OPNsense glossary
The key terms around OPNsense, migration and security operations, explained briefly and clearly.
- Alias
- A named group of hosts, networks, ports or URLs used in rules.
- Business Edition
- Commercial OPNsense edition with mature releases, its own repository and additional features, licensed per firewall.
- CARP
- Protocol for a shared virtual IP address between two firewalls, the basis for high availability.
- Community Edition
- Free OPNsense edition that receives new features first.
- Cutover
- The moment of switching from the old to the new firewall.
- Floating rules
- Rules that apply across several interfaces.
- IDS / IPS
- Intrusion detection or prevention: detects or blocks attacks based on signatures.
- IPsec
- Standard protocol for encrypted site-to-site connections.
- MCP
- Model Context Protocol: an open standard that lets AI assistants work with other systems.
- MDR
- Managed Detection and Response: detection and response as a service.
- MSS clamping
- Limits the segment size and prevents fragmentation in VPN tunnels.
- NAT
- Network address translation, for example to publish internal services.
- OPNcentral
- Central management of multiple OPNsense firewalls, part of the Business Edition.
- pf
- Packet filter from the BSD world, the firewall engine of OPNsense.
- pfsync
- Synchronisation of connection states between two firewalls in a cluster.
- Fallback
- The old firewall stays cabled after the cutover so that you can switch back within minutes.
- Segmentation
- Dividing the network into separate zones with minimal permissions.
- SIEM
- Security Information and Event Management: central collection and analysis of security-relevant events.
- SOC
- Security Operations Center: a team that monitors security events and responds to incidents.
- Suricata
- Open-source IDS/IPS engine, integrated in OPNsense.
- TOTP / 2FA
- Time-based one-time passwords from an authenticator app as a second factor.
- VLAN
- A logically separate network on shared cabling.
- WireGuard
- Modern, lean VPN protocol, ideal for mobile staff.
- Zenarmor
- Plugin for Layer 7 application control and web filtering.
Contact
Any more questions?
We are happy to explain in a conversation.