From VPN access to intrusion protection, Opnsense® is an outstanding product, free and Open source
Firewall
Dynamic firewall assuming IPV4 and IPV6 protocols, with real time traffic visualisation.
Multi-Wan
Multi WAN capable including load balancing and failover support
VPN
Integrated support for IPsec (including route based), OpenVPN as well as pluggable support for Tinc (full mesh VPN) and WireGuard.
Hardware failover
Can't afford downtime? Use our automatic hardware failover with state synchronization. By utilizing the Common Address Redundancy Protocol (CARP), you can achieve the highest possible availability.
SD-WAN
Zerotier Plugin enable within minutes a simple setup and monitoring process.
Intrusion prevention
Eliminate Trojans and CNC bots with advanced inline intrusion prevention using Suricata and Proofpoint’s Emerging Threats Open rules. You can also choose the optional ET PRO (commercial subscription) or ET PRO Telemetry (sign up for free).
Two factor auth
2FA native implemented, including VPN
Routing
Ability to enable OSPF and BGP routing protocols trough the Free range router project
Web filtering
Web Proxy integrated, with external blacklists support, Aliases, dns blacklists are available too.
Intuitive graphical interface
Most intuitive and responsive GUI, including an integrated search engine
Multi-langual interface
Available in English, Tchech, French, Spanish, Italian, Japanese, Portuguese, Russian
Online documentation
Totally free access online doc
Web filtering with Zenarmor
Within Sunny valley networks collaboration, a free version of Zenarmor is integrated.
Complete version is available directly through the editor.
And more...
Captive portal, load balancing, monitoring, REST API and more!
Business edition
Business edition at disposal of companies who look at more selective update process, extended support.