Arista NG Firewall vs OPNsense

Arista NG Firewall is network security software for managing and protecting traffic in hybrid deployments. Its software packages list firewall, intrusion prevention, web filtering, VPN, reporting and other apps. Listed VPN options include IPsec VPN, OpenVPN, Tunnel VPN and WireGuard VPN, and SSL Inspector is a featured capability. NG Firewall Complete provides control and visibility into network traffic and events. The free package offers basic security and connectivity, but limits Virus Blocker, Application Control, Spam Blocker and Reports, and does not provide centralized management for policies, alerts, reports or Networks. ETM Dashboard centrally manages network appliances and can deploy hardware appliances remotely. Other listed capabilities include configuration backup, directory integration, application rules, network discovery, policy automation, and wired and wireless access control. NG Firewall Complete is listed at $270 for a 12-month term, with licensed-device choices from 12 through unlimited. Monthly billing is available as a licensed-term option; annual billing advertises 10% savings, and the three-year option advertises 20% savings. A free plan and 30-day trial are listed.

OPNsense is an open-source firewall and routing platform based on FreeBSD, available for self-hosted, web, and API use. Its stateful firewall supports IPv4 and IPv6 and provides live views of passed and blocked traffic. VPN integrations include IPsec, OpenVPN, Tinc, and WireGuard. CARP supports automatic hardware failover with state synchronization, and inline intrusion prevention uses Suricata with Proofpoint Emerging Threats Open rules. The modular Model View Controller framework supports extensions and API functionality. Authentication options include LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through a plugin. Community Edition is free at free under the 2-clause BSD license, and installation is limited to x86-64 architecture. Official setup guides cover AWS images, OVA images, and an Azure Virtual Appliance. Business subscriptions add commercial features and support; listed prices are €149 a year or €399 a year for three years. The project began in 2014 as a fork of pfSense and m0n0wall, with its first official release in January 2015.