> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# pfSense

> Connect a pfSense firewall to Myrmex over SSH — create the access account and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **pfSense** firewall (Plus or CE) so Myrmex can read its configuration, audit its hardening, help you clean up rules, and — with approval — apply changes. Myrmex reaches the device over **SSH** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network, in real time.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read & troubleshoot" icon="magnifying-glass">
    Query interfaces, routing, firewall rules, NAT, states, and services on demand — read-only diagnostics.
  </Card>

  <Card title="Hardening audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit across pfSense controls.
  </Card>

  <Card title="Rule hygiene" icon="broom">
    Find unused or overly broad firewall rules and propose cleanups.
  </Card>

  <Card title="Config management" icon="floppy-disk">
    Review and diff the device configuration; apply rule changes on approval.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed on a network that can reach the pfSense management IP over SSH. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* **SSH enabled** on pfSense.
* An **admin-level account** Myrmex can use to log in.

## Step 1 — Create the Access Account in pfSense

The credential Myrmex needs is an **SSH username and password** for an account with admin privileges.

<Steps>
  <Step title="Enable SSH">
    In the pfSense web interface, go to **System → Advanced → Admin Access** and enable **Secure Shell (SSH)**. Confirm the SSH port (default `22`).
  </Step>

  <Step title="Choose or create an admin user">
    Use the built-in `admin` account, or add a user in **System → User Manager** and place it in a group with admin privileges.
  </Step>

  <Step title="Record the credentials">
    Note the **username** and **password** — you'll enter them in Myrmex.
  </Step>
</Steps>

<Tip>
  Prefer least privilege where your workflow allows, and rotate the account's password on a regular schedule.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → pfSense**, then fill in:

| Field            | Description                                                                                               |
| ---------------- | --------------------------------------------------------------------------------------------------------- |
| **Name**         | A unique name for this pfSense instance.                                                                  |
| **Description**  | Optional note to identify the device.                                                                     |
| **SSH Host**     | The IP address or hostname of the pfSense firewall.                                                       |
| **SSH Port**     | The SSH port (default `22`).                                                                              |
| **SSH Username** | The pfSense SSH username with admin privileges (default `admin`).                                         |
| **SSH Password** | That account's password.                                                                                  |
| **Model**        | The pfSense appliance model or deployment type.                                                           |
| **Version**      | The pfSense version (Plus or CE).                                                                         |
| **Collector**    | The [Collector](/documentation/agent-endpoint-security/collector-mode) that will open the SSH connection. |
| **Auth Type**    | Connection method (preset to `ssh`).                                                                      |

## Connect

Click **Connect** to validate the SSH connection and finish. The pfSense firewall then appears under **Environment → Integrations**, and you can start asking [Hydra](/documentation/multi-agent-system/integration-specialist-agent) about it in the Workspace.

<Note>
  Your credentials are stored securely and resolved server-side — they never pass through the AI, and Myrmex reads the device on demand rather than storing its data.
</Note>