Your checklists (
0
)
AI Checklist Generator
From the makers of
Manifestly Checklists
Sign in
Email address
Email me a magic link
Home
> PFSense
PFSense
Initial Setup
Verify hardware compatibility
Download the latest PFSense image
Create a bootable USB drive
Connect to the device and boot from USB
Follow the installation prompts to install PFSense
Basic Configuration
Access the PFSense web interface
Set up the WAN interface (DHCP or static)
Configure the LAN interface (static IP)
Set the admin password for the web interface
Update the system to the latest version
Firewall Rules
Define basic firewall rules for LAN and WAN
Create rules for specific services (e.g., HTTP, HTTPS)
Set up rules for VPN access if applicable
Enable logging for critical rules
NAT Configuration
Configure port forwarding rules as needed
Set up 1:1 NAT if required
Verify outbound NAT settings
DHCP Server Setup
Enable DHCP server on the LAN interface
Configure DHCP range and settings
Set static mappings for critical devices
VPN Configuration
Choose the type of VPN (OpenVPN, IPsec, etc.)
Install and configure the VPN server
Set up user authentication and access controls
Test VPN connectivity from a remote client
Security Hardening
Change the default admin username
Disable unused services and interfaces
Enable HTTPS for web access
Set up two-factor authentication
Regularly update PFSense and installed packages
Monitoring and Logging
Configure system logs and alerts
Set up monitoring tools (e.g., SNMP, Netflow)
Review logs regularly for suspicious activity
Backup and Recovery
Create a backup of the current configuration
Set up a schedule for regular backups
Test the restore process with a backup
Documentation
Document network topology and configurations
Keep a log of changes and updates
Create a troubleshooting guide for common issues
Maintenance
Schedule regular updates for PFSense
Review firewall rules and policies periodically
Monitor system performance and logs regularly
Download CSV
Download JSON
Download Markdown
Use in Manifestly
Use in Manifestly