Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

General settings

In the System | Settings menu, you will find several submenus that will allow you to configure some settings in OPNsense. Let's go through them one by one. To access each one, access System | Settings | <Submenu's name> as follows.

The administration page

On this page, we will find options related to accessing OPNsense and administration such as WebGUI and SSH configuration and authentication options.

WebGUI options

The following options are available in WebGUI:

  • Protocol: Which protocol will be used to access WebGUI: HTTP or HTTPS? It isn't recommended that you use HTTP as it will pass all data in cleartext, which means no security; prefer HTTPS instead.
  • SSL certificate: The certificate that will be used to enable HTTPS to have access to WebGUI.
  • SSL ciphers: The ciphers that will be used to access WebGUI. This can limit access from old web browsers, for example. Caution: If you select ciphers incompatible with your available...