pfSense

Details

Author	Energy SOAR
Version	1.0
License	AGPL-V3
Requires Registration	No
Requires Subscription	No
Free Subscription Available	No
DataType Supported	energysoar:case_artifact:ip, other

Description

Perform response actions on pfSense as part of containment and firewall automation workflows. Typical responder operations may include blocking or unblocking IP addresses and applying rule or alias changes through the available API or SSH-based automation.

Configuration

Name	Description
base_url	pfSense URL
username	Username with permission to perform firewall actions
password	Password or API credential for the pfSense instance
verify_ssl	Verify server certificate
target_alias	Alias, list or object used for automated block or unblock
transport	API or SSH transport used by the responder