• OPNsense® Marks 10 Years of Innovation

    Embracing the Future of Network Security

  • Checkout the OPNsense® Business Edition

    Commercial firmware repository, OVA image, Central Management, integrated GeoIP database, 20% discount on business support package and an easy way to support the project!

     SUBSCRIBE

  • Available Now! - 4th Edition!

    The complete 4th Edition of Practical OPNsense® by Markus Stubbig

    Simple packet filters are becoming a thing of the past. Even the open-source domain is moving towards Next-Generation Firewalls. And OPNsense is a top player when it comes to intrusion detection, application control, web filtering, and anti-virus. No network is too insignificant to be spared by an attacker. Even home networks, washing machines, and smartwatches are threatened and require a secure environment. Firewalls are a component of the security concept. They protect against known and new threats to computers and networks. A firewall offers the highest level of protection if its functions are known, its operation is simple, and it is ideally positioned in the surrounding infrastructure. OPNsense accepts the challenge and meets these criteria in different ways. This book is the ideal companion for understanding, installing and setting up an OPNsense firewall.

    Buy online from Bod Buchshop [German] or Amazon [English]
    Also bundled with the OPNsense® Business Edition license as E-book.

    Der OPNsense® Pratiker
    Pratical OPNsense®
    OPNsense® BE [E-book EN/DE]

     

OPNsense® FEATURES

Free & Open source - Everything essential to protect your network and more

FIREWALL
Stateful firewall with support for IPv4 and IPv6 and live view on blocked or passed traffic.
MULTI WAN

Multi WAN capable including load balancing and failover support.

VIRTUAL PRIVATE NETWORKING

Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.

HARDWARE FAILOVER
When you cannot afford downtime use our automatic and seamless hardware failover with state synchronization utilizing the common address redundancy protocol (CARP) to get the highest possible availability.
SD-WAN

For easy setup, configuration and monitoring the ZeroTier plugin can be used to setup your Software Defined WAN within minutes.

INTRUSION DETECTION & PREVENTION

Get rid of the Trojans & CNC bots with state of the art inline intrusion prevention utilizing Suricata and Proofpoint's Emerging Threats Open rules integrated. Optional ET PRO (commercial subscription) or ET PRO Telemetry (sign-up for free).

TWO FACTOR AUTHENTICATION

2FA is supported throughout the system, for both the user interface and services such as VPN.

ROUTING PROTOCOLS

Pluggable support for OSPF and BGP using the Free Range Router project.

WEB FILTERING

Fully integrated web proxy with access control and support for external blacklists to filter unwanted traffic.
Other options include firewall aliases and DNS blacklisting. Block ads with ease!

INTUITIVE USER INTERFACE

The most intuitive fully responsive user interface you'll find in any open source firewall with integrated search option.

MULTI LANGUAGE

User selectable language support including English, Czech, Chinese, French, German, Italian, Japanese, Portuguese, Russian and Spanish.

ONLINE DOCUMENTATION

Fully searchable free online documentation.

NEXT GENERATION FIREWALL EXTENSIONS: ZENARMOR

FREE & COMMERCIAL OPTIONS
Zenarmor is a versatile plug-in extension for OPNsense developed by Sunny Valley Networks. OPNsense users can easily deploy Zenarmor NGFW free of charge with Threat Intelligence to easily secure environments of all sizes, ranging from home networks to multi-cloud deployments. The packet inspection engine is powerful enough to protect against encrypted threats while also being so lightweight and nimble that it can fit even in very resource-constrained environments. For enhanced features a commercial version can be acquired online directly from Sunny Valley Networks.

AND MUCH MORE

CAPTIVE PORTAL, TCP/HTTP LOAD BALANCER, NETFLOW MONITORING, REST API, and more...

 

 

BUSINESS EDITION

The OPNsense® Business Edition is intended for companies, enterprises and professionals looking for a more selective upgrade path (lags behind the community edition), additional

commercial features and who want to support the project in a more commercial way compared to donating. Order your license today direct from our online shop.

Compile or Contribute?

Checkout the sources!

It's no secret, everything is on GitHub

  • OPNsense is a Deciso® Open Source Project

    Deciso B.V. started the OPNsense project in 2014 with its first official release in 2015.

     CHECKOUT DECISO

>200

Releases

17

Major Releases

TESTIMONIALS

From the users

Manuel Alexander Herzog OPNsense User
"Sophos UTM is good but to sofisticated for my needs. So I tried OPNsense and now EVERYTHING is as I want to have it. It is simple and with a great GUI."
Boris Hoppe CEO CompuNet Systems GmbH
"OPNsense provides more features, more reliability and more performance than any other commercial firewall product we had in use ever before. Being open source, we have full access regarding update plans and so on."
Leandro OPNsense User - source Twitter
"The Best choice for security on the open source world."

The best day to migrate to OPNsense was eight years ago, the second best is today.

The only open source security platform with a simplified 2-clause license (BSD/MIT license) is just one click away...