---
import Layout from '../../components/Layout.astro';
---

<Layout title="OPNsense Firewall">
  <h1>OPNsense Firewall Service</h1>
  
  <div class="service-intro">
    <p>Secure your network with OPNsense, a powerful open-source enterprise-grade firewall and routing platform that provides comprehensive network protection and control.</p>
  </div>
  
  <div class="service-description">
    <h2>What is OPNsense?</h2>
    <p>OPNsense is a premium open-source firewall and routing platform that combines robust security features with an intuitive interface. It incorporates advanced capabilities like intrusion detection, VPN services, traffic shaping, and application filtering, all managed through a straightforward web interface. As a security-focused platform, it provides enterprise-grade protection for both home and business networks.</p>
    
    <h2>Our OPNsense Services</h2>
    <p>We offer several implementation options based on your specific needs:</p>
    
    <div class="service-feature">
      <h3>Hardware Selection and Setup</h3>
      <p>We'll help you select the appropriate hardware platform for your OPNsense deployment, considering factors like network size, desired throughput, and future scalability. Then We'll install and configure the OPNsense software with optimized settings for your specific environment, ensuring proper hardware utilization and reliable operation.</p>
    </div>
    
    <div class="service-feature">
      <h3>Network Security Configuration</h3>
      <p>We'll implement a comprehensive security configuration including firewall rules, intrusion detection/prevention settings, web filtering, spam protection, and application control. Your network will be protected from external threats while maintaining appropriate access for legitimate users and applications, with rules tailored to your specific security requirements.</p>
    </div>
    
    <div class="service-feature">
      <h3>VPN and Remote Access Setup</h3>
      <p>We'll configure secure VPN services (OpenVPN, WireGuard, or IPsec) for remote access to your network, establish site-to-site connections between multiple locations, and implement appropriate access controls and authentication mechanisms. This enables secure remote work while maintaining protection of your internal resources.</p>
    </div>
    
    <h2>Benefits of OPNsense</h2>
    <ul>
      <li><span class="highlight">Enhanced Network Security:</span> Protect your network from external threats with advanced firewall capabilities and intrusion detection/prevention systems</li>
      <li><span class="highlight">Complete Visibility:</span> Gain insights into your network traffic with comprehensive monitoring and reporting tools</li>
      <li><span class="highlight">Content Filtering:</span> Control access to websites and online services based on categories, domains, or content types</li>
      <li><span class="highlight">Traffic Management:</span> Optimize bandwidth usage with Quality of Service (QoS) features to prioritize critical applications</li>
      <li><span class="highlight">Secure Remote Access:</span> Enable secure connections to your network for remote users or between multiple sites</li>
    </ul>
    
    <h2>Features Included</h2>
    <p>Your OPNsense implementation will include:</p>
    <ul>
      <li>Stateful packet inspection firewall with customized rule sets</li>
      <li>Intrusion detection and prevention system (Suricata)</li>
      <li>Web proxy and content filtering</li>
      <li>VPN capabilities (OpenVPN, WireGuard, IPsec)</li>
      <li>Captive portal for guest networks (if needed)</li>
      <li>VLAN support for network segmentation</li>
      <li>Traffic shaping and bandwidth management</li>
      <li>Real-time monitoring and historical reporting</li>
      <li>Network address translation (NAT) and port forwarding</li>
      <li>High availability configuration (for business deployments)</li>
    </ul>
    
    <h2>Our Approach</h2>
    <p>When setting up OPNsense for clients, we take a comprehensive approach that includes:</p>
    <ul>
      <li>Assessing your current network infrastructure and security requirements</li>
      <li>Designing a tailored implementation plan for your specific environment</li>
      <li>Selecting and configuring appropriate hardware with performance headroom</li>
      <li>Implementing security features with a defense-in-depth strategy</li>
      <li>Setting up monitoring and alerting to notify you of potential issues</li>
      <li>Creating detailed documentation of your network configuration</li>
      <li>Training you or your staff on basic administration and monitoring</li>
      <li>Providing recommendations for ongoing security maintenance</li>
    </ul>
  </div>
  
  <div class="service-cta">
    <h2>Secure Your Network with Enterprise-Grade Protection</h2>
    <p>Ready to enhance your network security with a robust, open-source firewall solution? Contact me today to discuss implementing OPNsense for your home or business network.</p>
    <a href="/contact" class="cta-button">Contact Us</a>
  </div>
</Layout>

<style>
  .service-intro {
    font-size: 1.2rem;
    margin: 1.5rem 0;
    padding: 1.5rem;
    background-color: var(--gruvbox-bg-soft);
    border-radius: 5px;
    border-left: 4px solid var(--gruvbox-red);
  }
  
  .service-description {
    margin: 2rem 0;
  }
  
  .service-feature {
    margin: 1.5rem 0;
    padding: 1.5rem;
    background-color: var(--gruvbox-bg-soft);
    border-radius: 5px;
  }
  
  .service-feature h3 {
    color: var(--gruvbox-aqua);
    margin-top: 0;
  }
  
  .service-cta {
    margin: 2rem 0;
    padding: 1.5rem;
    background-color: var(--gruvbox-bg-alt);
    border-radius: 5px;
    text-align: center;
  }
  
  .service-cta .cta-button {
    margin-top: 1rem;
  }
</style>
