italk(IT)

You can config some feature on fortigate firewall via CLI Example When you want to import many devices and add devices to device group you should config via CLI because on WebUI have not import device function.

When you have many user on your organization. local user management on pfsense may not easy to manage user. Free radius is user management that better than local user management. It can limit bandwidth per user apply on captive portal, static IP for user, etc.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

When you create devices or group device you can apply it on policy or captive portal. 2 ways to add device on fortigate firewall as detail below; 1. Scan device on your network by using "network device scan" feature on fortigate firewall interface after on feature you ill have device list on your network and you can add new device item now 2. Add MAC address into device item.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

If policy of your organization is not allow user to using internet fortigate firewall can support your organization policy. you config that on policy firewall and apply schedule object to policy that allow client access to the internet.

When you create user or group user you can apply user or group user on policy firewall. Example 1. Users on IT department access to all server on DMZ zone but users on accounting department should be access specific server that relate with accounting department. you can create 2 policy for IT users and accounting users by using local user and group user Example 2. Users and group user can use on captive portal

Installation fortigate firewall on VMware via image file for VM. Initial configuration on CLI until access web management and config via web management  Step As Video  

When I want to install package on pfsense 2.3.4 ,but I cannot install on pfsense 2.3.4 then  I will verify this issue. On pfsense 2.3.4 when pfsense have a new version it cannot install any package. I try to upgrade version and I can install package as normally Step As Video   

NTP is time server provide time protocol for any system to sync time with NTP effect to any system have same date&time. Many system on the world using difference timezone. When you choose NTP server and then you should select timezone for your location soon. On pfsense can specific NTP server and change timezone for your location. Step As Video  

Sometime firewall rule may not always active. In your organization may be active some firewall rule especially in working time such as block youtube, block social media and in not working time such as Fileshare port, SMTP port, FTP port for prevent anonymous using service on your organization in not working time Pfsense can active firewall rule by schedule. Step As Video  

You can use port forwarding for any service port such as RDP, FTP, SSH, HTTP, HTTPS. Port forwarding improve easy to access any service on private network from any where but port forward have not authentication for check authorization so it is low security. In some case such as HTTP, HTTPS (public website only) port forwarding are accept because HTTP,HTTPS is public service user around the world should be access from any where. In this case I will show port forwarding  for RDP. Step As Video   

Bandwidth internet from ISP are limited. If you have many client and you are not control bandwidth. Finally, total bandwidth are insufficient. Recommendation, you should enable captive portal for filter client to use your internet and limit bandwidth per user by captive portal.  Limitation bandwidth on captive portal do not exempt by user it apply to all user. Step As Video   

Sometimes Captive Portal would not show automatic when client access to the internet In my case I found problem about DNS on client. If client have external DNS such as 8.8.8.8, 8.8.4.4 client may attempt to resolve domain from external DNS but client cannot access to the internet affect to captive portal would not show automatic You can solve this problem by use internal DNS or use LAN IP of pfsense   Step As Video

WAN loadbalance is bundles bandwidth of all WAN. It is not increase speed of internet but it balance 2 internet from WAN. Assume, 1 WAN is 1 lane road ,2 WAN are 2 lane road. WAN loadbalance allow traffic on both lane rode. It can support more than car on a road but it cannot increase speed of car. Fail over is function to swap internet between WAN if WAN 1 down fail over will swap all traffic  to WAN 2. Client can continue to access the internet. Step As Video  

Basic installation and configuration pfsense2.4.2 64bits on VMware. Step As Video   

DHCP server can distribute static IP address to client by using MAC address device but static IP should not duplicate with IP pool on DHCP server. This feature may help you for easy to manage IP address in your organization. Step as Video 

Redirect website feature can bundle with captive portal feature. You can specific website that user must redirect after authen on captive portal such as Intranet website, search engine website , webmail and company website. Redirect website feature can help comfortable more for user to access frequency website automatically Step as Video

When client want bypass authentication for access to the internet but you cannot get MAC address of each client Another solution you can bypass by using client's IP address because you get client's IP address on DCHP server Step as Video

When you enable feature captive portal that force client must authenticate before access to the internet but you want to exempt some client such as VIP, Admin, Board, President. You can exempt captive portal for them by add MAC address device to captive portal configuration Step as Video