NGFW Features disappointment

[faisalusuf]

Recently i tried to use sensi free but surprise to know the number of policies are non and only default one can be configured. Even if paid the number of policies are too few. For application layer blocking Snort AppID feature can be a choice as i am unaware if Suricata can do the same job as Snort APPID?

Thanks

[franco]

Competing with NGFW vendors in the open source scope is rather impractical. The mere existence of Sensei at least hints at successful approaches on top of open source instead of having to pay for a "real NGFW".

As such, OPNsense does not offer any type of direct NGFW indication although some features may overlap by chance.

Snort can be integrated building a package and necessary plugin, but nobody contributed anything yet. From a core mission perspective it is not relevant either way.


Cheers,
Franco