Current FWMS compatibility
FWMS currently targets pfSense CE and compatible Netgate appliances running that edition. OPNsense management has not been validated or released in FWMS. Evaluate a supported lab appliance before purchasing for a production fleet.
Compare management coverage, not just a feature list
When evaluating a pfSense central management platform or an OPNsense management tool, identify the specific changes engineers must make: firewall rules, NAT, interfaces, VPN, services, aliases, diagnostics, and package settings. Verify those workflows against the actual appliance release and exposed API.
Do not assume that an integration for one firewall platform can configure the other. Ask which devices and versions have been tested, what requires SSH or a package, and what remains a native-interface task.
Check how logs become evidence
Review how the platform transports logs, authenticates the sending appliance, separates customer records, and makes events searchable. An engineer should be able to select a device, time range, and relevant source or destination addresses when investigating a reported problem.
Country, website, intrusion, and malware reporting depend on available events and enabled sensors. Confirm that the packages used in your environment send the fields required for the report you expect.
Assess access, deployment, and ongoing operations
For MSP use, check whether customer accounts are limited to their assigned devices and whether staff access fits your authentication requirements. Review user lifecycle management, audit visibility, template behavior, and backups as part of the evaluation.
Also verify outage notifications, stopped-log detection, offboarding, storage planning, and how licensing affects device registrations. A useful assessment follows a device from enrollment through configuration, investigation, reporting, and removal.
Where FWMS fits today
For a supported pfSense CE fleet, FWMS combines SSH/API configuration, encrypted log collection, investigations, customer access, templates, and scheduled reports on a self-hosted Ubuntu server. The central pfSense management guide describes these workflows in more detail.
If your requirement is OPNsense central management, treat it as a compatibility requirement that still needs a validated solution; the current FWMS release should not be purchased on the assumption that OPNsense support is available.