The shocking truth behind migrating from pfSense to OPNsense

No video

The shocking truth behind migrating from pfSense to OPNsense - Important contemplation before you do

Рет қаралды 17,495

9 ай бұрын

NOTE: This video is sponsored by Zenarmor and I do receive a small percentage back for every referral that signs up using the link, which gets put towards my Zenarmor subscription.
Welcome to my channel!
So you likely found this video because you run pfSense in your home lab or rely on it to secure your business network. You have probably heard all the chatter on Reddit and KZfaq about the recent changes announced by Netgate to the pfSense Plus Home+Lab subscription and how it is no longer a free option.
You have likely seen in these same discussions people recommending alternatives like OPNsense, but you can't decide if you should downgrade to pfSense CE or try something new like OPNsense.
Perhaps none of what I just mentioned affects you and you are simply looking for a pfSense alternative, or maybe you are completely new to the world of open-source firewalls and you are trying to decide what is best for you.
Regardless of the reasons that you found yourself here, I am hoping to make your decision-making process a lot easier and in this video, we are going to briefly compare OPNsense to pfSense and talk about some advantages of using OPNsense as an alternative.
We are also going to talk about how we can enhance OPNsense by easily installing the Zenarmor Next Generation Firewall plugin, which unlocks advanced security features like deep packet inspection, application, and web controls.
With OPNsense and Zenarmor, you can start exploring and benefiting from next-generation firewall features for free in the comfort of your own home-lab environment.
P.S. Please don't forget to like and subscribe!
🔗Sign up link: sunnyvalley.cloud/?r=SVNRUZSU...
If you are new to Zenarmor check this playlist first to get started:
Zenarmor Playlist:
• Improve your cyber sec...
OPNSense Playlist
• Virtual Cyber Security...
LINKS in VIDEO
www.netgate.com/blog/addressi...
opnsense.org/users/get-started/
DISCLAIMER: All information, techniques, and tools showcased in these videos are for educational and ethical penetration testing purposes ONLY. NEVER attempt to use this information to gain unauthorized access to systems without the EXPLICIT consent of its owners. This is a punishable offense by law in most countries.
#zenarmor #opnsense #ngfw

Пікірлер: 43

@stuardbrtube 4 ай бұрын

Sadly this video was more an advertising than informative. When we talk about a sensitive thing like a firewall we need to discuss more about the pros anc cons of each one, but you focused in create an AD of ZenArmor than inform and be educative... I know that a small channel need to make money in someway, but i think that the video should be more dense.

@ls111cyberEd 4 ай бұрын

Thanks for the comment, the video was created to intentionally be a brief comparison targeted mainly at people who were looking for an alternative to pfSense with enough information condensed into it to essentially pique people's curiosity so that they would hopefully go do their own research to determine if OPNsense was enough to replace their pfSense firewalls, particularly those impacted by the licensing changes at the time. I acknowledge your feedback regarding the "lack" of pros and cons or the density of information you expected, you are likely one of the very view people who would find value in a much longer video detailing this topic. As I said before, I intended to create something quick and easily digestible, and if this was much longer, it would definitely not have achieved the same impact as this video has to date. Regarding Zenarmor's inclusion in this video, it's a fact that Zenarmor and OPNsense coupled together make a great security solution, so it makes sense to speak about them together. The channels' revenue-generating capabilities aside, it's simply products that I like to talk about and feel deserve more exposure because of the value they can create in people's lives. Hopefully this clears things up for you.

@sigreer83 Ай бұрын

@@ls111cyberEd not sure you can really sell the idea that you're encouraging people to do their own research. It's essentially a two-part pitch with the first half of the video berating pfSense while lauding OPNsense's superiority. It's only at the halfway point that it's revealed that the video's actually just an ad for a third party plugin for OPNsense.

@tomamore3 9 ай бұрын

The title is way too click baity.

@diavuno3835 8 ай бұрын

Definitely

@ls111cyberEd 8 ай бұрын

Thanks for your opinions and engagement.

@StephenDeTomasi Ай бұрын

Downvoted this video for that reason alone

@ppetrix 9 ай бұрын

can open sense be deployed in Azure? and can tailscale be installed? Very nice comparison. thank you

@ls111cyberEd 9 ай бұрын

Hi, thanks for watching, Yes it can, you can find it in the Azure Marketplace. Tailscale can be installed via the OPNsense secure shell.

@MiFonito 9 ай бұрын

Did you post this video on OPNsense forum already? :) a lot of PFsense users joined the forums lately I think this would help them.

@pilotken8685 5 күн бұрын

recently make the jump to try opnsense and already thinking of going back to pfsense. too many backwards rules that don't make sense. automatic rules that you cannot even control or manage that seems to impact filtering... firewall rule logs are horrible looking, no quick deny or allow from logs.... sure it's pretty looking... but so far, not liking it.

@zyghom 9 ай бұрын

I used to have Zenarmor - I uninstalled it after month or so - not fit for purpose.

@anand-nb4bb 6 ай бұрын

Hi Bro, I need your help. I have Ubuntu 18.04 on my laptop and it has a VPN settings configured on it. I think its managed through pfsense I use this VPN to connect to my work environment Now my query is that when I connect to this VPN I connect to my work network & am able to work inside it, but this disconnects the internet connectivity that is working on my base machine. I want the internet to be working on my base system as well & also should be able to connect to my work network as a lot of websites are blocked inside the work network. Split Tunneling is enabled on the VPN server but it seems my system is missing some configuration which is causing it to not work Can you please tell me what settings I need to do on my laptop VPN to make this work. Kindly help. Thanks & regards,

@chuckowens2010 9 ай бұрын

The only thing holding me on pfsense is NPM works flawlessy and I dont have to invert FW rules to get it to work or I could be doing it wrong but it caused more of a issue than I felt like it was worth

@lesfilanto 8 ай бұрын

I had pfsense and had random traffic slowdowns. I had opnsense prior and I had vlan issues, though it could have been an error on my part but in the end I went back to Sophos, sorry but it works for me.

@sacothemaster 5 ай бұрын

Wish you could configure correctly

@lesfilanto 5 ай бұрын

@sacothemaster both worked fine for weeks and started going wonky. Sorry some people have lives that require not tinkering daily on a firewall. I about only access my Sophos firewall just to see if there's an update needed.

@---tr9qg 9 ай бұрын

Opnsense support vxlan and sr-iov while pfsense not

@forid200 8 ай бұрын

I've been using pfsense for crazy years, Opnsense has many extra features like disabling hardware checksum offloading on a per interface level. Ability to run multiple packet captures from GUI and more.

@aviwemusa6109 9 ай бұрын

How to make OPNsense connect to the Wazuh manager?

@TABNuland 6 ай бұрын

I was a Pfsense user, moved to Opnsense for more modern api and gui. Now i am moving back to pfsense because opnsense does not support HA PPOE ... A bit crappy and painfull...

@testbox3201 Ай бұрын

Set it up yesterday with opnsense

@Sulaimanzai 9 ай бұрын

I have had issues with vlans and dhcp, the vlan was getting the ip via dhcp in opnsense ,so went back to pfsense

@dabneyoffermein595 8 ай бұрын

wow, that's a big flaw

@brend3429 7 ай бұрын

Late to the party I know... Is there a seamless way to migrate from pfSense?

@StephenDeTomasi Ай бұрын

Seamless? Sort of, but not really. Basically requires setting up from scratch for the most part.

@fatchickencatcher 4 ай бұрын

sensational title, click bait. Money always distorts.

@ls111cyberEd 4 ай бұрын

Thanks for you opinion and engagement.

@matldn2697 7 ай бұрын

This is a plug for opnsense. Very little comparison.

@christianclark1354 3 ай бұрын

Complete waste of time watching this. Just an advert for OPsense. Give me a real comparison. E.g install the different OS on the same hardware and let’s see the performance stats. Everything you mentioned here is just a pfsense feature with a different GUI

@Zorb_EG 8 ай бұрын

Aside from the title being laughable, the video is somewhat disingenuous; 1) Zenarmor works perfectly fine on the latest version of pfsense CE. It's clearly stated in the latest ZA documentation. 2) You fail to mention that Zenarmor requires disabling all forms of hardware offloading on the network interfaces, which can significantly reduce performance, therefore potentially outweighing the benefits for home labs. 3) You also fail to mention that Zenarmor is fairly CPU intensive, which again, can affect performance for small home labs. 4) Lastly, you fail to make a solid case for OPNsense, either way. Don't get me wrong, I'm not a pfsense fanboy. They are both great. Zenarmor seems pretty good too. I just don't think this video was informative.

@ls111cyberEd 8 ай бұрын

Thanks for your opinion and engagement.

@fongsa1yuk 8 ай бұрын

Been a PFSense user for almost a decade but lately and I just found out about the war story between PF and OPN. I am joining the OPNSense side just because of that. Farewell PFSense.

@kradman188 7 ай бұрын

Also completely misses the fact that although opnsense does have bgp support via FRR, like pfsense, the provision in the GUI is far more lacking then PFsense with most of the advanced options unavailable. Missing tailscale is also an issue.