FortiGate Next Generation Firewall (NGFW) vs OPNsense comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
120,425 views|88,209 comparisons
90% willing to recommend
OPNsense Logo
105,864 views|93,109 comparisons
96% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between FortiGate Next Generation Firewall (NGFW) and OPNsense based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed FortiGate Next Generation Firewall (NGFW) vs. OPNsense Report (Updated: May 2024).
771,157 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The reporting you receive out of this appliance is excellent. You will not need an external management system.""FortiGate is flexible and easy to use.""It enables our organization to become more productive. Also, it protects our NEtWare from viruses and malware.""The most valuable feature is the VDOM, which allows the customer to have multiple firewalls in a single campus.""We are very happy with the general bandwidth agility we have seen from one website to another website.""Fortinet FortiGate's reliability is valuable.""It's a user-friendly firewall. Most of the tasks are very simple. It's simple to configure and troubleshoot this firewall.""Our security improved from being able to put in rules and close off unwanted traffic."

More Fortinet FortiGate Pros →

"FortiGate is a rapidly growing vendor with a wide range of ready-to-use products. Their delivery time is remarkably quick, usually between two to four weeks.""The IPS and the application control feature are the most valuable.""It is a very user-friendly solution. Moreover, Foritgate offers good performance.""The usability of the solution is its best feature.""Routing and reporting are two areas where the product has an added advantage compared to any other product.""The most valuable feature of FortiGate Next Generation Firewall is its SD-WAN.""The solution is user-friendly and easy to operate.""FortiGate Next Generation Firewall can be described as the most complete solution."

More FortiGate Next Generation Firewall (NGFW) Pros →

"OPNsense is easy to scale when running on the hardware.""The IDS and IPS features are valuable. From the usability perspective, there is a lot of good documentation. As IT professionals, we found it very easy to configure the firewall. It was easy to configure and use.""The technical support is very good.""It is a very good solution. I like the dashboard. I can see what is going on and manage it as I like it.""The feature I find most valuable, is that the program helped me to realize all the requested functionality that was needed.""It has firewall and VPN capabilities, which are very valuable features.""The graphic user interface is very good and it is user-friendly which makes the product easy-to-use.""I find the solution to be user-friendly. It has a lot of reports and easy settings."

More OPNsense Pros →

Cons
"From a reporting perspective, there's room for improvement. They're providing FortiAnalyzer through which one can get some enhancements, but the visibility and reporting still need slight improvement.""Scalability for Fortinet FortiGate needs to be improved. SD-WAN security for this solution also needs some improvement.""I'm not sure if it's something that they already have or are developing something, however, we need some dedicated features for container security.""I would suggest that Fortinet add sandboxing to their solution.""Technical support could be better. You don't always get the level of help you need right away.""Application management can be improved.""It is quite new for us, and we need to go more in-depth into the monitoring tools. It provides different features that we need to do what we want. So far, it is okay for us. In terms of improvement, in the future, they can provide a faster implementation of features. Some of the features are first available in other solutions. Fortinet sometimes takes a little bit longer than other solutions, such as Check Point, to implement new features.""I don't like that anything more than very basic reporting is not included."

More Fortinet FortiGate Cons →

"The solution's stability should be improved because it is extremely unstable.""There have been several vulnerabilities in the firewall. It is hackable, some of the images are hackable.""There is an area for improvement in vulnerability management.""The solution needs to improve its support.""There's a limitation wherein you can only have about 30 virtual or secondary IPs on a particular interface.""Its load balancing feature could be easy to configure.""The room for improvement is to have more flexibility on the virtual machines of their next-generation platforms.""The pricing of the solution is expensive, so it could be cheaper."

More FortiGate Next Generation Firewall (NGFW) Cons →

"The ability to set the VPN IP address would be a welcome addition.""The interface needs to be simplified. It is not user-friendly.""We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much.""The scalability needs improvement.""The logging could improve in OPNsense.""There are a few weaknesses. For example, there is a lack of some features that I have in certain commercial products.""There is room for improvement in SSL inspection.""On the customer-side, because I'm a small business, I need a cheaper or free solution option."

More OPNsense Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "The product is a little bit expensive."
  • "I think price-wise, the solution is totally reasonable since it has many products to serve, starting from small homes to massive scale sites."
  • "If we have an older version, the support costs get quite high."
  • "FortiGate Next-Generation Firewall is cheaper than Cisco or CheckPoint."
  • "FortiGate Next Generation Firewall is an expensive solution."
  • "The solution's price is average."
  • "FortiGate Next Generation Firewall is a very cheap solution."
  • "The solution is more expensive than Sophos. It could be cheaper. The licensing is on a yearly basis. We have had it for about three years. We must only pay extra for the license, additional requirements, and the hardware box."
  • More FortiGate Next Generation Firewall (NGFW) Pricing and Cost Advice →

  • "We are not paying any licensing fees. OPNsense is completely free for us."
  • "It costs about $1000."
  • "There are no licensing costs for OPNsence."
  • "OPNsense is open source software so at this time it is free for us to use."
  • "OPNsense is a well known open-source tool."
  • "It is not an expensive product. Basically, I deployed it because it was the fastest solution to satisfy our needs in open source."
  • "OPNsense is an open-source solution and it is free to use."
  • "The solution is not expensive."
  • More OPNsense Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    771,157 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite… more »
    Top Answer:The tool's most valuable feature is IPS. In my experience, I haven't encountered any issues with integration. It easily… more »
    Top Answer:The tool's pricing is neither cheap nor expensive. Overall, I find it to be competitive in the market.
    Top Answer:Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and… more »
    Top Answer:What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control.
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    Learn More
    OPNsense
    Video Not Available
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    The FortiGate Next Generation Firewall (NGFW) from Fortinet is a comprehensive cybersecurity solution designed to cater to a wide array of organizational needs. It integrates seamlessly into the Fortinet Security Fabric, offering robust protection against various internal and external threats, including attacks, malware, and vulnerabilities. The NGFW is known for its advanced features such as SSL inspection, application control, visibility enhancements, and an effective intrusion prevention system (IPS). This IPS plays a critical role in identifying and blocking malicious traffic by monitoring and inspecting incoming data.

    FortiGate NGFW can be deployed in diverse environments, including on-premises, in the cloud, or hybrid setups. The firewall is equipped with next-generation antivirus capabilities, IPS, web filtering, sandboxing, and intelligent security automation features like threat intelligence integration and automated incident response. Its reporting and analytics tools are comprehensive, aiding in enhancing an organization's security posture.

    A notable aspect of the FortiGate NGFW is its diverse and highly rated features, including a powerful VPN, a user-friendly Firewall Management Console, policy-based controls, and advanced reporting and logging capabilities. The system also supports Identification Technologies, Visualization Tools, Content Inspection, and seamless integration with Active Directory and LDAP directories. Its High Availability and the flexibility to deploy in various configurations, such as on-premises or as a Virtual Machine, make it a versatile choice for different business needs.

    The FortiGate NGFW also excels in providing secure connectivity. It supports various VPN protocols, offers SD-WAN for intelligent traffic routing, and integrates SASE for unified security and networking solutions. These features contribute to improved security, reduced operational costs, and increased agility for organizations.

    When it comes to user experiences and satisfaction, FortiGate NGFW has garnered positive feedback, with an average rating of about 4.26 out of 5 on PeerSpot Reviews. Users from diverse roles, including core network teams, technical officers, and cybersecurity engineers, and from various sectors such as tech services, education, and finance, have found the solution effective. This indicates its versatility and suitability across different company sizes and types.

    However, there are areas for improvement. Enhancing the details in Logging Services and making 10 Gigabit Interfaces available for lower models are some suggested enhancements. Simplifying the installation of FortiAP services is also noted as a potential area for improvement.

    OPNsense is a user-friendly, fast-track, open-source FreeBSD-based firewall and routing platform. This software offers features that are generally available from costly commercial firewalls, with the added benefit of open and verifiable sources. The firewall provides users, developers, and organizations with an advantageous environment through transparency. The development of this project is driven by a strong focus on security and code quality.

    The solution offers a variety of components, such as:

    • Weekly security updates. These updates provide the user with the ability to reach new emerging threats in a timely manner through small increments.

    • Two major releases every year. These yearly releases are on a fixed release cycle and provide organizations with the ability to plan ahead of an upcoming upgrade.

    • A roadmap of instructions. Each major release provides a guide and a set of clear goals.

    A team of professionals developed OPNsense. Other professional and experienced software architects, engineers, and developers are encouraged to join in the development of the solution to make it as successful as possible. OPNsense offers a variety of rich features with each release. Each upgrade is based on FreeBSD for continual, long-term support and utilizes a freshly advanced MVC framework based on Phalcon. OPNsense is committed to helping businesses, school networks, remote offices, hotels, and other markets in keeping their data protected.

    OPNsense Core Features

    OPNsense continually offers a free, complete, high-end security platform with new releases and features. With each release, OPNsense focuses on providing more unique and better security features in a timely manner. These features include:

    • Captive Portal
    • Built-in reporting and monitoring tools including RRD Graphs
    • Network Flow Monitoring
    • Traffic Shaper
    • Support for Plugins
    • Granular Control Over State Table
    • Dynamic DNS
    • Two-factor authentication throughout the system
    • Netflow Exporter
    • Encrypted Configuration Backup to Google Drive
    • Forward Caching Proxy (transparent) with Blacklist Support
    • Stateful inspection firewall
    • DNS Server & DNS Forwarder
    • High Availability & Hardware Failover (with configuration synchronization & synchronized state tables)
    • DHCP Server and Relay
    • Virtual Private Network (site to site & road warrior, IPsec, OpenVPN & legacy PPTP support)
    • Intrusion Detection and Prevention
    • 802.1Q VLAN support

    Reviews from Real Users

    OPNsense is a favorite security solution among reviewers for a number of reasons. Two of those reasons include the user-friendliness of the solution, which makes it easy to use, and its ability to easily scale.

    For many, a user-friendly solution is essential. FiorindoDi A., a system administration specialist at a tech vendor, says, "The graphic user interface is very good and it is user-friendly, which makes the product easy-to-use."

    Peerspot reviewers speak of the scalability of the solution. For example, an anonymous cloud and infrastructure manager at a venture capital and private equity firm reviewer notes, "OPNsense is easy to scale when running on the hardware."

    Sample Customers
    1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
    Information Not Available
    1. Deciso B.V. 2. iXsystems, Inc.  3. EuroBSDCon  4. Netgate  5. Claranet  6. Voleatech  7. Open Systems AG  8. Securebit AG  9. Proxmox Server Solutions GmbH  10. AVM Computersysteme Vertriebs GmbH  Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.
    Top Industries
    REVIEWERS
    Comms Service Provider16%
    Computer Software Company9%
    Financial Services Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Educational Organization20%
    Computer Software Company15%
    Comms Service Provider8%
    Manufacturing Company6%
    REVIEWERS
    Comms Service Provider11%
    Educational Organization11%
    Financial Services Firm11%
    Security Firm11%
    VISITORS READING REVIEWS
    Computer Software Company25%
    Financial Services Firm9%
    Educational Organization8%
    Comms Service Provider7%
    REVIEWERS
    Comms Service Provider24%
    Financial Services Firm18%
    Logistics Company12%
    Government6%
    VISITORS READING REVIEWS
    Comms Service Provider15%
    Computer Software Company15%
    Government8%
    Educational Organization6%
    Company Size
    REVIEWERS
    Small Business48%
    Midsize Enterprise23%
    Large Enterprise30%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise32%
    Large Enterprise41%
    REVIEWERS
    Small Business68%
    Midsize Enterprise24%
    Large Enterprise8%
    VISITORS READING REVIEWS
    Small Business43%
    Midsize Enterprise23%
    Large Enterprise34%
    REVIEWERS
    Small Business71%
    Midsize Enterprise12%
    Large Enterprise18%
    VISITORS READING REVIEWS
    Small Business33%
    Midsize Enterprise18%
    Large Enterprise48%
    Buyer's Guide
    FortiGate Next Generation Firewall (NGFW) vs. OPNsense
    May 2024
    Find out what your peers are saying about FortiGate Next Generation Firewall (NGFW) vs. OPNsense and other solutions. Updated: May 2024.
    771,157 professionals have used our research since 2012.

    FortiGate Next Generation Firewall (NGFW) is ranked 14th in Firewalls with 37 reviews while OPNsense is ranked 3rd in Firewalls with 36 reviews. FortiGate Next Generation Firewall (NGFW) is rated 8.4, while OPNsense is rated 8.4. The top reviewer of FortiGate Next Generation Firewall (NGFW) writes "Easy to set up but needs better pricing and more helpful support". On the other hand, the top reviewer of OPNsense writes "Robust network security and management offering a user-friendly interface, open-source flexibility, and cost-effectiveness, with challenges regarding initial setup and the absence of official support". FortiGate Next Generation Firewall (NGFW) is most compared with Netgate pfSense, Tailscale, Twingate, Fortinet FortiGate-VM and Google Cloud Platform Cloud Identity-Aware Proxy, whereas OPNsense is most compared with Netgate pfSense, Sophos XG, Untangle NG Firewall, Sophos UTM and Zyxel Unified Security Gateway. See our FortiGate Next Generation Firewall (NGFW) vs. OPNsense report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.