> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onefirewall.com/llms.txt
> Use this file to discover all available pages before exploring further.

# pfSense Integration Guide

## Overview

This guide explains how to integrate **OneFirewall Alliance (OFA) Threat Feeds** with **pfSense** using **pfBlockerNG** and \*\*External Dynamic Feeds \*\*.

***

## Supported ForcePoint Versions

OneFirewall threat feeds are compatible with pfSense 2.7.0 or later.

***

## Step 1: Generate API Token

1. Log into your **OneFirewall Alliance** dashboard.
2. Go to the **API Access** section.
3. Click **Generate JWT Token**.
4. Save the token securely — this will be used to authenticate feed requests.

<img src="https://mintcdn.com/onefirewall/7guFu20M_sXWrG3T/images/fortigate-1.png?fit=max&auto=format&n=7guFu20M_sXWrG3T&q=85&s=0cffef45376cbfe4a8b1f5ee251c9b67" alt="" width="2920" height="928" data-path="images/fortigate-1.png" />

<img src="https://mintcdn.com/onefirewall/7guFu20M_sXWrG3T/images/fortigate-2.png?fit=max&auto=format&n=7guFu20M_sXWrG3T&q=85&s=d1ad91414f50455cc4186307038f0dfe" alt="" width="1460" height="680" data-path="images/fortigate-2.png" />

***

## Step 2: Generate the agent configuration

Go to the OneFirewall Alliance Dashboard -> Install Agent, activate pfSense license, and save the configuration setup provided

<img src="https://mintcdn.com/onefirewall/uaB3uwUhZIiS-y-l/images/pfsense-6.png?fit=max&auto=format&n=uaB3uwUhZIiS-y-l&q=85&s=19ab0b6d9c3521b58b850caefe3e747e" alt="" width="1441" height="840" data-path="images/pfsense-6.png" />

***

## Step 3: Configure IP Address List and URL List

From pfSense Dashboard, go to System -> Package Manager and install pfBlockerNG if not already installed

<img src="https://mintcdn.com/onefirewall/uaB3uwUhZIiS-y-l/images/pfsense-1.png?fit=max&auto=format&n=uaB3uwUhZIiS-y-l&q=85&s=2b5c7f1532227b370d54b90d454e2b65" alt="" width="955" height="790" data-path="images/pfsense-1.png" />

<img src="https://mintcdn.com/onefirewall/uaB3uwUhZIiS-y-l/images/pfsense-2.png?fit=max&auto=format&n=uaB3uwUhZIiS-y-l&q=85&s=b18bf12d0f85c69540024c87ad46537d" alt="" width="1643" height="420" data-path="images/pfsense-2.png" />

### Configure the pfBlockerNG

Go to Firewall -> pfBlockerNG and configure the package

<img src="https://mintcdn.com/onefirewall/uaB3uwUhZIiS-y-l/images/pfsense-3.png?fit=max&auto=format&n=uaB3uwUhZIiS-y-l&q=85&s=fa905a5d4ed551d5f49acc2373dca2b4" alt="" width="747" height="745" data-path="images/pfsense-3.png" />

Please, follow all "Next" step until the "Finish" section

### Configure the OneFirewall Threat Feeds

Go to Firewall -> pfBlockerNG -> IP section, and apply following steps:

<img src="https://mintcdn.com/onefirewall/uaB3uwUhZIiS-y-l/images/pfsense-4.png?fit=max&auto=format&n=uaB3uwUhZIiS-y-l&q=85&s=4d5419047f6dd35642400cd8bc5575b9" alt="" width="721" height="1126" data-path="images/pfsense-4.png" />

Go to Firewall -> pfBlockerNG -> IP -> IPv4 section, and apply following steps:

<img src="https://mintcdn.com/onefirewall/uaB3uwUhZIiS-y-l/images/pfsense-5.png?fit=max&auto=format&n=uaB3uwUhZIiS-y-l&q=85&s=a94c7798c4ff6d7e12c20fd7d52aadeb" alt="" width="746" height="1118" data-path="images/pfsense-5.png" />

The OFA\_API\_WITH\_TOKEN is the configuration url provided by the OneFirewall Install Agent section.

***

## Notes

* OneFirewall uses **JWT-based Bearer Authentication**.
* Feeds are **auto-refreshable** and optimized for pfSense Integration.