數碼證書

SSL Certificate; Email Certificate

OPNSense Firmware

There are no translations available.

OPNsense firmware is an NEXT Generation firewall and router distribution based on hardenBSD that is functionally competitive with expensive, proprietary commercial firewalls.

OPNSense software-based appliances can be configured as a stateful packet filtering firewall, a LAN or WAN router, VPN Appliance, DHCP Server, DNS Server, or can be configured for other applications and special purpose appliances. This next generation pfSense security appliance features include:

Stateful packet filtering firewall or pure router
Routing policy per gateway and per-rule for failover and load balancing
Transparent layer 2 firewall
Support for IPV6, NAT, BGP
Captive portal with MAC filtering, RADIUS support, etc
VPN: IPsec, OpenVPN, L2TP
Dynamic DNS client
Reporting and monitoring features with real time information

Overview

Configuration

How you configure the pfSense software is largely dependant on the needs you're trying to meet.

If you need professional assistance configuring your deployment, you can use our commercial support and local implementation to help get you up and running.

OPNsense Firmware Features

OPNsense is a highly configurable, full-featured solution that meets any need from the edge to the cloud.

Applications

VPN Server
High Availability
Load Balancing
Traffic Shaping

Captive Portal
UTM Device
Firewall / Router
DNS / DHCP Server

IDS / IPS
Transparent Caching Proxy
Web Content Filter
And more ...

Features

Firewall and Router

Stateful Packet Inspection (SPI)
GeoIP blocking
Anti-Spoofing
Time based rules
Connection limits
Dynamic DNS
Reverse proxy
Captive portal guest network
Supports concurrent IPv4 and IPv6
NAT mapping (inbound/outbound)
VLAN support (802.1q)
Configurable static routing
IPv6 network prefix translation
IPv6 router advertisements
Multiple IP addresses per interface
DHCP server
DNS forwarding
Wake-on-LAN
PPPoE Server

VPN

IPsec and OpenVPN
Site-to-site and remote access VPN support
SSL encryption
VPN client for multiple operating systems
L2TP/IPsec for mobile devices
Multi-WAN for failover
IPv6 support
Split tunneling
Multiple tunnels
VPN tunnel failover
NAT support
Automatic or custom routing
Local user authentication or RADIUS/LDAP

Intrusion Prevention System

Snort-based packet analyzer
Multiple rules sources and categories
Emerging threats database
IP blacklist database
Pre-set rule profiles
Per-interface configuration
Suppressing false positive alerts
Deep Packet Inspection (DPI)
Optional open-source packages for application blocking

Enterprise Reliability

Optional multi-node High Availability Clustering
Multi-WAN load balancing
Automatic connection failover
Bandwidth throttling
Traffic shaping wizard
Reserve or restrict bandwidth based on traffic priority
Fair sharing bandwidth
User data transfer quotas

User Authentication

Local user and group database
User and group-based privileges
Optional automatic account expiration
External RADIUS authentication
Automatic lockout after repeated attempts

Proxy and Content Filtering

HTTP and HTTPS proxy
Non Transparent or Transparent caching proxy
Domain/URL filtering
Anti-virus filtering
SafeSearch for search engines
HTTPS URL and content screening
Website access reporting
Domain Name blacklisting (DNSBL)
Usage reporting for daily, monthly, etc.

Administration

Configuration

Web-based configuration
Setup wizard for initial configuration
Remote web-based administration
Customizable dashboard
Easy configuration backup/restore
Configuration export/import
Encrypted automatic backup to Netgate server
Variable level administrative rights
Multi-language support
Simple updates
Forward-compatible configuration
Serial console for shell access and recovery options

System Security

Web interface security protection
CSRF protection
HTTP Referer enforcement
DNS Rebinding protection
HTTP Strict Transport Security
Frame protection
Optional key-based SSH access

Reporting & Monitoring

Dashboard with configurable widgets
Local logging
Remote logging
Local monitoring graphs
Real-time interface traffic graphs
SNMP monitoring
Notifications via web interface, SMTP, or Growl
Hardware monitoring
Networking diagnostic tools

pfSense Firmware

There are no translations available.

pfSense firmware is an open source firewall and router distribution based on FreeBSD that is functionally competitive with expensive, proprietary commercial firewalls.

pfSense software-based appliances can be configured as a stateful packet filtering firewall, a LAN or WAN router, VPN Appliance, DHCP Server, DNS Server, or can be configured for other applications and special purpose appliances. This next generation pfSense security appliance features include:

Stateful packet filtering firewall or pure router
Routing policy per gateway and per-rule for failover and load balancing
Transparent layer 2 firewall
Support for IPV6, NAT, BGP
Captive portal with MAC filtering, RADIUS support, etc
VPN: IPsec, OpenVPN, L2TP
Dynamic DNS client
Reporting and monitoring features with real time information

Overview

The pfSense project is an network firewall distribution, based on the FreeBSD operating system with a custom kernel and including third party free software packages for additional functionality. pfSense software, with the help of the package system, is able to provide the same functionality or more of common commercial firewalls, without any of the artificial limitations. It has successfully replaced every big name commercial firewall you can imagine in numerous installations around the world, including Check Point, Cisco PIX, Cisco ASA, Juniper, Sonicwall, Netgear, Watchguard, Astaro, and more.

pfSense software includes a web interface for the configuration of all included components. There is no need for any UNIX knowledge, no need to use the command line for anything, and no need to ever manually edit any rule sets. Users familiar with commercial firewalls catch on to the web interface quickly, though there can be a learning curve for users not familiar with commercial-grade firewalls.

Hardware Selection

Unlike most common commercial firewalls offerings, the pfSense project is just the software portion of the firewall. This means you get to tailor the hardware you choose to meet your environment's specific needs. You can use the live CD or memstick to test out your hardware without installing to the hard drive, or install to a compact flash card for embedded systems.

Configuration

How you configure the pfSense software is largely dependant on the needs you're trying to meet.

If you need professional assistance configuring your deployment, you can use our commercial support and local implementation to help get you up and running.