OpenConnect VPN Server (ocserv) vs OPNsense
OpenConnect VPN Server (ocserv)
ocserv.openconnect-vpn.net
OPNsense
opnsense.orgSide by side
| Figure | OpenConnect VPN Server (ocserv) | OPNsense |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | — | Yes |
| Linux | Yes | — |
| iOS | — | Yes |
| Android | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 6 |
| Spec score · Virtual Private Network Software | 7.9 (#28) | 9.0 (#10) |
| Spec score · Business VPN Software | 7.8 (#60) | 8.8 (#17) |
| Authentication | Authentication options include PAM, RADIUS, password files, HOTP/TOTP, OpenID Connect, smart cards, certificates, and Kerberos with GSSAPI/SPNEGO. | The product documents one-time-password authentication and supports LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through plugins. |
| Support | The project directs users to its plain-text mailing list for help and accepts bug reports through the mailing list or issue tracker. | Commercial support offers network-design advice, issue solving, and custom development for an annual fee. |
Plans
OpenConnect VPN Server (ocserv)
- OpenConnect VPN Server (ocserv)Free
OPNsense
- Business EditionPrice not published
- Business Edition 3YrPrice not published
- Community EditionFree
- OPNsense Business Edition 1yr subscription€149 a year
- OPNsense Business Edition (3Yr)€399, paid once
- OPNsense Business Edition 3Yr€399 a year
In their own words
OpenConnect VPN Server (ocserv)
OpenConnect VPN Server (ocserv) has no write-up on Specifiction yet; its figures are above.
OPNsense
OPNsense is an open-source firewall and routing platform based on FreeBSD, available for self-hosted, web, and API use. Its stateful firewall supports IPv4 and IPv6 and provides live views of passed and blocked traffic. VPN integrations include IPsec, OpenVPN, Tinc, and WireGuard. CARP supports automatic hardware failover with state synchronization, and inline intrusion prevention uses Suricata with Proofpoint Emerging Threats Open rules. The modular Model View Controller framework supports extensions and API functionality. Authentication options include LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through a plugin. Community Edition is free at free under the 2-clause BSD license, and installation is limited to x86-64 architecture. Official setup guides cover AWS images, OVA images, and an Azure Virtual Appliance. Business subscriptions add commercial features and support; listed prices are €149 a year or €399 a year for three years. The project began in 2014 as a fork of pfSense and m0n0wall, with its first official release in January 2015.