7/13/2017 FeaturesListPFSenseDocs

FeaturesList
FromPFSenseDocs

Themostcomprehensive,uptodatefeatureslistingcanbefoundonthepfSensewebsite
(https://www.pfsense.org/aboutpfsense/features.html).

Acommunitycontributedlistfollows.

Firewallwithstatefulpacketinspection
EasytouseWebBasedGraphicalInterface
InstallationSetupWizard
ConfigurableDashboardwithmanyavailablewidgets
IPv4andIPv6support
WirelessAccessPoint(mustinstallawirelessinterfacewhichsupportshostapmode),includingVAP/MBSS
supportoncertainchips.
WirelessClientSupport(802.11and3G/4Gwithsupporteddevices)
Abilitytosetupandfilter/isolatemultipleinterfaces(LAN,DMZ,etc.)
TrafficShaping(ALTQ,Limiters,802.1pmatch/set,DiffServ/DSCPmatching)
StateTablecontrols(perrule/perhostlimits,timers,etc.)
NAT(PortForwards,1:1NAT,OutboundNAT,NPt)
Redundancy/HighAvailabilityCARP+pfsync+XMLRPCConfigsyncallowsforhardwarefailover.Twoor
morefirewallscanbeconfiguredasafailovercluster.
MultiWANSupport
ServerInboundLoadBalancing
Networkdiagnosticutilitiessuchasping,traceroute,porttestsviatheGUI(morewithpackages,suchas
nmap)
VPNIPsec(includingPhase2NAT),OpenVPN,L2TP
PPPoEServer
RRDGraphs
Realtimeinterfacetrafficgraphs
DynamicDNS
CaptivePortal
DHCPServerandRelay(IPv4andIPv6)
Commandlineshellaccess(ViaconsoleandSSH)
WakeonLAN
Builtinpacketcapture/sniffer
AbilitytobackupandrestorethefirewallconfigurationviathewebGUI
EditfilesviathewebGUI
VirtualinterfacesforVLAN,LAGG/LACP,GIF,GRE,PPPoE/PPTP/L2TP/PPPWANs,QinQ,andBridges
CachingDNSForwarder/Resolver
Canberuninmanyvirtualizationenvironments
ProxyServer(usingpackages)

Contents
1 Packages
1.1 Security
1.2 NetworkManagement
1.3 Monitoring
https://doc.pfsense.org/index.php/Features_List 1/4
7/13/2017 FeaturesListPFSenseDocs

1.4 Services
1.5 System
1.6 Routing
1.7 Misc
2 InstallationGuide

Packages
Packagescanbeinstalledwithoneclick.Someareinbetastage.

Security
arpwatchArpwatchmonitorsEthernettoIPaddresspairingsandlogschangestosyslog.
IpguarddevAttemptstomaintainIP:MACpairsbyforce.
nmapAutilityfornetworkexplorationorsecurityauditing.
OpenVPNClientExportUtilityAllowsapreconfiguredOpenVPNWindowsClientorMacOSX's
ViscosityconfigurationbundletobeexporteddirectlyfrompfSense.
snortAnopensourcenetworkintrusionpreventionanddetectionsystem(IDS/IPS).
SSHDCondDefinesSSHoverridesforusers,groups,hostsandaddressesusingMatchinaconvenientway.
stunnelAnSSLencryptionwrapperbetweenremoteclientandlocalorremoteservers.
sudoAllowsdelegationofprivilegestousersintheshellsocommandscanberunasotherusers,suchas
root.
suricataHighPerformanceNetworkIDS,IPSandSecurityMonitoringenginebyOISF.
tinctincisaVirtualPrivateNetwork(VPN)daemonthatusestunnellingandencryptiontocreateasecure
privatemeshnetworkbetweenhostsontheInternet.

NetworkManagement
Apachewithmod_securityModSecurityisawebapplicationfirewallthatcanworkeitherembeddedoras
areverseproxy.
AvahiAvahiisasystemwhichfacilitatesservicediscoveryonalocalnetwork.
HAVPantivirusHTTPAntivirusProxywithaClamAVantivirusscanner.
LADVDSendanddecodelinklayeradvertisements.SupportforLLDP(LinkLayerDiscoveryProtocol),
CDP(CiscoDiscoveryProtocol),EDP(ExtremeDiscoveryProtocol)andNDP(NortelDiscoveryProtocol).
LightsquidHighperformancewebproxyreport(LightSquid).Proxyrealtimestat(SQStat).Requiressquid
HTTPproxy.
mtrnox11Enhancedtraceroutereplacement
netioNetworkbenchmarktool.
nutNetworkUPSTools
ProxyServerwithmod_securityWebapplicationfirewallthatcanworkeitherembeddedorasareverse
proxy.
siproxdProxyforhandlingNATofmultipleSIPdevicestoasinglepublicIP.
squidHighperformancewebproxycache.
squidGuardHighperformancewebproxyURLfilter.
Zabbix2AgentMonitoringagent.
Zabbix2ProxyMonitoringagentproxy.

Monitoring

https://doc.pfsense.org/index.php/Features_List 2/4
7/13/2017 FeaturesListPFSenseDocs

bandwidthdTracksusageofTCP/IPnetworksubnetsandbuildshtmlfileswithgraphstodisplay
utilization.
darkstatdarkstatisanetworkstatisticsgatherer.
iftopRealtimeinterfacemonitor(console/shellonly)
pfflowdConvertsOpenBSDPFstatusmessages(sentviathepfsyncinterface)toCiscoNetFlow
datagrams.
mailreportPeriodicemailreportscontainingcommandoutput,logfilecontents,andRRDgraphs.
ntopngAnetworkprobethatshowsnetworkusageinawaysimilartowhattopdoesforprocesses.
softflowdSoftflowdisflowbasednetworktrafficanalysercapableofCiscoNetFlowdataexport.
urlsnarfHTTPURLSniffer(console/shellonly)
vnstat2Vnstatisaconsolebasednetworktrafficmonitor.ThevnstatPHPfrontendandvnstatiaddsamore
userfriendlywayofdisplayingtrafficusage.

Services
ApcupsdSetofprogramsforcontrollingAPCUPS.
arpingBroadcastsawhohasARPpacketonthenetworkandprintsanswers.
AutoConfigBackupAutomaticallybacksupthepfSenseconfigurationfile.Allcontentsareencrypted
beforebeingsenttotheserver.RequiresGoldSubscription(https://www.pfsense.org/ourservices/gold
membership.html)
baculaclientBaculaisasetofOpenSource,computerprogramsthatmanagebackup,recovery,and
verificationofcomputerdataacrossanetworkofcomputersofdifferentkinds.
bindThemostwidelyusednameserversoftware
Check_mkagentThebasicideaofcheck_mkistofetch"all"informationaboutatargethostatonce.For
eachhosttobemonitoredcheck_mkiscalledbyNagiosonlyoncepertimeperiod.
CronThecronutilityisusedtomanagecommandsonaschedule.
DansguardianAnawardwinningOpenSourcewebcontentfilter.
dnsserverpfSenseversionofTinyDNSwhichfeaturesfailoverhostsupport
freeradius2AfreeimplementationoftheRADIUSprotocol.
gitGITSourceCodeManagement(console/shellonly)
haproxydevelTheReliable,HighPerformanceTCP/HTTP(S)LoadBalancer.
imspectorAnInstantMessengertransparentproxywithloggingcapabilities.CurrentlyitsupportsMSN,
AIM,ICQ,YahooandIRCtodifferentdegrees.
iperfAtoolfortestingnetworkthroughput,loss,andjitter.
mailscannerAnemailsecurityandantispampackageforemailgatewaysystems.
NRPEv2AnaddonforNagiosthatallowspluginstobeexecutedonremoteLinux/Unixhosts.
OpenVMToolsVMwareTools(opensource)
PHPServicePHPrunasaserviceitcandoanythingPHPcandoincludingbutnotlimitedtomonitoring
files,CPU,RAM,andsendalertstothesyslog.
PostfixForwarderPostfixmailforwarderactsasarelayserverforadomain.
ServiceWatchdogMonitorsforstoppedservicesandrestartsthem.
ShellcmdTheshellcmdutilityisusedtomanagecommandsonsystemstartup.
spamdGraylistingSMTPconnectionforwarder.
syslogngSyslogngindependentsyslogserver.
TFTPTrivialFileTransportProtocolisaverysimplefiletransferprotocol.
Varnish3Varnishisastateoftheart,highperformanceHTTPaccelerator.
vHostsItisawebserverpackagethatcanhostHTML,Javascript,CSS,andPHP.
widentdRFC1413auth/identddaemonwithfixedfakereply

System
BackupTooltoBackupandRestorefilesanddirectories.

https://doc.pfsense.org/index.php/Features_List 3/4
7/13/2017 FeaturesListPFSenseDocs

blinkledAllowssystemLEDstobeusedfornetworkactivityonsupportedplatforms(ALIX,WRAP,
Soekris,etc)
gwledAllowssystemLEDstobeusedforgatewaystatusonsupportedplatforms(ALIX,WRAP,Soekris,
etc)
RRDSummaryGivesatotalamountoftrafficpassedIn/Outduringthisandthepreviousmonth.
SystemPatchesApackagetoapplyandmaintaincustomsystempatches.

Routing
olsrdTheolsr.orgOLSRdaemonisanimplementationoftheOptimizedLinkStateRoutingprotocol.
OpenBGPDOpenBGPDisaFREEimplementationoftheBorderGatewayProtocol,Version4.
QuaggaOSPFOSPFroutingprotocolusingQuagga
routedRIPv1andv2daemon.

Misc
FileManagerPHPFileManager
FilerAllowsfilestobecreatedandoverwriteenfromtheGUI.
LCDprocLCDdisplaydriver
NotesTrackthingstonoteforthissystem.
pfBlockerIntroducesEnhancedAliastableFeaturetopfsense.
SargSquidAnalysisReportGenerator.

InstallationGuide
Nowthatthefeatureshavebeenlisted,totryoutthepfSensefirewall,downloadtheinstallermemstickorISO,
writeittoappropriatemedia,andbootitup.See:InstallingpfSense

Retrievedfrom"https://doc.pfsense.org/index.php?title=Features_List&oldid=7992"

Category: FAQ

Thispagewaslastmodifiedon1May2017,at11:39.

https://doc.pfsense.org/index.php/Features_List 4/4