Ok, thanks. Tuned a little bit differently kern.ipc.nmbclusters="131072" kern.ipc.nmbjumbo9="20000"

What are your l2tp IP settings like? as far as server ip and remote address range

Really? What ISPs block pfSense? What is your evidence for this? How would they know? Steve

Most proxy settings have an option to bypass for local addresses.  Would this not solve the problem?  Since you're looking at HTTPS anyway, you might want to either check out WPAD configuration or pushing proxy settings down via AD GPO.

I guess we really should have mentioned that this is a not a network that will route ALL traffic via a single pfSense, that would be insane :-) pfSense would be deployed within local segments of the network where Internet connectivity would also be deployed. OpenVPN would be used to connect key locations together over the network.

Oh, thank you, it works!

Thank you all for your reply. When doing the speedtest there is not much in system activity. It's barely taxing the system. I just received a switch I ordered recently (Mikrotik RB250GS) and configured it for my network. I happen to do another speedtest while connected to this switch and voila I am getting what I am supposed to be getting. So I am inclined to think that I may have a cisco switch issue.

haproxy can do a little basic authentication.. but dont expect to much of it.. you will have to put lines like below into the advanced config sections. it might be enough for you purpose.?. let us know how it worked out. http://serverfault.com/a/242936 userlist UsersFor_AcmeCorp   user joebloggs insecure-password letmein backend HttpServers   .. normal backend stuff goes here as usual ..   acl AuthOkay_AcmeCorp http_auth(UsersFor_AcmeCorp)   http-request auth realm AcmeCorp if !AuthOkay_AcmeCorp

Hello Thanks to all of you. I will think about what soulution I go for. Thanks

thanks sir you rock…..  :-)

Are you using PFSense as a NAT or transparent firewall? My ISP will hand out as many IPs are you want via DHCP. Their official policy is 1 IP for marketing reasons, but in reality, they have customers that use switches instead of firewalls or routers, and those customers complained loudly, so I was told.

@Derelict: ******* squid.  Most people don't need it. +∞

Try to enter the IP address of your web server into your browser. When that works have a look at your DNS resolution, e.g. ping your web server by FQDN and look which IP you get. Which version pfSense are you using? If 2.2, are you using DNS forwarder or DNS resolver?

Thanks jimp!

Not currently, no. It may be possible by probing some info via SNMP or by check scripts using NRPE or similar.

For a VPN router you only need one interface. The "wan" can exist on your current LAN. The edge router would forward in the VPN port(s) to pfSense, and the edge router would also have a static route pointing the VPN subnet(s) at pfSense. That's really all there is to it.

You might be better off buying a preloaded device from the pfsense store.  Price is going to come in pretty close.

Can anybody help?