What does PFsense alert you for?
-
What exactly can PFsense alert me for? I have seen howtos for dual wan going down notification, but what else, can it tell me when an admin has logged in? When a virus was found? When someone tried to goto a specific website? The email alerts are only good if they can alert me to something. I have the alerts setup and am able to send email just fine.
-
@DCM said in What does PFsense alert you for?:
When I virus was found?
FYI, pfsense doesn't do any virus scanning for your network.
Jeff
-
But you can install clamav for scanning as an application on Pfsense. It can scan incoming connections from what I understand though I have never set it up.
-
@DCM One thing I am sure of is pfSense can alert you to become a better network administrator, whether for home, or an enterprise, without sending you any emails...no joke!
-
@DCM It's better to have AV protection/scanning running on your client machines rather than on the firewall directly.
https://forum.netgate.com/topic/143725/installing-clamav-on-pfsense
Jeff
-
@akuma1x I believe its just a matter of personal preference...for me, I prefer running on pfSense...because I use Macs.
-
@NollipfSense But, from the linked port:
@stephenw10 said in installing clamav on pfsense:
Squid can use ClanAV to scan traffic that it caches. It only scans what it can see though so that's http and https if you are running full MITM mode. Otherwise you only scan unencrypted traffic which isn't much these days.
It doesn't hurt to enable it if you're running squid already. It's the only option for firewall anti-virus in pfSense.Steve
I mean, that stuff should still hold true today, almost a year after this post. But, I get your point.
By the way, there is an installation for Macs for ClamAV, I believe the same guys that make the pfsense package.
Jeff
-
@akuma1x said in What does PFsense alert you for?:
there is an installation for Macs for ClamAV
I use to run on older MacOS...with El Capitan it's no longer necessary on Macs. In my case with it on my network, it's really for my guest.
-
This has gotten way off....I don't need virus scan, I want to know about setting up alerts, I have the email setup. Virus scan was just an example. How about alerts for admin login or something like that??
-
Things like changing to a failover WAN, invalid firewall aliases, bootup, upgrade status, dynamic DNS IP update, CARP status change, etc.
