Predictable costs
You pay for hardware, optionally the Business Edition, and our services. Licence costs do not grow with your company.
OPNsense for mid-sized companies
Several sites, home working, production and administration on the same network, plus cyber insurance, customer audits and NIS2: mid-sized companies need enterprise security, but not an enterprise licensing model.
Requirements
What is needed, and what OPNsense delivers
Typical requirements
- site-to-site links via IPsec, often over several lines
- VPN with 2FA for field staff and home working
- separation of office IT, production, guests and IoT
- publishing individual services such as webmail or ERP
- evidence for insurers, customer audits and NIS2
What OPNsense offers
- as many VLANs and zones as you need at no extra cost
- multi-WAN with failover and load balancing
- IPS between segments, not just at the perimeter
- reverse proxy with automatic certificates
- connection to SIEM and SOC
Architecture
Typical segments in a mid-sized company
| Segment | Contents | Principle |
|---|---|---|
| Management | switches, firewall, hypervisor | reachable only from the admin network |
| Servers | AD, file server, ERP | access only to required services |
| Clients | workstations | internet via filter, servers only on permitted ports |
| Production | machines, PLCs, control stations | strictly isolated, remote maintenance only via VPN |
| Guests | visitor Wi-Fi | internet only |
| IoT | printers, cameras, time clocks | only to defined destinations |
Costs and evidence
Predictable, auditable
Evidence that counts
Insurers and auditors ask about segmentation, 2FA, logging and patch status. We provide the technology, documentation and processes.
FAQ
Frequently asked questions
We do not have a network specialist. Can this still work?
Yes. We take over setup and operation entirely or support your IT where it needs backing.
How do we connect production securely?
Via a dedicated segment with minimal permissions. Remote maintenance by machine manufacturers runs only via VPN with time-limited access.
Does OPNsense help with NIS2?
The firewall provides segmentation, logging and access control. For risk management, incident reporting and SOC we work with NEOSEC, see SOC with NEOSEC.
Contact
Let’s talk about your network
An initial conversation with an OPNsense engineer, not a sales pitch.