A practical, example-driven guide to configuring even the most advanced features of pfSense 2.x

Key Features

Build a high-availability fault-tolerant security system with pfSense 2.x
Leverage the latest version of pfSense to secure your cloud environment
A recipe-based guide that will help you enhance your on-premise and cloud security principles

Book DescriptionpfSense is an open source distribution of the FreeBSD-based firewall that provides a platform for flexible and powerful routing and firewalling. The versatility of pfSense presents us with a wide array of configuration options, which makes determining requirements a little more difficult and a lot more important compared to other offerings.

pfSense 2.x Cookbook – Second Edition starts by providing you with an understanding of how to complete the basic steps needed to render a pfSense firewall operational. It starts by showing you how to set up different forms of NAT entries and firewall rules and use aliases and scheduling in firewall rules. Moving on, you will learn how to implement a captive portal set up in different ways (no authentication, user manager authentication, and RADIUS authentication), as well as NTP and SNMP configuration. You will then learn how to set up a VPN tunnel with pfSense. The book then focuses on setting up traffic shaping with pfSense, using either the built-in traffic shaping wizard, custom floating rules, or Snort. Toward the end, you will set up multiple WAN interfaces, load balancing and failover groups, and a CARP failover group. You will also learn how to bridge interfaces, add static routing entries, and use dynamic routing protocols via third-party packages.

What you will learn

Configure the essential pfSense services (namely, DHCP, DNS, and DDNS)
Create aliases, firewall rules, NAT port-forward rules, and rule schedules
Create multiple WAN interfaces in load-balanced or failover configurations
Configure firewall redundancy with a CARP firewall failover
Configure backup/restoration and automatic configuration-file backup
Configure some services and perform diagnostics with command-line utilities

Who this book is forThis book is intended for all levels of network administrators. If you are an advanced user of pfSense, then you can flip to a particular recipe and quickly accomplish the task at hand; if you are new to pfSense, on the other hand, you can work through the book chapter by chapter and learn all of the features of the system from the ground up.