Performance Evaluation of Pfsense in Detecting and Preventing Network Attacks in Controlled Environments

Abstract

: In the contemporary digital landscape, network security represents a critical challenge due to the increasing frequency and sophistication of cyberattacks. Firewall systems play a central role in protecting network infrastructure by filtering traffic and controlling access. pfSense, an open-source firewall solution based on the FreeBSD platform, offers a wide range of features, including VPN, IDS/IPS, and advanced traffic control mechanisms. This paper analyzes the effectiveness of the pfSense system in detecting and preventing various types of network attacks through experimental testing in both virtual and physical environments. The experiments encompass port scanning, brute-force attacks, and DDoS scenarios, utilizing tools such as Nmap, Hydra, and hping3. Research results indicate that pfSense, with properly configured IDS/IPS systems, can effectively detect and block a significant percentage of attacks, making it a reliable solution for network protection, particularly in resource-constrained environments.