SG-1100 - Recommended Setup

[vlan2]

Hi,

I have just purchased the SG-1100.

Any recommended setup, in terms of extra packages.

Would like to setup a secure firewall, so any recommendations on that front as well.

Thank You

[stephenw10]

It blocks all incoming connections by default so should be secure out of the box.

But you can install additional packages to improve that. Typically you might use Snort or Suricata for active IDS/IPS. The pfBlocker package allows you to add blacklists to deny outbound connections to.

https://docs.netgate.com/pfsense/en/latest/ids-ips/setup-snort-package.html

https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html

However you would want to be careful applying those as the RAM in the SG-1100 is limited and both those packages can use a lot of RAM if you just choose all the lists available.

Steve