The pfSense Hardening Tool is a security-focused API that automates the generation of hardened configurations for pfSense firewalls. Built by CISSP and CISM certified professionals, this tool enables network administrators and security engineers to quickly apply industry best practices and security hardening standards to their pfSense deployments without manual configuration.
The tool accepts a set of hardening options and generates optimized pfSense configurations tailored to your security requirements. It supports session tracking, user identification, and timestamped requests to ensure audit compliance and change management. Whether you're deploying a new pfSense instance or enhancing an existing firewall, this tool streamlines the hardening process and reduces configuration errors.
Ideal users include network security teams, DevSecOps engineers, managed security service providers (MSSPs), and organizations seeking to standardize their firewall security posture across multiple pfSense installations.
Sample Request:
{
"hardeningOptions": {
"firewall_rules": ["block_all_inbound", "restrict_ssh_access"],
"ssl_tls": ["disable_sslv3", "enable_tls_1_2_minimum"],
"logging": ["enable_firewall_logging", "enable_dhcp_logging"]
},
"sessionId": "sess_a7f9d3c2b1e4f6h8",
"userId": 42,
"timestamp": "2025-01-15T14:30:00Z"
}
Sample Response:
{
"status": "success",
"configurationId": "config_9x2k5m8l1p4q7r3t",
"hardeningApplied": {
"firewall_rules": ["block_all_inbound", "restrict_ssh_access"],
"ssl_tls": ["disable_sslv3", "enable_tls_1_2_minimum"],
"logging": ["enable_firewall_logging", "enable_dhcp_logging"]
},
"generatedConfig": {
"version": "2.7.0",
"firewall": {
"rules": [
{
"id": 1,
"action": "block",
"direction": "in",
"description": "Block all inbound traffic by default"
}
]
},
"system": {
"ssl_tls_version": "1.2",
"logging_enabled": true
}
},
"timestamp": "2025-01-15T14:30:15Z",
"sessionId": "sess_a7f9d3c2b1e4f6h8"
}
Description: Generates a hardened pfSense configuration based on provided hardening options.
Method: POST
Path: /api/hardening/generate
Request Body:
| Parameter | Type | Required | Description |
|---|---|---|---|
| ----------- | ------ | ---------- | ------------- |
hardeningOptions | Object (string array values) | Required | A map of hardening categories to arrays of hardening rules to apply. Examples: firewall_rules, ssl_tls, logging, access_control, etc. |
sessionId | String | Required | Unique identifier for the current session, used for audit tracking and request correlation. |
userId | Integer | Optional | User ID of the administrator requesting the hardened configuration. |
timestamp | String | Required | ISO 8601 formatted timestamp indicating when the request was generated (e.g., 2025-01-15T14:30:00Z). |
Response (200 - Success):
The endpoint returns a JSON object containing:
status: String indicating success or failureconfigurationId: Unique identifier for the generated configurationhardeningApplied: Echo of the hardening options that were appliedgeneratedConfig: The complete hardened pfSense configuration objecttimestamp: Server-side timestamp of the responsesessionId: Echo of the provided session ID for correlationResponse (422 - Validation Error):
Returns an HTTPValidationError object with a detail array containing validation errors:
| Field | Type | Description |
|---|---|---|
| ------- | ------ | ------------- |
detail | Array | Array of validation error objects |
detail[].loc | Array | Location of the validation error (field path) |
detail[].msg | String | Human-readable error message |
detail[].type | String | Error type identifier |
| Plan | Calls/Day | Calls/Month | Price |
|---|---|---|---|
| ------ | ----------- | ------------- | ------- |
| Free | 5 | 50 | Free |
| Developer | 20 | 500 | $39/mo |
| Professional | 200 | 5,000 | $99/mo |
| Enterprise | 100,000 | 1,000,000 | $299/mo |
ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.
共 1 个版本