Sonicwall and pfsense setup

[jan.gestre]

Hi guys,

I just want to know if any of you already experienced setting up soniwall and pfsense, basically I want to use pfsense as proxy behind the sonicwall because we need to have traffic shaping capability which sonicwall can't provide, even if it can, we don't want to purchase a license for it. Your expert advise will be highly appreciated.

Internet <–- Sonicwall <--- PfSense <----Clients
                                  |
                                  |
                            Public Servers

TIA,

jan

[Cry Havok]

Not Sonicwall, but I do have a pfSense box behind a SOHO firewall/router and it works fine.

[jan.gestre]

@Cry:

Not Sonicwall, but I do have a pfSense box behind a SOHO firewall/router and it works fine.

Does pfsense wan port needs a public ip for this setup? I haven't tried this dual firewall setup yet, what do you think will be the best configuration? sonicwall in transparent mode and pfsense in NAT mode?

TIA

[Cry Havok]

@jan:

Does pfsense wan port needs a public ip for this setup?

It certainly doesn't for me.

@jan:

I haven't tried this dual firewall setup yet, what do you think will be the best configuration? sonicwall in transparent mode and pfsense in NAT mode?

Depends on what you're trying to achieve.  In my case I have a DMZ, so using a transparent external firewall wouldn't make sense.

[jan.gestre]

We'll be having a DMZ after the sonicwall wherein the webserver and mailserver are located after that comes pfsense then the LAN clients.

[Cry Havok]

My personal take would be to leave the Sonicwall as a standard firewall, put the web and mail servers on non-internet IPs and forward the relevant ports only.