B.01
You pay no licence fees per feature or per throughput.
Managed Firewall OPNsense
A firewall for your site based on OPNsense. This open-source solution offers the features of large commercial products, and Netsource looks after it and installs the updates.
01
Your Benefits
B.02
Your data stays with you, and no telemetry goes to the vendor's cloud.
B.03
Site-to-site VPN, intrusion detection (IDS/IPS), web filtering and multiple internet lines (multi-WAN) come at no extra cost.
B.04
We test updates first and install them in the maintenance window. There are no unplanned reboots.
02
Service scope
L.01
OPNsense as hardware or a VM, depending on the site
L.02
Initial configuration with secure defaults (everything blocked unless allowed, no administration from the internet)
L.03
Site-to-site VPN to other sites or to the Netsource cluster
L.04
IDS/IPS with Suricata, standard rule set active
L.05
Web filter by category (optional)
L.06
Updates and hotfixes in the maintenance window
L.07
Monitoring of WAN availability and traffic via Wazuh
L.08
Configuration and network layout documented as a PDF
03
Requirements and exclusions
→ Prerequisites
- An internet connection at the site
- Structured cabling at the patch panel
- A maintenance contract, if you need a guaranteed response time
✗ Not included
- Structured cabling and switches are not included.
- Penetration testing with external audit reports is consulting work (NDS-PRJ-COMPL).
- We can look after commercial firewalls (Sophos, Fortinet) on request as a separate project.
- Dividing your network into several VLANs is consulting and configuration work that can be added.
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.