I am thinking about moving over from Untangle to OPNSense due to the features they are starting to put behind the paywall with the new ownership. I have a couple of questions I am hoping you can help me with before I switch:
1. Untangle has a firewall rule where you can restrict traffic by country. You simply pick the country from the list and Untangle blocks all the IPs. This is really easy and powerful as I can block out all the countries I don't need to work with. Does OPNSense have the same feature where you can select which countries to block?
2. Does OPNSense have two factor authentication for specific firewall rules? IE. Remote desktop into a server?
3. Is it easy to read the logs and figure out the traffic status by IP, etc?
4. Is OpenVPN installed by default or easy to configure for individual users to VPN into the network?
Thanks in advance!
Hi smccarthy945 and welcome to the opnsense community. Have you looked at the Opnsense feature page?
https://opnsense.org/about/features/ (https://opnsense.org/about/features/)
or at the brochure? https://www.deciso.com/wp-content/uploads/2015/10/Deciso_About_OPNsense_latest.pdf (https://www.deciso.com/wp-content/uploads/2015/10/Deciso_About_OPNsense_latest.pdf)
And there are awesome custom community repositories with the help of @mimugmail (on this forum) see his page:
https://www.routerperformance.net/opnsense-repo/ (https://www.routerperformance.net/opnsense-repo/)
I think you will be amazed of what opnsense is capable of and more than you ask for IMHO.
I am only a 2 years (yes this month it is 2 years already) user of Opnsense and am very glad i have discovered it and still wonder how i have survived all hose years without it :)
Yey!!! :)
1. yes, you can use Maxmind, here's a link:
https://docs.opnsense.org/manual/how-tos/maxmind_geo_ip.html
2. I currently have set up all the login accounts with 2FA.
3. yup. :)
4. OpenVPN is OpenVPN... LOL It's there by default. As for the configuration, it's as painful as every platform they support. LOL
Thank you for all the information. i will load it up on a test box and give it a try!!