OPNsense Business Edition

OPNsense is an Open Source Firewall Distribution. Beside the pure Open Source version there is also the OPNsense Business Edition. This version provides access to the Business Edition update repository. This article shows the differences and advantages of the Business Edition compared to the free version.

To our OPNSense Firewalls

Note about the new release schedule

Deciso has recently changed the structure of the Business Edition, since 2021 it is now released as a separate image always in April and October.

Releases

The following list shows all released Business Edition versions:

• OPNsense 21.4 (based on OPNsense 21.1.4)
• OPNsense 21.10 (based on OPNsense 21.7.3)
• OPNsense 22.4 (based on OPNsense 22.1.10)
• OPNsense 22.10 (based on OPNsense 22.7.6)
• OPNsense 23.4 (based OPNsense 23.1.5)
• OPNsense 23.10 (based on OPNsense 23.7.6)

Features of both OPNsense versions

The following table shows the features of both OPNsense versions as well as the special features of the Business Edition:

Features	Free Edition	Business Edition
Stateful Firewall	✔	✔
Various authentication options	✔	✔
Two-Factor Authentication	✔	✔
Certificates (Let's encrypt)	✔	✔
Link Aggregation & Failover	✔	✔
Traffic Shaping	✔	✔
Multi WAN	✔	✔
Load Balancer	✔	✔
Intrusion Detection & Prevention	✔	✔
Captive Portal	✔	✔
VPN Services (IPsec, OpenVPN, WireGuard)	✔	✔
High Availability	✔	✔
Virus scanner	✔	✔
Can be optionally combined with the Proofpoint ET Pro Ruleset (sold separately)	✔	✔
Tested Updates (Business Edition Update Repository)	-	✔
Access to GeoIP database	-	✔
Access to the official OPNsense OVA image	-	✔
Business-Plugins (OPNcentral (in development))	-	✔
Free E-Book Practical OPNsense (Deutsch/Englisch)	-	✔
Support of the active development with the license fee	-	✔
Up to 20% discount on the basic support package (Business or Integrator Support)	-	✔

Installing the OPNsense Business Edition

For information on installing the Business Edition, refer to the article Activate OPNsense Business Edition license.

Overview of the components of the Business Edition

This section lists the software components that distinguish an OPNsense Business Edition from the free version.

OPNcentral

The OPNcentral management plug-in allows the administration of several distributed OPNsense firewalls. The OPNsense appliances are connected via a REST API.

Functions of OPNcentral

The OPNcentral plugin offers (among others) the following features:

• Manage remote OPNsense firewalls (via an encrypted connection with API Key and Secret)
  • Check the remote firewalls
  • Display information on firmware version and connection status
• Access to remote OPNsense firewalls by clicking on the GUI link
• Update remote firewalls
  • One or more firewalls simultaneously
  • Trigger upgrade of all selected firewalls centrally

Install OPNcentral

Die nachfolgenden Screenshots zeigen Ihnen die Installation von OPNcentral:

• 

  Select System → Firmware → Plugins from the left menu.

• 

  Scroll down the list of all installable plugins and find the entry os-OPNcentral, click on the + to install the plugin.

• 

  Installation process of the plugin.

• 

  Now there is a new entry for OPNcentral: Management in the left menu tree. In this menu you can manage the remote OPNsense firewalls.

Proofpoint ET Pro ruleset

This ruleset can optionally be purchased after activation of OPNsense Business Edition.

Author: Thomas Niedermeier Thomas Niedermeier working in the product management team at Thomas-Krenn, completed his bachelor's degree in business informatics at the Deggendorf University of Applied Sciences. Since 2013 Thomas is employed at Thomas-Krenn and takes care of OPNsense firewalls, the Thomas-Krenn-Wiki and firmware security updates.