OPNsense® DEC697 – fanless firewall appliance with IDS/IPS and web proxy
Four 2.5 Gigabit ports, 5 Gbps firewall throughput, 8 GB DDR3 and 256 GB NVMe – in a fanless desktop enclosure of 185 × 134 × 22 mm.
The DEC697 is built around a quad-core AMD G-Series SOC. Deciso lists it for firewall, routing, VPN, IDPS and web proxy. OPNsense® comes preinstalled with one year of the Business Edition included. The appliance is designed, manufactured and shipped by Deciso in the Netherlands.
Six reasons for the DEC697
Listed for IDS/IPS and web proxy
256 GB NVMe and 8 GB DDR3. Deciso names firewall, routing, VPN, IDPS and web proxy as typical applications.
5 Gbps firewall throughput
420 kpps, 2.3 Gbps port to port, 125 µs latency. Up to 50 % faster than the DEC675 and DEC695.
Threat protection approx. 541 Mbps
50 kpps, measured with around 35,000 rules enabled.
7 million concurrent sessions
Bounded by available memory according to the manufacturer's footnote, here 8 GB DDR3.
Fanless at 13 W
No fan, no moving parts. 44 BTU/hr heat dissipation, maximum 0.4 A.
Made in EU, two-year warranty
Carry-in & return directly from the manufacturer, including one year of OPNsense Business Edition.
Typical deployment scenarios
- Firewall, routing and VPN for small and medium sites
- IDS/IPS with Suricata
- Web proxy with caching
- Site-to-site connectivity over IPsec
- Redundant operation with state synchronisation, two units required
Deployment scenarios are recommendations by inett based on the performance figures, not statements by the manufacturer.
Full technical specifications
| Preinstalled software | OPNsense®, Open Source + 1 year Business Edition |
| Typical applications | Firewall, routing, VPN, IDPS and web proxy |
| Processor | AMD G-Series SOC, 4 cores, up to 1.8 GHz |
| Memory | 8 GB DDR3 |
| Internal storage | 256 GB NVMe solid state flash |
| Network ports | 4 × RJ45 2.5 GbE (100/1000/2500 Mbps) |
| Other ports | 1 × USB, 1 × console |
| Firewall throughput | 5,000 Mbps |
| Firewall packets per second | 420 kpps |
| Port to port throughput | 2.3 Gbps (195 kpps) |
| IPsec VPN throughput (AES256GCM16) | 600 Mbps (50 kpps) |
| Threat protection (IDS/IPS) | approx. 541 Mbps (50 kpps) |
| Concurrent sessions | 7,000,000 |
| Connections per second | 35,000 |
| Latency (RTT) | 125 µs |
| VLANs (802.1q) | 4,093 |
| Firewall policies (recommended maximum) | 10,000 |
| High availability | with state synchronisation, requires two units |
| Dimensions (H × W × D) | 22 × 185 × 134 mm |
| Weight | 0.6 kg (appliance), 0.9 kg including power supply |
| Form factor | Desktop, fanless |
| Power requirements | 100–240 V AC, 50–60 Hz, max. 0.4 A |
| Power consumption | 13 W typical |
| Heat dissipation | 44 BTU/hr |
| Operating temperature | 0 to +40 °C |
| Storage temperature | −20 to +70 °C |
| Humidity | 10–90 %, non-condensing |
| Regulatory compliance | CE, FCC part 15 Class A, RoHS |
Package contents
- Desktop appliance
- Power supply
- Matching power cord
- Configuration cable
- Quickstart guide
Warranty and support
Two-year carry-in & return warranty from Deciso. inett assists with sizing, commissioning and day-to-day operation – including monitoring and maintenance on request.
Frequently asked questions
How does the DEC697 differ from the DEC677?
In storage and memory: 256 GB NVMe and 8 GB DDR3 versus 32 GB flash and 4 GB. SOC, ports, firewall and IPsec throughput are identical. Deciso additionally lists the DEC697 for IDPS and web proxy and states 7 instead of 3 million concurrent sessions.
How much throughput remains with IDS/IPS active?
Deciso states approximately 541 Mbps at 50 kpps, measured with around 35,000 rules enabled.
Does it come with OPNsense installed?
Yes. OPNsense® is preinstalled and one year of the Business Edition is included.
How many VLANs and rules are practical?
Deciso states 4,093 virtual interfaces (802.1q) and recommends a maximum of 10,000 firewall policies for the user interface. Concurrent sessions: 7 million, bounded by available memory according to the manufacturer's footnote.
Want us to check the sizing?
We match connection speed, user count, VPN load and planned services against the performance figures. A short message is enough.
Cheaper without IDS/IPS and proxy?
All measurements are based on TCP traffic unless stated otherwise. Maximum packets per second is a peak value measured with 500-byte packets. Port-to-port figures were measured with 1500-byte packets. IPS performance was measured with around 35,000 rules enabled. IPsec measured using AES256GCM16 and SHA512. Concurrent sessions follow from available memory, where one state consumes 1 KB and 1 GB is reserved for system tasks. Latency was measured using netperf. Source of all technical data: Deciso product page.