OPNsense® FEATURES

Free & Open source - Everything essential to protect your network and more

Compile or Contribute?

Checkout the sources!
FIREWALL
Stateful firewall with support for IPv4 and IPv6 and live view on blocked or passed traffic.
MULTI WAN

Multi WAN capable including load balancing and failover support.

VIRTUAL PRIVATE NETWORKING

Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.

HARDWARE FAILOVER
When you cannot afford downtime use our automatic and seamless hardware failover with state synchronization utilizing the common address redundancy protocol (CARP) to get the highest possible availability.
SD-WAN

For easy setup, configuration and monitoring the ZeroTier plugin can be used to setup your Software Defined WAN within minutes.

INTRUSION DETECTION & PREVENTION

Get rid of the Trojans & CNC bots with state of the art inline intrusion prevention utilizing Suricata and Proofpoint's Emerging Threats Open rules integrated. Optional ET PRO (commercial subscription) or ET PRO Telemetry (sign-up for free).

TWO FACTOR AUTHENTICATION

2FA is supported throughout the system, for both the user interface as services such as VPN.

ROUTING PROTOCOLS

Pluggable support for OSPF and BGP using the Free Range Router project.

WEB FILTERING

Fully integrated web proxy with access control and support for external blacklists to filter unwanted traffic.
Other options include firewall aliases and DNS blacklisting.

INTUITIVE USER INTERFACE

The most intuitive fully responsive user interface you'll find in any open source firewall with integrated search option.

MULTI LANGUAGE

User slectable language support including English, Czech, Chinese, French, German, Italian, Japanese, Portuguese, Russian and Spanish.

ONLINE DOCUMENTATION

Fully searchable free online documentation.

WEB APPLICATION FILTERING - SENSEI (FREE & COMMERCIAL OPTION)

As part of our cooperation with Sunny Valley Networks a free version of Sensei can be installed as plugin. 
For enhanced features a commercial version can be acquired trough our online shop or directly from Sunny Valley Networks.

AND MUCH MORE

CAPTIVE PROTAL, TCP/HTTP LOAD BALANCER, NETFLOW MONITORING, REST API, and more..

 

 

BUSINESS EDITION

The OPNsense® Business Edition is intended for companies, enterprises and professionals looking for a more selective upgrade path (lags behind the community edition), additional

commercial features and who want to support the project in a more commercial way compared to donating. Order your license today direct from our online shop.

>190

Releases

10

Major Releases

TESTIMONIALS

From the users

Manuel Alexander Herzog OPNsense User
"Sophos UTM is good but to sofisticated for my needs. So I tried OPNsense and now EVERYTHING is as I want to have it. It is simple and with a great GUI."
Boris Hoppe CEO CompuNet Systems GmbH
"OPNsense provides more features, more reliability and more performance than any other commercial firewall product we had in use ever before. Being open source, we have full access regarding update plans and so on."
Leandro OPNsense User - source Twitter
"The Best choice for security on the open source world."

The best day to migrate to OPNsense was five years ago, the second best is today.

The only open source security platform with a simplified 2-clause license (BSD/MIT license) is just one click away...