Integration with PFsense appliances

[yuri-alias]

Hi!

I'm currently thinking about upgrading a network setup (With an existing wireguard VPN) with the following:

1. A dedicated Netgate appliance with PFsense
2. Defguard

I know pfsense has wireguard support, but I'm wondering what my options are when it comes to deploying defguard. Ideally, I'd like to keep the heavy lifting and nteworking/VPN side within the appliance. Wouldn't mind having an additional VM/container with a controller or manager server if needed, but I haven't found much information on this so far.

Is there any documentation I can look at to get this done, or are there any guidelines or recommendations to follow?

[teon]

You need to deploy defguard core and Edge according to the architecture: https://docs.defguard.net/deployment-strategies/hardware-os-network-and-firewall-recommendations#firewall-settings and then deploy our Gateway on the PFSense (appliance machine). Our gateway only orchestrates the Wireguard Kernel (and is not exposed to the internet) so the appliance does the "heavy VPN lifting" on hardware (kernel).

We officialy support OPNSense (which is a sister/fork project to PFSense) so for sure deploying on PFSense is possible.

[yuri-alias]

Thank you very much! That's a relief to hear, we'll give that a go.