Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Web proxy integration

To control what guests can access on the internet, we can apply some web proxy controls. As we explored in the last chapter, the native web proxy features on OPNsense provide reasonable control of internet content. It is a good idea to control what guests access on the internet. Depending on each country's laws, it may not be allowed to inspect users' web browsing traffic, so check whether you can do this first!

In this section, we'll take the necessary steps to enable web filtering on the GuestNet, integrating it with the web proxy, as follows:

Important Note

Before we start working through the following steps, make sure that the web proxy is up and running. If you aren't sure how to do that, please refer to Chapter 20, API – Application Programming Interface, for the steps to configure the web proxy with the transparent method.

Remember to disable or remove the NAT port forwarding rules created in the previous chapter to...