20250404

areas/OPNsense/Schulungen/20250319-pre-meeting-prep.md

@@ -13,4 +13,34 @@
 - Firewall - Aliase, NAT und Regeln
 - EURE FRAGEN
 - (Optional) Interfaces/Schnittstellen
-- (Optional) (Open)VPN 
+- (Optional) (Open)VPN 
+
+## Standard Features (OPNsense vs. Sophos)
+
+- DNAT corresponds to Port Forward (NAT)
+- SNAT corresponds to Outbound (NAT)
+
+### OPNsense
+
+#### Nativ
+- Base Setup (Routing, dhcp, dns, firewall regeln, vlans, authentizierungs server: ldap, totp, local, radius)
+- VPN: IPsec, OpenVPN, Wireguard
+- IDS/IPS Schutz via Suricata
+- backup: lokal, central instanz, google drive. Extra: nextcloud, git, ...
+
+#### Extra Features
+
+- Web Proxy (Caching Proxy, Web Filter, Transparent Proxy, SSl inspection, managed TLS exclusion)
+- Antivirus via (clamav + c-icap)
+
+### Sophos
+
+- Basis (network, dhcp, dns, firewall regeln, vlans, authentizierungs server: ldap, ad, radius, azure sso, etc.)
+- VPN: IPsec, SSL VPN (OpenVPN), L2TP, PPTP
+- IDS/IPS
+- Web Protection
+- Application Protection
+- Email Protection
+- Web Server Protection
+- Active Threat Response
+- Zero-day Protection