It worked, but I’m not very comfortable with the SSLbump. However, with more and more sites using SSL you have to use the SSLbump feature (essentially a man in the middle attack). Thanks to the wonderful pfSense project, I first tried Squid with DansGuardian and Squid Guard. I’m not running a school, library, or any public facility – my use is just a filter for my family. I want to be able to VPN into my home network to pull files.I have been looking for a good web filter for my family. I never really liked this because i needed to purchase a Smartnet agreement from Cisco as well as a subscription from Microsoft to update the scanning engine. also, i never ever got an answer that helped me to be able to forward vlan traffic from the router and have it terminate at the pix.

Now here's what i'd really would like to do,Ĭable modem - pfSense(firewall/nat1) - SophosUTM(proxy/nat2) - (LAN) I stumbled upon SophosUTM, which i really like and have already replaced the FTMG setup. Now here are the questions about what to do to get the VPN working:ġ. should i terminate the VPN at the pfSense box, or the SophosUTM box?Ģa. if i terminate the VPN at the pfSense box, what ports and protocols do i forward to pass through the SophosUTM so that i can access the LAN?Ģb. if i terminate the VPN at the SophosUTM box, what ports and protocols to i pass through the pfSense box so that I can access the LAN? However, this time, pfSense and SophosUTM are on different networks, pfSense on it's own, while the SophoseUTM box bridges the pfSense box and the LAN. If i were to do this, how would i reconcile having two ports on the SophosUTM box? would i just team them and point to the pfSense box as the gateway? The other option is this is the simple approach,Ĭable modem - pfSense/SophosUTM(proxy)/(LAN) I am sure i will get responses about how i don't need two, and i can just use one, and while i appreciate this suggestion, that's not what i am looking to do.

Nxfilter pfsense