Netgate SG-1000 microFirewall

Author Topic: Verifying a secure and private network?  (Read 126 times)

0 Members and 1 Guest are viewing this topic.

Offline V3lcr0

  • Full Member
  • ***
  • Posts: 228
  • Karma: +11/-0
    • View Profile
Verifying a secure and private network?
« on: January 29, 2018, 07:37:58 pm »
I have my pfSense configured pretty good...thank you to all on this forum who have help! I really appreciate the help...pfSense rocks!

How do I know it is secure and private? What are some fundamental checks and tests I can do?

1) No DNS Leaks/Key traffic thru VPN - All good! used dnsleaktest.com
2) Fixed IPs for clients/Deny unknown clients - Services->DHCP Server->Interface->Deny Unknown Clients...I think certificates and rRadius can help me further.
3) pfBlocker with custom lists - More then my share of alerts
4) Snort - Again more alerts! Constantly being refined
5) Seperate VLANs - ???
6) Restricted rules - Thanks all!
etc...


My specific questions are:
a)How can I verify that my VLANs are indeed isolated?
b)How can I verify my shady printer on VLAN 10(IOT) can't talk to my pfSEnse GUI or my Native VLAN?
c)My Native VLAN used to admin my AP/Switch/pfSense GUI is not leaking?
d)My ARP table isn't "poisened"?
e)My wife is being faithful?....well that one is all on me, you can't help me there!
f)Other basic trouble shooting/verifications I should do?
...what results should I look for to verify all is good in Rome!

I still have more work to do but any direction/help would be surely appreciated...

V

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 9812
  • Karma: +1107/-311
    • View Profile
Re: Verifying a secure and private network?
« Reply #1 on: January 29, 2018, 07:44:48 pm »
Wireshark.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline V3lcr0

  • Full Member
  • ***
  • Posts: 228
  • Karma: +11/-0
    • View Profile
Re: Verifying a secure and private network?
« Reply #2 on: January 29, 2018, 08:00:24 pm »
Awesome thank you! Any checks I can do within pfSense?

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 9812
  • Karma: +1107/-311
    • View Profile
Re: Verifying a secure and private network?
« Reply #3 on: January 29, 2018, 08:02:54 pm »
Diagnostics > Packet Capture.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM