What it does
OPNsense is an open-source firewall and routing platform with stateful filtering, multi-WAN support and network reporting.
OPNsense's live view of passed and blocked traffic is useful while checking whether a firewall rule does what an administrator intended. Its homepage also describes multi-WAN failover and routing functions. Document the intended traffic between network segments before enabling extra services. A live log is easier to interpret when the expected path is known. The platform's VPN support is part of the same administered network product, not evidence that it provides a consumer exit-node service.
The included Suricata description uses Emerging Threats Open rules. ET PRO is an optional commercial subscription; ET PRO Telemetry is a separate signup arrangement. Compare those feed terms independently of the free firewall platform.
Strengths
- Live passed and blocked traffic visibility
- Stateful firewall and multi-WAN features
Best for
- Network administrators building a reviewable firewall policy