Messages

1

General Discussion / Setup OPNSense only as a NetFlow analyzer

« on: June 02, 2018, 08:13:32 pm »

Hi,

In my setup (Actually my previous network admin's setup) IPCop is used as the firewall proxy. unfortunately it doesn't come with NetFlow analyzer. Can I keep IPcop as my firewall and at the same time setup OPNSense to work as a NetFlow analyzer. My requirement is to identify the top bandwidth users of the network as we have a limited bandwidth per month (500GB) and  some people tend to download high volumes and we ended up reaching the bandwidth cap before the end of the month.

Thanks in advance.

2

Web Proxy Filtering and Caching / Re: Proxy Bypass

« on: October 05, 2017, 05:13:54 pm »

There is an option under Web Proxy -> Forward Proxy -> Access control Lists to Specify Unrestricted IP addresses

3

General Discussion / How to configure OPNSense with Windows AD

« on: October 05, 2017, 04:54:59 pm »

My Requirement
I work in a company and we have about 50 employees. Right now we are using IPCOP firewall proxy and there is no Microsoft AD setup.
The MAC addresses of the user PCs are added to the IPCOP and only allowed MAC addresses can access the internet.
The problem with current setup is that there is no way to monitor the bandwidth each user has consumed. There are 2, 3 people consuming too much bandwidth and before the end of the month we reach the bandwidth cap.
As a solution to this problem I thought of Implementing Windows AD along with OPNsense.
Basically what I want to do is to route the internet connection through Firewall proxy (transparent proxy) and setup the windows AD to authenticate the users.

What I have done so far
In order to test things first I have setup virtual box with OPNSense, Windows AD and 02 windows 07 VMs.

OPNSense:
em0: WAN (NAT) (DHCP)
em1: LAN (Host Only Network) 192.168.10.254
DHCP Server Turned off

Windows AD
LAN: (Host Only Network) 192.168.10.10
DHCP Server Turned on
DNS Server turned on

Windows 7-1
LAN (Host Only network) 192.168.10.50

Windows 7-2
LAN (Host Only network) 192.168.10.51

My windows AD side setup is done and I even got it connected to OPNSense.  (System: Access: Servers)
Now I want to configure OPNSense side but I have no very clear idea how to do it. I need help from you guys on how to do that.
Thanks in advance.