How can I disable the webGUI after configuration ?

[insmod]

I want to disable the webGUI after configuration,I only use the ssh to reduce the attack surface ,how can I disable the webGUI?
Thanks.

[johnpoz]

@insmod since pfsense is designed to be managed via the web gui, while some stuff can be done via the cli, ie either consoled in or via ssh. What you can do via management is going to be limited via that.

Your best bet is to just limit who can access the gui.. Create firewall rules that only allow from say your management network, or admin machine.

For example - the web gui is only available via my lan network, only devices on my lan are my main PC, and my nas - all my other segments have no access to the web gui via simple firewall rules blocking access to "this firewall". Dns and ntp is allowed, icmp - but they can not access the web gui port or any other service on the firewall, on any IPs be it its other lan segment Ips or even its public IP from lan side networks.

example: here is a locked down segment that would have no access to the firewall gui, or anything else on any pfsense IP other than ping, dns and ntp.