Welcome back to the savory course in building. You're in for a sec lap. I'm your host and instructor, Kevin Hernandez.
Our previous lesson We are introduction into E s Excite. Familiarize ourself with a dash for learn how to read System Resource is Terra Terra. We also apply R E s exile items that we can't from being where themselves as a free license.
On today's lesson, we will start installing our first next gen firewall. In this scenario, it will be PF sense.
Let's get started now. Before Winstar pf sense there were different variants of options when downloading it Such a USB stick on I s Oh, now, if you haven't downloaded yet, the PF sent image. Please go ahead.
Once downloaded, you'll notice that it has a thought You sold GC former on it
new scenario. Let's extract the data prior to starting art installation.
We've been seven. Sit for this.
we're for the extraction to finish.
Once completed, you will find an actual eyes. So in this path over here
Keep that in consideration. I remember the path
also. We'll need to find it and look license once we start installation
now, before we start installation of the farm. All let's make sure we have some networking are villains, which is Herbie switches in here, configured to go to the networking tab.
I got a little switches you been seeing. We have none in error or the standard.
Let's create a new one
and we can say it's our laying right
area What's going here
Now we will come back into creating our part groups unless we actually start routing traffic to it.
For the meantime, let's just continue with insulation and creating our virtual machine.
Let's go back to birds. Machines
create register. BM.
Now you basically have three options. Create a new virtual machine. You play a burrito munching from a B F O B A file
on register an existent virtual machine.
Now this second option, it's more towards when were migrating are Callie box our medicine pliable. More of our own. Those pen testing type of machines, right?
In this case, since we're gonna be using I s so far we go here to create a new birds, a machine and klink next
any fault information such as the name she'll put P up sense in it.
We have, ah, compatibility, right exercise version that guest. A West family in this case will pick other
on the guest OS version, which is free. BSD
Mom and let's click Next
Here you will be basically picking the storage device you'll be utilizing for your PF sense insulation.
Since I only have one hard drive in this configuration, you only have one option in your scenario, it might be different and you might have different options.
But let's just click next and continue
Now. Here's where we start customizing are settings right
now. If you remember closely,
let's look up. Our document
PF send has both a minimum and recommended usage for both RAM CPU and storage, right? In this case, even though it doesn't say so,
this will be one core at list
for it so wanted. It hurts
longa, Vita Ram and eight gigs of storage. So let's go back here right and memories already at
CPU one core You see they don't half gigahertz options
hardness. It's a gig
and basically kind of loaded the default for us if you pay close attention right now, here's where it gets a little bit tricky, right?
Basically, we want to make sure we select our I s O in here in order to install
PF sent. Select Selected.
You're presented with this. Where were you? Basically click upload
to select our image.
And right here we can see where our information set.
It's very undetected. I s O
and it will be uploading it in a second.
You can see a little progress bar here on the right side.
Now the upload is completed. You can see RPF since I s o over here. Have a little for us to select.
Now let's make sure images here.
Yes, sir. I s O Phile,
I don't see puke or don't you? A room. It gives the storage
and everything. I also in default. Let's click next.
Here you have a summary of everything before it starts
configuring it. So let's click. Finish and see what happens
was completed. It will be presented with the following screen which basically states the copyrights on this region. Notice about PF Since
And now you're presented we three options
and record from a backup if you want to put it that way. So let's go with configuration
Now you're percent that we default standard for US keyboard. And if you want to continue with it or switch to keep our standard in our case, I will continue with the default. Tibor for us, keep our map.
Now, In this scenario, it requests us more information. How you want to do to this set up?
This case will continue with the default auto option and hit OK to continue
and insulation will start
now, as this is the SST, it's pretty fast insulation compared to, you know, erect traditional drive. However, be cautious. Be aware
that you gotta wait for a full process to be completed
and there it is pretty fast. As you saw
basically a new machine, it's install finished before exiting the cellar.
Um, Justin and any final quantification of this case we're gonna say no.
And now we have to read with the system. So let's reel it
here you have to service is turn it off. Basically, for the system to restart
And here we have again
It's let it little buddy fall.
Yes, previously, it's loading it. Service is starting up its process. It's Cheddar.
Prosecuting a minute now basically is asking if you want to set up the Big Island's no balance, our need to be set up first, and feelings will not be used for Onley optimal interfaces. If it's typical, say no here
and used a Web configuration to configure Be lance later if required. Right. So let's go back to our sheet, right and at a reminder,
configure big plans,
And right here, it says in the Web configuration
and the recent we don't want to configure does. Yet it's because I kind of want to have the whole infrastructure installed prior to starting a billing. These connections, I don't wanna accidentally blake the Internet access at home or anything like that. Okay,
and I say auto detection,
right and person enter into
and it says, facing no link to detect.
So basically, this is face on the
configuration in there we saw earlier. Okay,
so let's take a look into that and fix it.
one, we're gonna add BMX zero to basically skip it, and then we're gonna do for the land. Just leave it blank and hit. Enter to basically symbolize your fish,
right? Do you want to proceed? Yes.
The reason we're doing this is because our interface is virtual, not physical. Therefore, many install diets that are out there are gonna be completely different to what you're seeing today.
And here's configuring that one interface
that we can always come back and reconfigured is if needed. Okay, so don't be scared.
Yeah, it's gonna be your any really
and right here you have it.
Make sure you keep a screen shot of this
right, and we're taking a snippet,
putting it to work. So
just to keep the data in there
and let's go back to the dashboard,
I want your input that i p you'll be presented with this and here's PF sense
Congratulations. You have now installed P Epson's.
Now obviously, you have to check further defaults credentials, which in this case, are in p absence.
and we'll welcome to P F Sense. Here you'll have percent of the warning to change your password in the use for a manager,
it says. Welcome to the Wizard. Here was start with insulation itself or continue
in this case, since I'm half ah, coming tomorrow to give me a warning.
So let's actually do this outside of Incumbent a moat. And here we are
again. CP. Use that, remember? Uses. You can see it's not using the full gig that we provided it, and it's only advertising 12% of eight gigs we gave him for storage.
Looks pretty simple.
Let's start with, uh,
pass for changing. If I recall correctly system user manager
on right here, you can see the admin
account, so let's check it.
here has changed a pastoral quick
tape it twice, and it's safe
scenario. This case, it's asking me to update it.
now. One thing I like personally is not using the admin account itself, So let's create another user account real quick.
In this case, let's call it
type in my password. No expiration. I'm gonna give you the same access
That's the other one. So remember shoes Adam to admit.
And that's it. Safe a user in there we go
added too much. Last pass bolt A CZ You can see you cannot delete the admin s. You can delete the user we just created. Okay,
you have groups groups. As you can see, there's admin group. In all these years, you can have different groups as well and we'll go over those options s we continue with the PF sense? Of course.
Let me remember closely. You do have to farm all options here.
You do have over here your BP and settings.
I'd be sad, dull to the p up in BP in. And you do have other options. A slow right here.
If you recall correctly. I said that the PF sends will be able to achieve function of Sasha's a proxy. Now, you don't see that option right here, but if you go into the system
available packages, right? You look literally. First squid you confined
like squid here. Michigan installing configured.
We'll go over all these packages during our configuration off um
So what did we learn today
when still be of sense. We basically look at its default features. I was also able to show you
the point proxy Such a squid, right with sauce. Quit line was all
squid car and different features or functions that we were mentioning right here in this tool
that were able to be accomplished within
Next Gen firewall right here. Right. So even though you can install squid in Santos or whatever future you want to use as mentioned here, you can have it within PF sense itself.
what we will do in our next lesson, we're gonna start light the fire. Now you might think, Oh, why install two firewalls? Will there be conflict? There might be Right now, the reason is, we want to install our features, all the different applications and there just so you can get a fee feeling off what you could accomplish from the lab
after we're installing all the applications, all the different configurations, installations that will peak dose that we will want to utilize for discourse. Rink
U s. A person don't have to pick the same once we pick Fred. Of course, however,
you're more than welcome to install whichever application you prefer now? If you, for example, use, I'd be fire at work or entangled or you have prior experiences that might be your default or primary next year. Fire will not Wanting to remember from our video is that we did not confirm the virtual Citrus
interfaces in this configuration insulation. We're basically just installing the basic default in order to have to interface up in following videos will be installing and configuring everything together from the virtual switch to the PF sends to the
switch that we have physically that we installed in our prior videos.
I hope to see you soon in our next video. Have a great day.