Desktop
DEC677, DEC697, DEC740, DEC750
Branch office, small site, medical practice
- Firewall throughput
- up to 10 Gbit/s
- CPU
- 4 cores
- RAM
- up to 8 GB
- Form factor
- fanless, approx. 15 W
OPNsense appliances
Original Deciso hardware or matched server hardware, preconfigured and hardened by us and commissioned at your site. You do not get a box with a power supply, but a running, documented firewall.
Before delivery
- Firmware
- current version
- Licence
- Business Edition
- Hardening
- admin only from management network, 2FA
- Backup
- automatic, off-device
- Docs
- port labelling and quick guide
Hardware from Deciso
Three product lines
Guide values according to the vendor. The right class depends on throughput with IPS enabled, VPN load and port requirements, not on headcount.
Rack
DEC2752, DEC2770, DEC3842, DEC3852, DEC3862
Main site, medical centre headquarters
- Firewall throughput
- up to 17 Gbit/s
- CPU
- up to 8 cores
- RAM
- up to 32 GB
- Form factor
- 19-inch, 1U, HA-capable
Enterprise
DEC3920, DEC3940, DEC3960, DEC4240, DEC4280
Data centre, hospital, campus
- Firewall throughput
- up to 60 Gbit/s
- CPU
- up to 16 cores
- RAM
- up to 64 GB
- Form factor
- 19-inch, 1–2U, cluster
Deciso’s current data sheets are authoritative. With Suricata enabled, real throughput is well below the firewall figure, so we size according to your measured load.
Performance classes
Which class for which use
| Class | Typical use | Characteristics |
|---|---|---|
| Compact | branch office, small site, practice location | fanless, several 1 GbE ports, VPN to headquarters |
| Business | main site of a mid-sized company, medical centre headquarters | 1/10 GbE ports, IPS at full load, VPN for dozens of users |
| Enterprise | data centre, hospital, campus | 10/25 GbE SFP+, redundant power supplies, 19-inch |
| HA cluster | anything that must not fail | two identical devices with CARP, maintenance without downtime |
| Virtual | existing virtualisation, cloud | Proxmox, VMware, Hyper-V, KVM, ideally behind a perimeter appliance |
Process
From quote to running firewall
Consultation
We record bandwidth, sites, VPN needs and security requirements.
Preconfiguration
We set up the base configuration, hardening, updates and backup target in our lab.
Commissioning
On site or remotely: connection, testing of all rules and VPNs, acceptance with a report.
Operations
Updates, monitoring and support. If the hardware fails, a replacement runs with an identical configuration.
FAQ
Frequently asked questions
Why not just use a mini PC?
For lab and test use there is nothing against it. In production, what counts is network chips with stable drivers, endurance under continuous load, warranty and spare parts. That is why we rely on tested hardware.
What happens if the hardware fails?
In an HA cluster the second device takes over without interruption. For single devices we restore the backed-up configuration onto replacement hardware.
Is the Business Edition included in the price?
We include it in our quote if you wish. It is licensed annually per firewall.
Contact
Which appliance do you need?
Send us your bandwidth, sites and VPN requirements. We will reply with a concrete recommendation.