Firewall lab fall the aim this lab install and configure pfsense

Firewall Lab - Fall 2022

The aim of this lab is to install and configure pfSense, which is an open-source firewall. You are required to set up the firewall in between your Kali VM and the internet. General overview of PfSense can be view in below picture.

•Windows:
https://customerconnect.vmware.com/en/downloads/details?downloadGroup=WKST- PLAYER-1624&productId=1039&rPId=91446
•Mac: Mac users have couple of options. Choose as per your convenience. This lab can smoothly be performed on Windows system; so, it is suggested that you use Windows.

ohttps://www.vmware.com/products/fusion/fusion-evaluation.html ohttps://customerconnect.vmware.com/downloads/get-
download?downloadGroup=FUS-PUBTP-22H2

1. Download the pfSense iso and install it on VMware (https://www.pfsense.org/download/)

NOTE: USE PFSENSE V2.6.0 VERSION TO PERFORM THIS LAB.

a. Import the iso.

b. Keep the other settings to default.

5. Boot the pfSense VM and follow the instructions in the following links to install pfSense: a. Installation guidance: https://docs.netgate.com/pfsense/en/latest/install/ download-installer-image.html
b. https://github.com/pfsense/

NOTE: PLEASE FIND THE LINK TO THE OFFICIAL DOCUMENTATION ABOVE.

NOTE:

● Web Configurator - It is a Web based GUI that pfSense provides for the administration and setup of the router, firewall, interfaces, etc.

a. If not already enabled, Enable the DNS Resolver (Under Services) and add the Google/Cloudflare DNS Servers (under System-> General Setup).

NOTE: CURL/PING SHOULD GIVE YOU DNS NOT RESOLVED ERROR IF THE DNS RESOLVER IS NOT CONFIGURED.

Part 2: Configuring Firewall Rules

The WAN interface is configured to be Default Deny out of the box. You can test this by trying to ping the WAN IP of pfSense from your host machine, it shouldn’t be able to communicate.

1. Allow firewall-lan machines to browse HTTPS websites but not HTTP. You cantest this by doing the following:

a. Should be blocked - “curl http://www.northeastern.edu -v”.

a. Provide a screenshot of ping Kali → LAN address of pfSense.

(Deliverable - 6)
b. Provide a screenshot of ping Kali → 8.8.8.8.

Kali VM should only be allowed to SSH into NEU Khoury (login.khoury.neu.edu) (use Khoury credentials) network only.

a. Provide a screenshot of successful ssh to login.khoury.neu.edu. This screenshot should show your Khoury username (Deliverable - 8a)

Bonus: Enable Inbound SSH

Note: Network adapter settings in VMware should remain the same as before for this use case.

1. Explain the problem faced in setting up inbound access and the steps you took to make it work.

2. Submit the screenshot showing the complete rule added. (Deliverable - 10a) 3. Submit a screenshot of successful SSH login from host to Kali VM. (Deliverable - 10b)
4. Submit two screenshots -
a. ifconfig/ipconfig command output in your host machine
b. ifconfig command output from your ssh terminal
(Deliverable - 10c)

1. Explain the problem faced in setting up inbound access and the steps you took to make it

work. Also explain about step 3, how you did it.