Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Downloading and installing OPNsense

Now that we know the OPNsense versions and options available, we can proceed with our installation. In this book, I'll use Oracle's VirtualBox as the virtualization platform. I picked this one because it is easy to download and it runs on Windows, Mac, or Linux.

The first step is to download the OPNsense image:

  1. Go to the https://opnsense.org/download/ download page.
  2. Select the options as shown in the following screenshot:

Figure 2.1 – The OPNsense download page

After downloading, you must uncompress the file that will be saved in a bzip2 format. In Windows, you can use the 7 - zip tool for that from https://www.7-zip.org/download.html.

If you are on Linux or macOS, use the following command line:

$ bzip2 -d <filename>.bz2

It's recommended to run a checksum in the download file, just to check its integrity.

On Linux you can run this:

$ sha256sum <filename&gt...