Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WANTED: Assistance in setting up a NEW Firewall for a Windows network

    Scheduled Pinned Locked Moved General pfSense Questions
    14 Posts 5 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      Gilrod
      last edited by

      Thanks :)

      The other area, where we ARE struggling is VPN.

      As a software developer we need to take security VERY seriously, however we need to let some external contractors have access to our project management servers…

      So we believe a VPN is the way to go, but really have less than ZERO of a clue how to set this stuff up.

      Any help?

      1 Reply Last reply Reply Quote 0
      • D
        dhatz
        last edited by

        At least in my browser, there is a banner "Need pfSense help?" at the top of most forum pages, which links back to BSD-Perimeter company (creators of pfSense).

        Have you tried that option?

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          And yeah that is pretty easy as well, openvpn is a couple of clicks.

          If allow remote access to your pfsense, I can set that up for you in like 3 minutes tops.  Did you follow the wizard ;)

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • H
            heper
            last edited by

            as said before, for professional support (they do remote-installs) go with BSD Perimeter. They developed pfsense, they do hundreds of commercial installs every year.

            I'm sure there will be lots of forum members willing to set this up for you, some will even do it for free.
            If you really can't find anyone else, and are in dire need,  i'd be willing to help out but i'd prefer not to.
            (Something can always go wrong, and there are limited recovery options when you are a zillion miles away)

            kind regards

            jeroen

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              Im with heper, get with commercial support if this is for COMPANY, etc..  You said you would be willing to pay - then pay them, this helps everyone out!

              I would be happy to do it for free as well, but its not all that difficult - you don't have any IT people there?  If you have been working in IT for more than a couple of years and you can not figure out how to setup pfsense, maybe you should not be in the field.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • G
                Gilrod
                last edited by

                I've been in games development for 25 years this year, but not IT also we only have 12 staff so an employed IT person isn't really needed…

                In case you're wondering ... Http://www.jawltd.com and http://www.oddworld.com is who we are...

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  I would be happy to help, for free even..  You have not put out anything your looking to do that would take more take more than a few minutes really.

                  But if your looking to pay, I would go with https://portal.pfsense.org/index.php/support-subscription

                  You get 5 hours for $600

                  –--
                      Support - if you run into a problem with pfSense, we're here to help.

                  Configuration assistance - whether you need some brief guidance on the best approach, or want us to walk you through the configuration via GoToMeeting to control your screen, or log in to your firewall and completely configure it ourselves, we are available for any level of assistance.

                  Configuration review - we can review your configuration to ensure it follows both pfSense and general firewall best practices, and provide recommendations on improvements.

                  Network design - When deploying a new network environment, it's important to start with a sound network design. We have provided assistance with network design ranging from a review of your proposed design, to completely designing the environment to your requirements and providing complete, professional network diagrams and documentation. These are commonly larger or more complex networks, such as co-location environments, WISPs, small ISPs, universities, and large corporate environments.

                  Conversions to pfSense - For customers with an existing firewall looking to convert to pfSense, we can configure pfSense matching the settings of your existing firewall product. We have experience with a wide range of commercial and open source firewalls, and extensive expertise and experience with Cisco PIX and ASA. To determine whether we can convert your existing firewall to pfSense, email us .

                  I would think the configuration and network design are the 2 your looking for.  And nobody knows pfsense better then they do! ;)  And for $600 for 5 hours, that's a FAIR rate to be sure..  I would charge the same if I was going to charge you ;)

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • G
                    Gilrod
                    last edited by

                    Here's a list of what we're looking for …

                    1. Setup a VPN using our AD usernames and passwords...

                    2. We have an Apache/PHP/MySQL server which we'd like to be accessible via LAN and WAN

                    3. We also have exchange server with ISA for web mail access.

                    So that's the whole shebang ;)

                    Stew

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      1. not a problem, user manager, servers point it to your AD.  Then setup openvpn (what I would suggest as choice)
                      2. that is a simple port forward, pfsense has nothing to do with lan access - unless you have multiple network segments?
                      3. Do you mean OWA, ISA is outdated windows firewall and nothing to do with exchange. OWA is the web access for exchange email.  Either way again that is simple port forward.

                      There really is not much there.  And you want to do this with your current pfsense?  I would have to assume your port forwards are already setup if your access your Webserver?  Is the email new?  Or do users currently access it via web?

                      The hardest part would be getting the info needed from you to point your pfsense to your AD for the vpn integration ;)

                      I am sure $600 is not out of your companies budget - so just get a support subscription.  Might be something you want to keep going forward, if you ever run into problems/questions you got a hotline right into the bat cave ;)

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • G
                        Gilrod
                        last edited by

                        I thought ISA was the web server for OWA?

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.