pfSense Firewall / Router / Squid / VPN Setup, Configuration & Deployment Services

pfSense is a free, open source customized distribution of FreeBSD Linux tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

pfSense is a popular project with more than 1 million downloads since its inception, and proven in countless installations ranging from small home networks protecting a PC and an Xbox to large corporations, universities and other organizations protecting thousands of network devices.

1. Firewall
    b. Dynamic firewall rule set which can filter by schedule
    c. Able to limit simultaneous connections on a per-rule basis
    d. Utilizes p0f, an advanced passive OS/network fingerprinting utility to allow you to filter by the Operating System initiating the connection
    e. Option to log or not log traffic matching each rule
    f. Highly flexible policy routing possible by selecting gateway on a per-rule basis (for load balancing, failover, multiple WAN, etc.)
    g. Aliases allow grouping and naming of IPs, networks and ports. This helps keep the firewall rule set clean and easy to understand, especially in      
       environments with multiple public IPs and numerous servers.
    h. Transparent layer 2 firewalling capable - can bridge interfaces and filter traffic between them, even allowing for an IP-less firewall.
    i. Packet normalization - Description from the pf scrub documentation - “Scrubbing” is the normalization of packets so there are no ambiguities in
       interpretation by the ultimate destination of the packet. The scrub directive also reassembles fragmented packets, protecting some operating systems
       from some forms of attack, and drops TCP packets that have invalid flag combinations."
2. Network Address Translation (Port Forward / 1:1 NAT)
3. Load Balancing (for multiple WAN Connection and failover)
4. Proxy Server / Transparent Web Proxy via Squid
5. Virtual Private Network (IPSEC / PPTP)
6. DHCP Function (Static MAC and ARP Addressing)
7. DNS Function
    a. DNS Forwarder
    b. Content Filtering
    c. Phishing Protection
    d. Domain Blocking
    e. Adult Site Blocking
    f. Domain Whitelisting (allowing domains for browsing)
8. RRD Graphs (real-time or historical utilization)
9. Backup and Restore on-the-fly