Your rules keep working
Existing firewall rules, interfaces, NAT and VPNs are untouched. Zedmos adds inspection and policy above them rather than replacing them.
Migration
Try it on the box you have, move when you are ready
You do not have to replace anything to evaluate Zedmos. The same inspection engine that ships inside Zedmos NGFW also installs as a package on an OPNsense or pfSense box you already run, so you can put it in front of real traffic before you commit to hardware — and move the whole system across when it has earned it.
What changes on the firewall
Both platforms, one interface
The same nine pages and the same policy model on OPNsense and pfSense, so a mixed estate costs nothing extra to operate.
Reversible in one step
It installs from a package repository and uninstalls from the settings page. A trial commits the estate to nothing.
Questions and answers
Do I have to migrate my configuration to try Zedmos?
No. Nothing is imported or converted. Zedmos installs as a package on the OPNsense or pfSense CE box you already run and adds inspection and policy above your existing rules.
Can I keep running OPNsense or pfSense permanently?
Yes. The package is a supported deployment, not only a trial. Moving to Zedmos NGFW is an option for when the engine has earned it, not a requirement.
What is the difference between the package and Zedmos NGFW?
The same engine and the same policy model. Zedmos NGFW adds our own FreeBSD-based operating system, ZedmOS, installed from an image onto x86 hardware you choose, so the whole system is ours to support.
How do I remove Zedmos if the trial does not convince me?
From the settings page, in one step. A trial commits the estate to nothing, and the free tier covers three firewalls for thirty days.