Everybody and welcome to next video.
So in this video after now that we've installed P.F. sense on the machine on the VM what I want to do
is kind of go over the UI and where some of the options are that we're gonna be working with through
the rest of the module.
So this is the dashboard.
This provides quite a bit of useful information such as the version the user name installed the type
of system you servers Load load issues memory disk now disk space usage is very important here because
as soon as this thing stops running out of or it starts running out of disk space it will stop providing
DHS IP addresses and you stop working in general so keep an eye on that as well as the CPA when you're
using this at an enterprise level or a at a an employer.
So this is the dashboard provides you a few bits of information but on top there's a few options or
you've got system interface firewall services VPN status and diagnostics.
Now quick look at diagnostics.
So what we can do here is we've gone over ARP so we've looked to see what the ARP table is.
So this is what the ARP table is on this particular machine.
We can get the command line.
We can work with backup similar stores which is an important piece here.
So backups here we have authentication which allows you to test your authentication because if you can
hook up an Active Directory or an elder app server to this machine.
So that way you can control users logging in and logging out and who can log in and who can log out
just based on what's on the authentication server.
So this allows you to click on this case it's local.
So we have our admin account so we can test the admin account.
It would work here or you can test NetApp accounts either works there.
Then we have backup and restore.
Now this is an important one because when you want to backup certain things you could back up just the
rules or backup everything can encrypt it not encrypt it and you could also restore from it.
This is just an excel file.
However it's still important to keep backups of firewalls.
And that's also good from a red team present perspective because once you have access to the firewall
backup you know exactly how it's been configured and all of the settings in it which includes usernames
and passwords so we have a few other things like we can check with DNS look ups help the system entirely
paying a reboot.
Look at the roots sockets and use those quite a few options here that you could use to interact with
the system.
If for some reason you gained access to the web UI for example we have the command line so we can go
on the command line and actually interface with the system itself just from the UI.
Now status here is gonna show you a few different options.
So when you have things set up like an IP like VPN tunnel you can it'll show up here as whether it's
active or not.
If you have leases set up so if you're running a DCP server from P.F. sense it'll go there any monitoring
or load balancing or any type of activity that you're looking for can be done under status now under
VPN.
We have IP SEC which is the common type of tunnel that we're going to be working with in this particular
module.
There is open VPN which is quite useful it's always we're taking a look at that because it allows you
to set up pretty rapidly VPN connections from workstations around the world to this particular to any
network you want.
Now for services perhaps sense comes pre-built with a lot of services.
So we can have the auto configuration backup.
We can set up a DHS server DNS forward or so we will we forward all the DNS resolved or DNS requests
to a specific DNS server upstream.
We can set up load balancing so we can set up the pools of IP that we want to use.
We can look up A.P. and wake up on land and SMP.
So this is quite a few quite a few things and we can even extend this even further with packages now
under firewall.
There's a few options here.
So you've got alias Nat rules schedules traffic shaper and virtual eyepiece.
Now we've gone over virtual IP is however old.
Take a look at rules.
So every interface which would show up up here is going to have a set of rules.
So in this case we've got a rule that's the green four allow an expert nine.
So what we're doing here is this is an anti lockout rule so we don't want to block anybody from accessing
443 or port 80 over the destination of the web address.
So we want to be able to interact with this web UI at some point and then this is just blocking by the
networks.
So what if we wanted to add a rule so we can go down here and click ad and we want to allow traffic
from when IPD for perfect source.
So we want to only allow this from let's say a single IP.
So if we do 8 8 8 8.
All right.
So Google's DNS or let's say we just wanted it to go from there to are when network.
Right.
So we go ahead and hit save and then apply.
So what this has done is this allows currently the only person allowed to talk to our Web network to
anything in the when network is 8 8 8 8.
So Google's DNS server is the only one that's a lot of talk to it.
And then we can also deny it or disable it or remove it.
So working with rules is pretty important.
That's how we're going to be working with the DMZ.
So that's also important to understand.
So under outside of INTERFET firewall we have interfaces so interface right now we have one which is
our basic configuration which we saw in the previous video and doing the install that we left default.
Now in this case we're leaving at DCP.
In most cases on a firewall a win is going to be a static IP not a DHB but we're leaving it that way
for easy use for what we're going to be doing.
And then assignment so normally you'd have a different interface.
So when you we hook up another interface which we're gonna do in a different video you'll see that this
will pop up.
This will pop up.
You can set up a new interface as you want so under system we have advanced now under advanced comes
with a few different things so we can control the admin access so when somebody is logged in.
What what do we enforce.
So we can do rebuy and alternate hosts names we can make sure SSA just isn't is running on the machine
because currently it's not changed the port of it log in protection so who can and cannot log in.
Is there any serial connections then we have the firewall in that now we can disable certain things
around the firewall insert random generation I.D. into the IP header.
There's quite a few options that we can do here.
So take a take a step back and take a look through these and if you don't understand what it does it
does provide a brief description however or sometimes you might have to Google the answer on this particular
one.
Some times it's called something different on PSN and it is on another firewall networking.
So this works with IP these six options and also some of the network interface options so then we have
miscellaneous which is more like proxy load balancing some of the power options.
This is just a bit of a random mess of different things and the miscellaneous name system tunable.
So this is when you want to get down and dirty and hit and change a specific option so feel like enabling
the keyboard on reboot.
So if you want to get that specific or offsets of what you need or any other variety of option chances
are you're going to find it here and then we have notification.
So this is do we want to send it out by email or grab so that's advanced.
Now we've got a few options here we've got cert manager so that sense can work as a certificate authority.
We've got General set up which we've already gone through from the previous setup high availability
stink the logout button and then packet management.
So I want to take a quick look at that.
Currently we have nothing install but if we go to available packages you can see there's quite a bit
here.
So we do a quick scroll down we can see the backup utility if we wanted to install that.
We can install a DNS server for that bind we can install cron free radius HK proxy
and map if we wanted to install that for NRP for the night use client.
So there's quite an option here.
A lot of options here that allow you to first start so you can install the smart ideas on this particular
machine Squid Proxy.
So there's a lot of options that you can do here and you can install different packages and more packages
become available pretty quickly and they're pretty and they're pretty updated.
So this has just been a quick high level overview of the UI.
What I want you to do now is taken take a second and explore the UI before you move on to the next video
because we're not going to be talking too much about where everything is in the UI.
Only only specific things that we need to in the next few videos.