italk(IT)

When you have many user on your organization. local user management on pfsense may not easy to manage user. Free radius is user management that better than local user management. It can limit bandwidth per user apply on captive portal, static IP for user, etc.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

If policy of your organization is not allow user to using internet fortigate firewall can support your organization policy. you config that on policy firewall and apply schedule object to policy that allow client access to the internet.

When I want to install package on pfsense 2.3.4 ,but I cannot install on pfsense 2.3.4 then  I will verify this issue. On pfsense 2.3.4 when pfsense have a new version it cannot install any package. I try to upgrade version and I can install package as normally Step As Video   

Sometime firewall rule may not always active. In your organization may be active some firewall rule especially in working time such as block youtube, block social media and in not working time such as Fileshare port, SMTP port, FTP port for prevent anonymous using service on your organization in not working time Pfsense can active firewall rule by schedule. Step As Video  

You can use port forwarding for any service port such as RDP, FTP, SSH, HTTP, HTTPS. Port forwarding improve easy to access any service on private network from any where but port forward have not authentication for check authorization so it is low security. In some case such as HTTP, HTTPS (public website only) port forwarding are accept because HTTP,HTTPS is public service user around the world should be access from any where. In this case I will show port forwarding  for RDP. Step As Video   

Bandwidth internet from ISP are limited. If you have many client and you are not control bandwidth. Finally, total bandwidth are insufficient. Recommendation, you should enable captive portal for filter client to use your internet and limit bandwidth per user by captive portal.  Limitation bandwidth on captive portal do not exempt by user it apply to all user. Step As Video   

Internet bandwidth from ISP are limited from your packet that you pay. You should manage bandwidth internet of your organization for enough to use. Sometimes bandwidth internet is enough for general usage but someone may be use torrent or infected a virus effect to extra use bandwidth. How do you know who are use extra bandwidth? On pfsense have add-on package "Bandwidthd". Bandwidth show dashboard Top user usage in day, week, month. You can use information from bandwidthd to verify usability of your user and warn their to reduce bandwidth usage. Step As Video  

WAN loadbalance is bundles bandwidth of all WAN. It is not increase speed of internet but it balance 2 internet from WAN. Assume, 1 WAN is 1 lane road ,2 WAN are 2 lane road. WAN loadbalance allow traffic on both lane rode. It can support more than car on a road but it cannot increase speed of car. Fail over is function to swap internet between WAN if WAN 1 down fail over will swap all traffic  to WAN 2. Client can continue to access the internet. Step As Video