OPNsense® FEATURES

Free & Open source - Everything essential to protect your network and more

FIREWALL
Stateful firewall with support for IPv4 and IPv6 and live view on blocked or passed traffic.
MULTI WAN

Multi WAN capable including load balancing and failover support.

VIRTUAL PRIVATE NETWORKING

Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.

HARDWARE FAILOVER
When you cannot afford downtime use our automatic and seamless hardware failover with state synchronization utilizing the common address redundancy protocol (CARP) to get the highest possible availability.
SD-WAN

For easy setup, configuration and monitoring the ZeroTier plugin can be used to setup your Software Defined WAN within minutes.

INTRUSION DETECTION & PREVENTION

Get rid of the Trojans & CNC bots with state of the art inline intrusion prevention utilizing Suricata and Proofpoint's Emerging Threats Open rules integrated. Optional ET PRO (commercial subscription) or ET PRO Telemetry (sign-up for free).

TWO FACTOR AUTHENTICATION

2FA is supported throughout the system, for both the user interface and services such as VPN.

ROUTING PROTOCOLS

Pluggable support for OSPF and BGP using the Free Range Router project.

WEB FILTERING

Fully integrated web proxy with access control and support for external blacklists to filter unwanted traffic.
Other options include firewall aliases and DNS blacklisting. Block ads with ease!

INTUITIVE USER INTERFACE

The most intuitive fully responsive user interface you'll find in any open source firewall with integrated search option.

MULTI LANGUAGE

User selectable language support including English, Czech, Chinese, French, German, Italian, Japanese, Portuguese, Russian and Spanish.

ONLINE DOCUMENTATION

Fully searchable free online documentation.

NEXT GENERATION FIREWALL EXTENSIONS: ZENARMOR

FREE & COMMERCIAL OPTIONS
Zenarmor is a versatile plug-in extension for OPNsense developed by Sunny Valley Networks. OPNsense users can easily deploy Zenarmor NGFW free of charge with Threat Intelligence to easily secure environments of all sizes, ranging from home networks to multi-cloud deployments. The packet inspection engine is powerful enough to protect against encrypted threats while also being so lightweight and nimble that it can fit even in very resource-constrained environments. For enhanced features a commercial version can be acquired online directly from Sunny Valley Networks.

AND MUCH MORE

CAPTIVE PORTAL, TCP/HTTP LOAD BALANCER, NETFLOW MONITORING, REST API, and more...

 

 

BUSINESS EDITION

The OPNsense® Business Edition is intended for companies, enterprises and professionals looking for a more selective upgrade path (lags behind the community edition), additional

commercial features and who want to support the project in a more commercial way compared to donating. Order your license today direct from our online shop.

Compile or Contribute?

Checkout the sources!

It's no secret, everything is on GitHub

>200

Releases

17

Major Releases

TESTIMONIALS

From the users

Manuel Alexander Herzog OPNsense User
"Sophos UTM is good but to sofisticated for my needs. So I tried OPNsense and now EVERYTHING is as I want to have it. It is simple and with a great GUI."
Boris Hoppe CEO CompuNet Systems GmbH
"OPNsense provides more features, more reliability and more performance than any other commercial firewall product we had in use ever before. Being open source, we have full access regarding update plans and so on."
Leandro OPNsense User - source Twitter
"The Best choice for security on the open source world."

The best day to migrate to OPNsense was eight years ago, the second best is today.

The only open source security platform with a simplified 2-clause license (BSD/MIT license) is just one click away...