Configuring pfSense and Netgate Devices

Summary

The website content provides a comprehensive collection of articles and guides on configuring pfSense and Netgate devices, covering various settings, security best practices, and troubleshooting tips.

Abstract

The provided web content offers an in-depth series of articles by Teri Radichel focusing on the configuration and security management of pfSense and Netgate devices. It includes practical advice on network security, detailed setup instructions for devices like the Netgate 6100, and strategies for routing traffic through AWS for enhanced security and inspection. The articles also address common issues, such as disabling IPv6, handling false positives in intrusion detection systems like Suricata, and configuring VPNs. Additionally, the content promotes Radichel's cybersecurity books, presentations, and consulting services through 2nd Sight Lab.

Opinions

The author emphasizes the importance of understanding and configuring network devices for optimal security, suggesting that readers should take proactive steps to secure their networks.
Teri Radichel advocates for the use of pfSense and Netgate devices as effective tools for network security and management.
There is a focus on the practical application of security measures, such as using aliases to block unwanted traffic and redirecting IoT devices to preferred DNS servers.
The author provides insights into the cost and architecture of AWS setups, implying that cloud services can be leveraged for improved network security.
Radichel acknowledges the complexity of network security and the need for methodical troubleshooting when issues arise, offering guidance on resolving common problems.
The content suggests that staying informed about network security is crucial, as evidenced by the inclusion of a mini-series on routing traffic through AWS and the mention of ongoing updates to the series.
The author's background, certifications, and recognition in the field of cybersecurity are presented to establish credibility and encourage readers to engage with her work and services.

About Teri Radichel: ~~~~~~~~~~~~~~~~~~~~ ⭐️ Author: Cybersecurity Books ⭐️ Presentations: Presentations by Teri Radichel ⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty ⭐️ Certifications: SANS ~ GSE 240 ⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec ⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab

Need Help With Cybersecurity, Cloud, or Application Security? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 🔒 Request a penetration test or security assessment 🔒 Schedule a consulting call 🔒 Cybersecurity Speaker for Presentation

Follow for more stories like this: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ❤️ Sign Up my Medium Email List ❤️ Twitter: @teriradichel ❤️ LinkedIn: https://www.linkedin.com/in/teriradichel ❤️ Mastodon: @teriradichel@infosec.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab

Configuring pfSense and Netgate Devices

Stories on various settings available in pfSense and Netgate devices running it

Watching the Network Watchers

Do you know what connections your router or firewall makes?

PFSense in Front of a UDM. Why?

Surprising feedback from the networking community

Home Network Diagram

Options and considerations for configuring your home network

Resolving No Route To Host

Routing traffic between routers such as pfSense and a UDM Pro

Getting to UDM Pro Setup Behind PFSense ~ No Internet

One of my posts on Network Security, PFSense, and a Ubiquiti Dream Machine Pro

Domain Names Used by Devices

Figuring out to what domain names your devices connect

Wifi with Ubiquiti Dream Machine Pro

Device adoption and connecting to WiFi

How to Inspect Network Traffic

A few tips on finding what matters on your home network

The Network Logs You Need

How can you tell if your host is connecting to a C2 server?

The Network Logs You Might Not Need (GASP!)

Traffic you might not want to log in certain cases and why

Concatenating IP Ranges And Other Firewall Rule Tricks

Tips for fewer firewall rules when you’re trying to block traffic from a network

Disable IPv6 on PFSense

If you don’t need IPv6 you can disable it to simplify network management

Redirect IoT Devices to Preferred DNS

Leveraging PFSense Nat Rules to redirect DNS requests when the device itself won’t let you

Backup and Restore PFSense Aliases

Leveraging a block list provided by someone else or move an alias list from one PFSense device to another

Changing the Admin Port and IP on PFSense

Set up the console on a different port so you can create rules specifically for that port

Considering Where to Buy Network Devices

Have you thought about the path your devices take to get to you?

Route traffic through AWS for security and inspection

How to Route Your Home Network or Business Network Traffic Through AWS and Why

ACM.464 pfSense > AWS Site to Site VPN > Transit Gateway > NAT > Internet

Configuring the VPC and VPC Flow Logs for an AWS Site to Site pfSense VPN

ACM.465 Creating a VPC to connect our pfSense to via a VPN and configuring logging to inspect the related network…

AWS Credentials and Roles for the pfSense VPN Wizard

ACM.466 Also, why I’m not going to use this wizard

Calculating the Cost of An AWS Architecture plus a Region Security Warning

ACM.467 Looking at the cost of resources on AWS for a private network

Creating an AWS Site to Site VPN for pfSense with a Virtual Private Gateway

ACM.468 Configuring specific encryption options to prevent downgrade attacks

Test Sending Traffic From a Load Balancer To A NAT Gateway

ACM.469 Spoiler Alert: Q told me I could do this but I can’t :( but this might help someone trying to set up a network…

Sending Traffic From pfSense to a Site to Site VPN to a VGW to a NAT in AWS

ACM.470 Another thing Q told me I could do but not allowed

Subnets And Routes For a Public NAT

ACM.471 Setting up proper routing to leverage a NAT to reach the Internet on AWS; Avoid traffic dropped due to…

Configure a Transit Gateway To Route Traffic From A Site To Site VPN to a NAT

ACM.472 Get the routing right or packets will mysteriously disappear

Monitoring AWS region and STS endpoint connections

Create pfSense Aliases To Block API Calls And Data Leaks to Unwanted Regions

What are all those STS calls to Australia, Europe, Asia, and South Africa?

Validating your pfSense rues are working with a host-based firewall.

Host-based Firewall to Validate Network Firewall

Another way to watch the watchers and understand potential supply chain attacks

When you need to log into the device via a connected device

Connect to a Netgate Console on a Mac

Because I always forget and the instructions are wordy

Setting up a 6100

PFSense 6100 Setup Step By Step

Getting started with the initial configuration of a Netgate 6100 and PFSense

Miscellanoeous pfSense configuration issues

Discrete Ports on PFSense

Protecting devices plugged into different ports on your firewall

Suricata on pfSense

Detecting the attacks (like bit torrent) that aren’t in your flow logs

Clearing an IP Blocked by a Suricata or Snort False Positive in pfSense

How to clear an IP that was incorrectly blocked by Suricata or Snort in pfSense

Network Security Devices Can’t Inspect Encrypted Payloads

Some Suricata or Sort rules won’t work with VPN and SSL encrypted traffic

Why The Stream Rules Don’t Work in Suricata on pfSense

Vendors not following specifications, misconfigured devices, false positives, and rule implementation issues

Where Are the Packets Captured by Suricata on pfSense?

Show me the packets!

When You Can’t Connect to pfSense or the Internet

Methodically troubleshooting things that could go wrong