OPNsense DEC677 Firewall Appliance
OPNsense® DEC677 – fanless firewall appliance with 5 Gbps throughput
Four 2.5 Gigabit ports, 5 Gbps firewall throughput, 600 Mbps IPsec and 13 W power draw – in a fanless desktop enclosure of 185 × 134 × 22 mm.
The DEC677 is built around a quad-core AMD G-Series SOC. OPNsense® comes preinstalled with one year of the Business Edition included. The appliance is designed, manufactured and shipped by Deciso in the Netherlands.
Five reasons for the DEC677
Fanless
No fan, no moving parts. Fanless desktop enclosure, 44 BTU/hr heat dissipation.
5 Gbps firewall throughput
420 kpps, 2.3 Gbps port to port, 125 µs latency. Up to 50 % faster than the DEC675 and DEC695.
13 W power draw
Typically 13 watts at 100–240 V AC, maximum 0.4 A.
Made in EU
Designed, manufactured and shipped by Deciso in the Netherlands.
Two-year warranty
Carry-in & return directly from the manufacturer, including one year of OPNsense Business Edition.
Typical deployment scenarios
- Firewall and routing for roughly 5 to 50 workstations
- Site-to-site connectivity over IPsec
- Branch offices, practices, law firms, retail stores
- Replacing the provider firewall on gigabit connections
- Redundant operation with state synchronisation, two units required
Deployment scenarios are recommendations by inett based on the performance figures, not statements by the manufacturer.
Full technical specifications
| Preinstalled software | OPNsense®, Open Source + 1 year Business Edition |
| Typical applications | Firewall, routing and VPN |
| Processor | AMD G-Series SOC, 4 cores, up to 1.8 GHz |
| Memory | 4 GB DDR3 |
| Internal storage | 32 GB solid state flash (integrated uSD) |
| Network ports | 4 × RJ45 2.5 GbE (100/1000/2500 Mbps) |
| Other ports | 1 × USB, 1 × console |
| Firewall throughput | 5,000 Mbps |
| Firewall packets per second | 420 kpps |
| Port to port throughput | 2.3 Gbps (195 kpps) |
| IPsec VPN throughput (AES256GCM16) | 600 Mbps (50 kpps) |
| Concurrent sessions | 3,000,000 |
| Connections per second | 35,000 |
| Latency (RTT) | 125 µs |
| VLANs (802.1q) | 4,093 |
| Firewall policies (recommended maximum) | 10,000 |
| High availability | with state synchronisation, requires two units |
| Dimensions (H × W × D) | 22 × 185 × 134 mm |
| Weight | 0.56 kg (appliance), 0.86 kg including power supply |
| Form factor | Desktop, fanless |
| Power requirements | 100–240 V AC, 50–60 Hz, max. 0.4 A |
| Power consumption | 13 W typical |
| Heat dissipation | 44 BTU/hr |
| Operating temperature | 0 to +40 °C |
| Storage temperature | −20 to +70 °C |
| Humidity | 10–90 %, non-condensing |
| Regulatory compliance | CE, FCC part 15 Class A, RoHS |
Package contents
- Desktop appliance
- Power supply
- Matching power cord
- Configuration cable
- Quickstart guide
Warranty and support
Two-year carry-in & return warranty from Deciso. inett assists with sizing, commissioning and day-to-day operation – including monitoring and maintenance on request.
Frequently asked questions
Is it fast enough for our internet connection?
Firewall throughput is 5 Gbps at 420 kpps. Over IPsec with AES256GCM16 Deciso states 600 Mbps at 50 kpps.
How does the DEC677 differ from the DEC697?
In storage and memory: 32 GB flash and 4 GB DDR3 versus 256 GB NVMe and 8 GB. SOC, ports and throughput are identical. Deciso does not intend the DEC677 for applications that demand disk writes such as a web proxy, intrusion detection or local netflow recording, and points to the DEC697 instead.
Does it come with OPNsense installed?
Yes. OPNsense® is preinstalled and one year of the Business Edition is included.
How many VLANs and rules are practical?
Deciso states 4,093 virtual interfaces (802.1q) and recommends a maximum of 10,000 firewall policies for the user interface. Concurrent sessions: 3 million, bounded by available memory according to the manufacturer's footnote.
Want us to check the sizing?
We match connection speed, user count, VPN load and planned services against the performance figures. A short message is enough.
Need more throughput?
All measurements are based on TCP traffic unless stated otherwise. Maximum packets per second is a peak value measured with 500-byte packets. Port-to-port figures were measured with 1500-byte packets. IPsec measured using AES256GCM16 and SHA512. Source of all technical data: Deciso product page.