Official OPNsense Reseller
OPNsense Firewall &
Decisio Appliances
Convergent Cloud Computing deploys, configures and supports OPNsense enterprise firewalls and sells official Decisio hardware appliances for structured and mission-critical organisations.
Decisio 2026 Range
| Model | Form Factor | Throughput | Use Case |
| DEC3920 | Desktop | 1 Gbps | SME <50 users |
| DEC3940 | 1U Rack | 5 Gbps | Enterprise <200 users |
| DEC3960 | 1U Rack | 10+ Gbps | Datacenter |
OPNsense by the Numbers
(DEC850 / DEC3862)
(DEC850 series)
AES-256-GCM
desktop appliance
(DEC850 / DEC3862)
(security patches)
Source: Decisio official datasheets (DEC750 / DEC850 / DEC3862, 2024)
What We Offer
Decisio DEC Appliances
Purpose-built OPNsense hardware in desktop (DEC600–DEC800) and rack-mount (DEC2600–DEC4200) form factors. Engineered in Europe for long-term operational reliability.
Decisio Hardware →OPNsense Business Edition
Official annual Decisio subscription unlocking OPNcentral multi-site management, OPNWAF web application firewall, GeoIP and an enterprise-tested update repository.
Business Edition →Professional Support
Official Decisio support subscriptions plus Convergent on-site intervention. Contractual SLA, incident response and priority patching.
Contact us →Deployment & Integration
Full OPNsense stack deployment: network segmentation, VLAN architecture, VPN (OpenVPN / WireGuard / IPsec), IDS/IPS with Zenarmor, high-availability clusters and documented deliverables.
Our services →Why OPNsense for Enterprise?
- Open source, auditable codebase — no vendor lock-in, full transparency on every rule and policy.
- FreeBSD foundation — proven stability and security for critical network infrastructure.
- Decisio-backed commercial offering — professional appliances, subscriptions and SLA from the project's original authors.
- Active weekly release cycle — security patches deployed faster than most commercial firewall vendors.
- Full feature parity at lower TCO — stateful firewall, IDS/IPS, VPN, WAF, reverse proxy, HA clustering — no per-feature licensing.
OPNsense® is developed and maintained by Decisio B.V. — opnsense.org
Why choose enterprise open source firewall
Modern network infrastructures require scalable and transparent protection. OPNsense offers open source agility with enterprise robustness.
Evolving network threats
Volumetric DDoS attacks increased by 150% in 2024. Intrusion techniques are evolving: zero-day exploitation, DNS tunneling, distributed denial of service attacks. Traditional firewalls struggle to keep pace without costly updates.
Transparency vs black boxes
Proprietary solutions hide their detection algorithms and filtering mechanisms. OPNsense provides auditable source code, explicit filtering rules, and complete traceability of security decisions.
Sustainable economic model
Avoid vendor lock-in and unpredictable pricing renegotiations. OPNsense eliminates per-user license costs, artificial bandwidth restrictions, and separate paid modules. Invest in hardware performance rather than licenses.
Our OPNsense deployment approach
Convergent applies a proven methodology to smoothly migrate to OPNsense without service interruption.
Existing network analysis
Critical flow inventory — Business applications, site interconnections, existing VPNs. Current configuration audit — Filtering rules, NAT, routing. Constraint identification — Bandwidth, latency, required availability.
Architecture and sizing
Optimal hardware selection — CPU, RAM, network interfaces according to your throughput. High availability design — CARP configuration, automatic failover. Addressing plan — Network segmentation, VLANs, trust zones.
Progressive migration
Parallel deployment — OPNsense configured alongside your current firewall. Real-world testing — Progressive switching of non-critical flows. Functional validation — Applications, VPNs, business rules.
Production & optimization
Controlled switchover — Migration during off-peak hours, rollback possible. Continuous monitoring — Performance monitoring, alerts. Optimization — Rule tuning based on usage feedback.
Migration timeline
Network audit: 2-3 days • Architecture & ordering: 1 week • Installation & configuration: 3-5 days • Testing: 1 week • Production: 1 day • Stabilization: 2 weeks support
Executive questions about OPNsense
Can OPNsense truly replace our Fortinet/Palo Alto?
Yes, for the majority of enterprise use cases. OPNsense natively integrates: application filtering, Suricata IPS, web proxy, site-to-site/client VPN, CARP high availability. Advanced functions (DPI, geolocation, reporting) are included at no extra cost. For very specific needs, we evaluate case by case.
What savings to expect over 3 years?
Elimination of annual licenses (often 15-30% of hardware cost), removal of artificial bandwidth limitations, integrated modules vs separate paid options. Convergent provides a comparative TCO calculation based on your current infrastructure. Investment focuses on performant hardware rather than recurring licenses.
Will support be sufficient compared to major vendors?
Convergent provides level 1 and 2 support in French and English. For complex cases, OPNsense Business Edition grants access to Deciso support (official publisher). The OPNsense community is active and patches are published quickly. Complete technical documentation available.
How to manage updates without risking production?
OPNsense offers automatic or manual updates. Business Edition includes a tested and validated repository. Convergent recommends high availability architecture (CARP) enabling updates without service interruption. Systematic testing in qualification environment.
Can our IT teams administer OPNsense autonomously?
The OPNsense web interface is intuitive for network/security administrators. 2-day training recommended to master specifics (filtering rules, VPN, monitoring). French documentation provided. Convergent support available during skill ramp-up.
Request a Quote or Technical Discussion
Whether you need a Decisio appliance, an OPNsense Business Edition subscription, a support contract or a full firewall deployment — contact us directly.