerSpot reviewer
System Administrator at NaxoNet
Advanced GUI and layered security have supported compliance and simplified intrusion prevention
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability solution with Stormshield Network Security, you have a main device and another one is a backup device. The HA can switch between them, but it would be good to have a master-master solution, not just a master-slave one. I could set a URL that I can call to update the DNS record. Currently, Stormshield Network Security devices support DynDNS, which is not a usual feature request from a server environment. I have my own solution instead of DynDNS because I don't prefer it, so I have my own service for that. However, the GUI does not support using a custom service instead of DynDNS. I had to solve it in the console on Stormshield Network Security device, but it would be much better if it was reachable on the GUI. I had to figure out a trick for the IPsec configuration. In the IPsec config, we have to provide the remote side's IP address, but it's always changing. This means that an office, for example a company that has an office but without a fixed IP address, cannot be used with IPsec VPN.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I find everything valuable in OPNsense; the configuration and reporting aspects are what we require, reporting on user access and data consumed is fascinating in OPNsense, and the configuration offers a clear idea of everything that I have configured in DHCP."
"We can open a new VPN connection easily. It's much easier than with Fortinet in our experience."
"The system in general is quite flexible."
"What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control."
"It has firewall and VPN capabilities, which are very valuable features."
"The DNS-level filtering is impressive for thwarting time scanners."
"One of the most valuable features is the network checking. Additionally, the firewall and web filtering functionalities are highly useful."
"OPNsense impacts my projects and home network positively because its cost-effectiveness is perfect for lab and enterprise setup without expensive licensing, and the flexibility, easy VLAN and DMZ configuration supports different zones such as web servers, mail servers, and log servers."
"The features I find most valuable is the backup inspection, the filtering, and the load balancing, and I am also impressed by the antivirus feature that gives us two controls over the viruses - one is from the parameter and one on the endpoint."
"The most valuable features of this solution are the URL filtering database, which is great and contains all internet categories, the highly scalable interface that I can turn into what I want including hybrid, bridge, or router mode, the security with no back doors that is more secure than other solutions, and the hardware performance that is also better than others."
"It's an easy, straightforward management platform to use."
"Our organization's main concern is stability, and this is a stable solution."
"Stormshield Network Security is a very stable solution and the solution works perfectly so we never had to contact technical support."
"This product has improved the way our organization functions."
"I like how you can configure the rules. There is the task for the rules and a task for the network configuration. It also provides SMD filtering, and it can be integrated with the active directory for the users, their mission, and the VPN configuration. We are here in Sudan, and Stormshield didn't work in Sudan for more than a decade. Stormshield is a very strong firewall and very easy to configure and maintain. I am just working with the firewall solution, and we don't have any other solutions like endpoint solutions or something like that."
"The performance of this solution is good."
 

Cons

"The IPS solution could be more reliable."
"There are some add-ons that need enhancements to make management easier for users, especially the reporting features. Some reports don't show the level of detail I'm looking for, and I've had trouble installing certain add-ons, especially for Internet bandwidth shaping within my company."
"The feature that I would like to see in the next release, I think, would be to improve the VPN (Virtual Private Network) selection."
"The support service isn't very accessible, so you have to look at the forums to solve some issues."
"SD-WAN (software-defined wide area network) is integrated into some restricted service providers for OPNSense."
"The solution would not be suitable for anything large-scale."
"The interface isn't so friendly user. But we have some technicians here who are quite confident with this tool. OPNSense could maybe add sets of rules so it's simpler to manage different groups with particular needs."
"The user interface could be improved, and the DNS section should be more intuitive."
"The stability is not that good based on my experience. We have a lot of disruptions when it comes to Stormshield."
"The filtering configuration could be better. We have some difficulties with the filtering configuration and the filter extension. It's not that easy. It's not that straightforward. In the next release, I would like to see a reporting system. Stormshield doesn't have any tutorials on how to do the configuration and things like that. They just have documentation on the website. If you want to configure, for example, Cisco or Fortinet, you can find tutorials on YouTube. They show you how to configure the features, and so on. In Stormshield, there is nothing on social media or the internet on how to configure different things. The lack of documentation or the lack of material makes it difficult for others to adopt this solution."
"The SD card could be more secure."
"The main area of this product that has room for improvement is pricing. Stormshield Network Security is quite expensive."
"Being more cost effective. I went with a pair of Watchguard M300 recently when buying a new firewall cluster for our own use because it was way cheaper than NetASQ/Stormshield N700 while being faster, and it offers true multi-master firewall clustering if needed."
"The pricing of this solution needs to be decreased."
"One thing, though, is that not all the fields are activated yet and we were informed that it will take at least one month."
"It could be better if it were more user-friendly for us as we dont use it very often even if we never had problems to modify setup when needed."
 

Pricing and Cost Advice

"Its pricing is unbeatable in comparison to other firewalls. You can have a small instance that could be €80 a month with the hardware underneath. Azure Firewall and FortiGate are out of the question at this price. If you are on a public cloud, you need the underlying infrastructure. Other than that, there is no additional cost. If you have it on-prem, you have to buy the server or the appliance. The hardware cost is replaced with the infrastructure cost in the cloud. You also have costs for the public IPs and underlying VMs, but that's not related to OPNsense. It would be the same for a FortiGate deployment on Azure. You need a FortiGate license, and you need the underlying infrastructure that scales up depending on your needs."
"It is open source and free."
"I would rate the pricing three out of ten."
"It's not expensive."
"The solution is not expensive."
"I've used the free version. My computer with two network cards at home allows me to try as many different software options as I want. I did pay for the license, but it was for the Zenarmor license, which is the packet inspection tool. They use AI for packet inspection, which integrates with OPNsense and pfSense."
"I'm using the free version of OPNsense. I didn't check the pricing for the solution because I still need to test it before getting the approval to purchase OPNsense, and it isn't easy to get approval from the higher-ups."
"OPNsense is an open-source solution and it is free to use."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
"For mid-sized companies, they sell their appliances for good prices."
"I think the price is good."
"The pricing could be better."
"The price of this solution and the price of support are ok."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Manufacturing Company
8%
Outsourcing Company
8%
Computer Software Company
7%
Comms Service Provider
17%
Manufacturing Company
12%
Construction Company
9%
Outsourcing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise6
Large Enterprise8
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and client, Open VPN and client, and PPTP client. Both also have intrusion detection a...
What is your experience regarding pricing and costs for OPNsense?
Setup cost is almost zero as one can simulate the whole environment using open source version. Pricing seems fair enough. Open source license allows a beginner to have a complete firewall solution ...
What needs improvement with OPNsense?
When I talk about VPN, I am not completely satisfied with the VPN functions of OPNsense. What I have received so far is that sometimes the VPN route caches for some time and sometimes I want to cha...
What needs improvement with Stormshield Network Security?
I haven't had a task that I couldn't solve with Stormshield Network Security. The active-active high availability solution would be beneficial because currently, if you build a high availability so...
What is your primary use case for Stormshield Network Security?
I already use Stormshield Network Security, and I am now looking for a new solution. I am already working with Stormshield Network Security, and the official reseller of Stormshield.
What advice do you have for others considering Stormshield Network Security?
The pricing is increasing, and I would say it is a bit expensive. Palo Alto and others are much more expensive, but Stormshield Network Security is also not inexpensive. My overall review rating fo...
 

Also Known As

No data available
NETASQ Firewalls
 

Overview

 

Sample Customers

1. Deciso B.V. 2. iXsystems, Inc.  3. EuroBSDCon  4. Netgate  5. Claranet  6. Voleatech  7. Open Systems AG  8. Securebit AG  9. Proxmox Server Solutions GmbH  10. AVM Computersysteme Vertriebs GmbH  Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about OPNsense vs. Stormshield Network Security and other solutions. Updated: November 2026.
920,769 professionals have used our research since 2012.