Netgate SG-1000 microFirewall

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - sclarckone

Pages: [1]
General Questions / pfSense as a remote filtering gateway?
« on: January 02, 2018, 03:46:39 pm »
Hello there,

As a disclaimer first: I have general knowledge about networking but I'm not an expert and I've never used pfSense (yet).

I'd like to control web (both HTTP and HTTPS) traffic for some machines I have but I don't control the on-premise Internet gateway they use. After a bit of search I came up with the following idea:
  • Force all Internet traffic on the machines of my users through a VPN that connects them to a remote machine I control.
  • Use pfSense on that remote machine with OpenVPN and Squid/SquidGuard as a transparent web filtering proxy
In case it matters:
  • I plan on running pfSense in a virtual machine with Proxmox as the hypervisor.
  • The users should have Windows 10 machines that I control (so I can force the network traffic through the VPN and add the Squide fake CA certificate for the MITM part of HTTPS filtering.
Since I'm not an expert, is my idea feasible at all?  ;D

And as far as I know pfSense usually runs on routers that have several NICs, will it make any difference if my "LAN NIC" is a virtual one?

Thanks for your help!

Pages: [1]