pfsense, opensource firewall

17
A PROVEN OPEN SOURCE FIREWALL OpenSource víkend Bratislava, 8.-9. marec 2014

Upload: erik-kirschner

Post on 16-May-2015

3.253 views

Category:

Technology


4 download

DESCRIPTION

pfSense Firewall

TRANSCRIPT

Page 1: pfSense, OpenSource Firewall

A PROVEN OPEN SOURCE FIREWALLOpenSource víkend Bratislava, 8.-9. marec 2014

Page 2: pfSense, OpenSource Firewall

!

Erik Kirschnerfounder & co-owner Rackscale !+421 908 707 197 [email protected] [email protected] !@ErikKirschner http://sk.linkedin.com/in/erikkirschner http://www.erikkirschner.skhttp://shop.erikkirschner.sk

Page 3: pfSense, OpenSource Firewall

pfSense Why

Page 4: pfSense, OpenSource Firewall

pfSense, WhyOdhalená sieť 300 tisíc kompromitovaných domácich routerov

Linksys, D-Link, Micronet, Tenda, TP-Link

Zmena DNS zaznamu

http://www.dsl.sk/article.php?article=15295

Page 5: pfSense, OpenSource Firewall

pfSense Introduction based OpenSource distribution

Founded in 2004, now in 2.1 version Powerful and flexible firewalling and routing platform

Multiple platforms Live CD Memstick/USB Nanobsd embedded VGA or Serial Console

Page 6: pfSense, OpenSource Firewall

pfSense ApplicationsFirewall, (incl. HA, CARP)

SOHO Router (with 3G backup link)

WAN Router (with 3G backup link)

Wireless Access Point/Captive Portal

VPN Appliance (OpenVPN, IPSec, L2TP, PPTP)

3rd party Packages (VoIP, Sniffers, Proxy,….)

Page 7: pfSense, OpenSource Firewall

pfSense HardwarepfSense 2.1 is based on FreeBSD 8.3 Hardware Compatibility List

General Requirements: CPU Intel Pentium II Processor 256 MB RAM

6-8 Mbps minimum requirements 10-20 Mbps no less than 266 MHz CPU 21-50 Mbps no less than 500 MHz CPU 51-200 Mbps no less than 1.0 GHz CPU201-500 Mbps no less than 2.0 GHz CPU, PCI-X or PCI-e501+ Mbps no less than 3.0 GHz, PCI-X or PCI-e

Page 8: pfSense, OpenSource Firewall

pfSense Hardware

Page 9: pfSense, OpenSource Firewall

pfSense FeaturesOpenBSD pf Firewall Stateful Firewall NAT/PAT Traffic Shaper

High Availability (CARP)

Load Balancing Outbound, multiple WAN connections Inbound, to distribute load between multiple servers

Virtual Private Network (VPN) Remote Access, LAN-to-LAN, IPSec, SSL VPN, PKI

Reporting and Monitoring RRD Graphs, Real Time Information

Dynamic DNS

Captive Portal

Page 10: pfSense, OpenSource Firewall

pfSense FeaturesDHCP Server and Relay

Web and CLI User Interface

Package Management

Update & Configuration Management Config History Backup/Restore (XML)

User Management Local Database LDAP Radius

Cert Manager

And More,…..

Page 11: pfSense, OpenSource Firewall

pfSense Screenshots

Page 12: pfSense, OpenSource Firewall

pfSense Screenshots

Page 13: pfSense, OpenSource Firewall

pfSense Screenshots

Page 14: pfSense, OpenSource Firewall

pfSense Screenshots

Page 15: pfSense, OpenSource Firewall

pfSense ResourcesOnline https://doc.pfsense.org (FAQs, How-Tos, Tutorials,..)

Book pfSense: The Definitive Guide Version 2.1

Page 16: pfSense, OpenSource Firewall

pfSense, Where BuyHardware: akýkoľvek

Software: www.pfsense.org

!

Hotové riešenia (appliancies):

http://shop.erikkirschner.sk

Page 17: pfSense, OpenSource Firewall

Questions?!

Erik Kirschner

[email protected]

+421 908 707 197