I’ve been setting up pfSense. It’s been an amazing experience thus far. I’m about 90% there. I have a TON to share! Soon, need up to another week or two with it.
It feels a lot like the days when I first started using Arch, in that, you really get to customize your security stature exactly the way you need and tailor it to fit your network. I have both IDS and soon IPS setup, just the final touches. Have been monitoring and cleaning up alerting/noise.
Have started the process of securing guest Wi-Fi. Inbound but also restriction to outbound in the rare even someone connects with a compromised advice.
Will follow up with more in Part 2 soon, continuing to learn, change and improve config!