From Securepoint to OPNsense
Securepoint is an established German vendor, and we support both platforms. If you are considering a switch, it is usually about the licensing model or about requirements for which OPNsense offers more room.
At a glance
- Source
- Securepoint
- Target
- OPNsense Business Edition
- Cutover
- usually 1–2 hours
- Fallback
- until sign-off
Starting point
Why operators switch
Securepoint UTMs run on term licences. When the licence ends, the UTM loses essential protection features. For many environments that is fair. As requirements for HA, automation or plugins grow, it becomes restrictive.
Typical reasons
- term licences without which the protection features stop
- need for HA clusters, API automation or plugins
- one platform for all sites
Features
What becomes of your Securepoint features
| Securepoint | OPNsense | Note |
|---|---|---|
| Network objects, groups | Aliases | transfer cleanly |
| Port filter | Interface rules | logic is translated |
| NAT, port forwarding | NAT | fully supported |
| IPsec | IPsec (IKEv2) | peers are coordinated |
| SSL VPN, WireGuard | OpenVPN or WireGuard with 2FA | new client profiles |
| Web filter, virus scanner in the proxy | Proxy plugin or Zenarmor | policies are rebuilt |
| AD integration | LDAP/AD, RADIUS | groups control access |
| Mail filter | – | separate mail gateway recommended |
Approach
How we migrate
Process
- Export and analysis of the UTM configuration
- Clean-up and translation of objects, rules, NAT and VPNs
- Rebuild of web and application filtering
- Testing and cutover in a maintenance window
- Follow-up support and documentation
What to watch out for
- Honest comparison: during the inventory we set licence costs, feature requirements and operating effort side by side. We only recommend switching if it pays off.
- Mail filter: if the UTM also checks email, we plan a separate solution for it.
- VPN clients: staff get new profiles and a quick guide.
The general process in five steps is described under Migrating to OPNsense.
FAQ
Questions about migrating from Securepoint
Is Securepoint bad?
No. Securepoint is a solid German vendor. The question is which model better suits your requirements and costs.
How long does the switch take?
For a single site, usually a few days of preparation and a maintenance window of one to two hours.
Contact
Send us your configuration export
We will tell you what can be transferred directly, what cannot and what the migration will cost.