Network Security Lab Manual (CS-223 L)
Spring 2025
Air University Islamabad
FACULTY OF COMPUTING & ARTIFICIAL INTELLIGENCE
Department of Cyber Security
Network Security Lab Department of Cyber Security Iram Fatima Hashmi
LAB MANUAL
Network Security
CS-223 L
Air University
Islamabad
Prepared by: Iram Fatima Hashmi
Network Security Lab Department of Cyber Security Iram Fatima Hashmi
Name of Student: ______________________________ _ Section: ____________________ _
Student’s Signature: ______________________________ Date: _______________________ _
Name of Instructor: _______________________________ Instructor’s Signature: _________ _
Lab # 09:
pfSense
Lab Objectives:
In this lab, you will learn:
• Introduction to pfSense
• Setting up pfSense
Lab Description:
pfSense:
➢ The pfSense project is a free network firewall distribution, based on the FreeBSD operating
system with a custom kernel and including third party free software packages for additional
functionality.
➢ pfSense software includes a web interface for the configuration of all included components.
There is no need for any UNIX knowledge, no need to use the command line for anything,
and no need to ever manually edit any rule sets.
➢ Users familiar with commercial firewalls catch on to the web interface quickly, though
there can be a learning curve for users not familiar with commercial-grade firewalls.
Installation and configuration:
➢ Follow following links for installation and setup:
o https://docs.netgate.com/pfsense/en/latest/install/install-walkthrough.html
o https://www.youtube.com/watch?v=Y-Dj8lHmXy8
➢ After you are done installing, you would see an interface like below listing your WAN and
LAN interface (the two network adapters you have set in start).
Network Security Lab Department of Cyber Security Iram Fatima Hashmi
➢ The NAT interface is assigned to pfSense’s WAN and acts as internet source for your
pfSense letting pfSense access internet.
➢ The Internal Network interface is assigned to your pfSense’s LAN and creates a private
network between your VM and other VMs or host simulating a local network.
After installation:
➢ The after installing, you can use its console interface for basic network setup,
troubleshooting, reset admin password, reboot, halt system etc
➢ The web interface is accessible at LAN interface using default credentials (admin:pfsense)
you have setup on any other VM on internal network.
Network Security Lab Department of Cyber Security Iram Fatima Hashmi
➢ Now pfSense would act as gateway and NAT router between LAN and WAN. Any
request from LAN would be routed like this:
o Client VM (192.168.1.x) -> pfSense LAN interface (192.168.1.1) -> pfSense ->
WAN interface (10.x.x.x) ->Internet
➢ Any rule you want to add can be added in Firewall tab.
➢ Task: Perform following:
o Setup pfSense and access its web GUI.
o Then test internet access on client VM on internal network and explain how
packet is being routed?
o Add firewall rules to block facebook, Instagram and youtube.
Network Security Lab Department of Cyber Security Iram Fatima Hashmi
o Test the rules and monitor network traffic using traffic graphs.
