Pfsense vs Opnsense

[PolarBearSA]

Has anyone used Opnsense and pfSense? Which one offers a better experience between the two? I currently use pfSense to track and use snort. Just heard about the update they want to push it on pfsense with the CPU feature, so seeing if Opnsense will be something to look into.. will try to out in a VMware instance at some point over the next two weeks. Just wanted to see if anyone here has used the two yet to give some feedback before I make a network change at home.

 

[gfmalan]

Must go and read up on Opnsense, didn't know about it, but have pfSense running and can't live without

 

[Genisys]

PFsesne.

 

[Genisys]

You can also try the free version of Sophos XG.

 

[PolarBearSA]

Thanks.. just thinking that with the new aes-ni CPU feature that they want in 2.5 as a requirement, it will cause an issue with my CPU.

 

[PolarBearSA]

You can also try the free version of Sophos XG.

Thanks. Will look into that as well..

 

[Goobie]

Thanks.. just thinking that with the new aes-ni CPU feature that they want in 2.5 as a requirement, it will cause an issue with my CPU.

Please elaborate on this new Cpu requirement

 

[PolarBearSA]

Please elaborate on this new Cpu requirement

Netgate has asked to have it in the future release. So after 2.4, you will need to make sure that the CPU has aes-ni.. I still need to check up on my CPU to be honest​.. there is talks about it on a few YouTube videos..

 

[PolarBearSA]

Please elaborate on this new Cpu requirement

Example of my CPU..https://ark.intel.com/products/65732/Intel-Xeon-Processor-E3-1230V2-8M-Cache-3_30-GHz
It supports aes-ni. It is a data protection tech...

 

[Goobie]

Netgate has asked to have it in the future release. So after 2.4, you will need to make sure that the CPU has aes-ni.. I still need to check up on my CPU to be honest​.. there is talks about it on a few YouTube videos..

Oh damn, mine doesn't have that. This will suck.

 

[Mr Scratch]

fuq

my J1900 doesn't support AES-NI :-(

 

[DeathStrike]

do you guys update your pfsense? I haven't really bothered to update mine.

 

[Goobie]

do you guys update your pfsense? I haven't really bothered to update mine.

Yes. The latest version has quite nice bandwith usage stats tracker

 

[sicelo.m]

do you guys update your pfsense? I haven't really bothered to update mine.

You will be vuln some day when you least expect

 

[AlphaJohn]

do you guys update your pfsense? I haven't really bothered to update mine.

Not securing your primary tool used for security? May as well remove it then.

 

[PolarBearSA]

do you guys update your pfsense? I haven't really bothered to update mine.

So your tinfoil protection has some holes in it??

 

[Necropolis]

do you guys update your pfsense? I haven't really bothered to update mine.

You should keep it up-to-date with the latest stable releases...

IMO.

 

[DeathStrike]

Yes. The latest version has quite nice bandwith usage stats tracker

You will be vuln some day when you least expect

Not securing your primary tool used for security? May as well remove it then.

So your tinfoil protection has some holes in it??

You should keep it up-to-date with the latest stable releases...

IMO.

thanks for the feedback guys. I have run the updates.

 

[infscrtyrisk]

You can also try the free version of Sophos XG.

I use the free Sophos UTM 9 for a long time now, really good and fully featured. I'll upgrade to XG once it stabilises and offers a similar level of features.

Have you used Sophos XG at all? How do you find it?

 

[onedegreetech]

Anyone here tried Ipfire?