Design philosophy

Deciso is a Netherlands-based networking manufacturer best known for being the founder, primary sponsor, and core developer behind OPNsense, one of the world’s most popular open-source firewall and routing platforms.
When people refer to “Deciso firewalls,” they are generally referring to Deciso’s specialized physical hardware appliances that come pre-configured with the OPNsense operating system.
Core Hardware Philosophy
Deciso designs security appliances engineered specifically to run OPNsense and FreeBSD with optimal performance. They focus on high-quality, power-efficient, and often fanless designs that use standard, reliable processors (primarily AMD embedded architectures).
Key design elements of Deciso appliances include:
- Turnkey Out-of-the-Box Setup: Pre-loaded with OPNsense, ready to deploy immediately.
- Minimalist & Optimized: Deciso strips out unneeded components, focusing entirely on maximum routing throughput and low latency.
- Commercial Bundling: Their appliances typically ship with a one-year license of OPNsense Business Edition, making them highly appealing for enterprises needing commercial support and enhanced software stability.
The Software Core: OPNsense Features
Because Deciso firewalls run OPNsense, they boast a massive range of enterprise-grade features without licensing paywalls:
- Stateful Inspection Firewall: Live packet tracking, strict port forwarding, and granular rulesets.
- Virtual Private Networking (VPN): Built-in, high-throughput support for modern protocols like WireGuard, IPsec, and OpenVPN.
- Intrusion Detection and Prevention (IDPS): Powered by Suricata, allowing real-time deep packet inspection to block attacks.
- Traffic Shaping & Captive Portal: Easy bandwidth optimization, guest network management, and user authentication.

