italk(IT)

You can config some feature on fortigate firewall via CLI Example When you want to import many devices and add devices to device group you should config via CLI because on WebUI have not import device function.

When you have many user on your organization. local user management on pfsense may not easy to manage user. Free radius is user management that better than local user management. It can limit bandwidth per user apply on captive portal, static IP for user, etc.

When you create devices or group device you can apply it on policy or captive portal. 2 ways to add device on fortigate firewall as detail below; 1. Scan device on your network by using "network device scan" feature on fortigate firewall interface after on feature you ill have device list on your network and you can add new device item now 2. Add MAC address into device item.

If policy of your organization is not allow user to using internet fortigate firewall can support your organization policy. you config that on policy firewall and apply schedule object to policy that allow client access to the internet.

When you create user or group user you can apply user or group user on policy firewall. Example 1. Users on IT department access to all server on DMZ zone but users on accounting department should be access specific server that relate with accounting department. you can create 2 policy for IT users and accounting users by using local user and group user Example 2. Users and group user can use on captive portal

Web filtering feature on fortigate firewall can block specific website that you want to block and it can block website by category such as bet, adult, social media, streaming. Web filtering have many benefit for organization because it can decrease internet bandwidth, control employee on working time, reduce virus on your network.

Installation fortigate firewall on VMware via image file for VM. Initial configuration on CLI until access web management and config via web management  Step As Video  

NTP is time server provide time protocol for any system to sync time with NTP effect to any system have same date&time. Many system on the world using difference timezone. When you choose NTP server and then you should select timezone for your location soon. On pfsense can specific NTP server and change timezone for your location. Step As Video  

Sometime firewall rule may not always active. In your organization may be active some firewall rule especially in working time such as block youtube, block social media and in not working time such as Fileshare port, SMTP port, FTP port for prevent anonymous using service on your organization in not working time Pfsense can active firewall rule by schedule. Step As Video  

Internet bandwidth from ISP are limited from your packet that you pay. You should manage bandwidth internet of your organization for enough to use. Sometimes bandwidth internet is enough for general usage but someone may be use torrent or infected a virus effect to extra use bandwidth. How do you know who are use extra bandwidth? On pfsense have add-on package "Bandwidthd". Bandwidth show dashboard Top user usage in day, week, month. You can use information from bandwidthd to verify usability of your user and warn their to reduce bandwidth usage. Step As Video  

Sometimes Captive Portal would not show automatic when client access to the internet In my case I found problem about DNS on client. If client have external DNS such as 8.8.8.8, 8.8.4.4 client may attempt to resolve domain from external DNS but client cannot access to the internet affect to captive portal would not show automatic You can solve this problem by use internal DNS or use LAN IP of pfsense   Step As Video

Basic installation and configuration pfsense2.4.2 64bits on VMware. Step As Video   

DHCP server can distribute static IP address to client by using MAC address device but static IP should not duplicate with IP pool on DHCP server. This feature may help you for easy to manage IP address in your organization. Step as Video 

Redirect website feature can bundle with captive portal feature. You can specific website that user must redirect after authen on captive portal such as Intranet website, search engine website , webmail and company website. Redirect website feature can help comfortable more for user to access frequency website automatically Step as Video

When client want bypass authentication for access to the internet but you cannot get MAC address of each client Another solution you can bypass by using client's IP address because you get client's IP address on DCHP server Step as Video

When you enable feature captive portal that force client must authenticate before access to the internet but you want to exempt some client such as VIP, Admin, Board, President. You can exempt captive portal for them by add MAC address device to captive portal configuration Step as Video

You can use DHCP server to distribute IP address to your client. When client plug-in network and not config static IP address a DHCP server will distribute IP address to client. If client have an IP address client will access to your network such as Internet, RDP, File sharing or etc. I have a video to show "How to enable DHCP server on pfsense"  Step as Video

If you need exempt distribute some IP in subnet or distribute many IP range. You should be use IP pool feature because you can created many IP range on one interface but IP range must is in subnet of network interface. Example LAN interface IP: 172.16.0.1/24 Available IP pool range: 172.16.0.2 - 172.16.0.254 Unavailable IP pool range: Exempt! 172.16.0.2 - 172.16.0.254 Amount IP pool: Many Step as Video

When client need to access the internet. First step you enable captive portal feature.Client must be authentication on captive portal and check authorization for  access into the internet You can use feature of captive portal for control user such as Upload/Download bandwidth. Bypass device from captive portal(use MAC address). Create voucher. Redirect URL after authentication. Do not login duplicate.  You can use captive portal on hotspot solution or control internet usage on your organization. Step as Video