https://mediawiki.comfac.net/index.php?action=history&feed=atom&title=Training%3A_pfSense_IntroductionTraining: pfSense Introduction - Revision history2026-06-05T10:59:32ZRevision history for this page on the wikiMediaWiki 1.45.1https://mediawiki.comfac.net/index.php?title=Training:_pfSense_Introduction&diff=225&oldid=prevJustinaquino: Convert FUND001 SEG1 Introduction slides to wiki training module2026-04-23T06:50:06Z<p>Convert FUND001 SEG1 Introduction slides to wiki training module</p>
<p><b>New page</b></p><div>__NOTOC__<br />
<div style="background:#e3f2fd; border:1px solid #90caf9; border-radius:4px; padding:12px 16px; margin-bottom:20px;"><br />
'''Training Module: Phase 1, Day 1''' — Introduction to pfSense Plus. Based on Netgate FUND001-LIVE-SLIDE-SEG1.<br />
</div><br />
<br />
== Learning Objectives ==<br />
By the end of this module, you will be able to:<br />
* Explain what pfSense Plus is and its core value proposition<br />
* Describe the project history and difference between pfSense CE and pfSense Plus<br />
* Identify supported platforms and hardware requirements<br />
* Perform initial setup using the web-based setup wizard<br />
* Create and restore configuration backups<br />
* Understand upgrade procedures and risks<br />
<br />
== What is pfSense Plus? ==<br />
pfSense Plus is a commercial, FreeBSD-based network firewall and routing platform developed by Netgate. It ties together multiple open-source networking components into a unified, entirely web-managed system.<br />
<br />
'''Key Characteristics:'''<br />
* '''FreeBSD-based''' — Uses the same trusted OS platform as Juniper, NetApp, Citrix, and Netflix<br />
* '''Web-managed''' — Complete configuration through a browser-based GUI; no CLI required for day-to-day tasks<br />
* '''Feature-rich''' — Richer feature set than most commercial firewalls at a fraction of the cost<br />
* '''Open source core''' — Built on open-source components (pf, OpenVPN, WireGuard, etc.) made easy to use<br />
<br />
== Project History ==<br />
{| class="wikitable"<br />
! Year !! Milestone<br />
|-<br />
| 2004 || Project started as a fork of m0n0wall<br />
|-<br />
| Feb 2008 || pfSense 1.2 released (FreeBSD 6.2)<br />
|-<br />
| Sept 2011 || pfSense 2.0 released (FreeBSD 8.1)<br />
|-<br />
| Oct 2017 || pfSense 2.4 released (FreeBSD 11.1)<br />
|-<br />
| Feb 2021 || '''pfSense Plus 21.02''' forks from pfSense CE; commercial-only; adds WireGuard<br />
|}<br />
<br />
'''pfSense Plus vs pfSense CE:'''<br />
* '''pfSense Plus''' — Commercial license; available on Netgate hardware or Home+Lab (non-commercial); receives updates first<br />
* '''pfSense CE''' — Community Edition; open source; free for all uses<br />
<br />
== Platforms & Hardware ==<br />
'''Installation Media:'''<br />
* Full installer (CD or USB memstick)<br />
* 64-bit only<br />
* No Live CD or NanoBSD (deprecated)<br />
<br />
'''Hardware Options:'''<br />
# '''Netgate Official Hardware''' — Pre-installed, pre-configured, fully optimized<br />
# '''DIY/Custom Build''' — Check compatibility list at [https://docs.netgate.com/pfsense/en/latest/hardware docs.netgate.com]<br />
# '''Home+Lab Edition''' — Free for non-commercial use; available from [https://www.pfsense.org/downloads pfsense.org]<br />
<br />
'''Key hardware considerations:'''<br />
* CPU selection (AES-NI support recommended for VPN performance)<br />
* NIC quality and driver support (Intel i210/i350 preferred)<br />
* RAM (1 GB minimum; 2+ GB for packages/VPN)<br />
* Storage (SSD recommended; 8 GB minimum)<br />
<br />
== Initial Setup ==<br />
'''Default LAN configuration:'''<br />
* LAN IP: '''192.168.1.1/24'''<br />
* DHCP server enabled on LAN<br />
* Web interface: '''https://192.168.1.1'''<br />
* Default credentials: '''admin / pfsense'''<br />
<br />
'''Setup Wizard steps:'''<br />
# Connect to LAN port; obtain DHCP address<br />
# Browse to https://192.168.1.1<br />
# Log in with default credentials<br />
# Complete wizard: General Info → Time Server → WAN Config → LAN Config → Admin Password → Reload<br />
<br />
'''Important:''' Always change the default admin password in production.<br />
<br />
== Configuration Backup & Restore ==<br />
'''Why back up?'''<br />
* Hardware failure recovery<br />
* Pre-upgrade safety net<br />
* Configuration migration to new hardware<br />
* Rollback after misconfiguration<br />
<br />
'''Backup methods:'''<br />
{| class="wikitable"<br />
! Method !! Location !! Retention !! Notes<br />
|-<br />
| Manual download || Diagnostics → Backup/Restore || N/A (local file) || Full config.xml download<br />
|-<br />
| Config History || Diagnostics → Backup/Restore → Config History || 30 revisions (configurable) || Local to device<br />
|-<br />
| AutoConfigBackup (ACB) || Services → AutoConfigBackup || 100 revisions || Cloud backup; encrypted<br />
|}<br />
<br />
'''Backup best practices:'''<br />
* Always backup '''before''' upgrades<br />
* Store encryption password and Device ID safely (for ACB)<br />
* Never restore to an '''older''' pfSense version; only equal or newer<br />
* When restoring to different hardware, interface assignments will differ<br />
<br />
'''Console restore (emergency):'''<br />
* Option 15 at console menu — "Restore recent configuration"<br />
* Useful when web interface is unreachable<br />
* May require reboot after restore<br />
<br />
== Upgrades ==<br />
'''Pre-upgrade checklist:'''<br />
# Create configuration backup<br />
# Read release notes<br />
# Check upgrade guide at [https://docs.netgate.com/pfsense/en/latest/install/upgrade-guide.html docs.netgate.com]<br />
# Verify auto-upgrade URL (for Plus)<br />
<br />
'''Upgrade methods:'''<br />
* '''Auto-Update''' — Web GUI: System → Update<br />
* '''Console Update''' — Option 13 at console menu<br />
<br />
'''Upgrade risks (rare but possible):'''<br />
* Hardware failure during reboot<br />
* Package complications<br />
* Hardware-specific regressions<br />
* Dependency on bug fixes from current version<br />
<br />
== Key Takeaways ==<br />
* pfSense Plus is commercial-only; Home+Lab available for non-commercial use<br />
* Always check hardware compatibility before DIY builds<br />
* '''Backup before every upgrade''' — non-negotiable<br />
* Restore only to equal or newer versions<br />
* Use AutoConfigBackup for offsite, encrypted cloud backups<br />
* Keep encryption password and Device ID in a safe place<br />
<br />
== Quiz (Self-Check) ==<br />
# What operating system is pfSense Plus based on?<br />
# What is the difference between pfSense Plus and pfSense CE?<br />
# Why should you avoid restoring a backup to an older pfSense version?<br />
# Where do you find the Config History feature?<br />
# What two pieces of information must you save when using AutoConfigBackup?<br />
<br />
== Next Module ==<br />
* [[Training: Interfaces and Firewall Rules]] — Phase 1, Day 2–3<br />
* [[Training Lab 1: Introduction and Backup Restore]] — Hands-on lab<br />
<br />
----<br />
''Source: Netgate FUND001-LIVE-SLIDE-SEG1-INTRO.pdf''</div>Justinaquino