top of page

Works across millions of pfSense installation worldwide

Open & Universal Firewall Authentication

Secure Access to Any pfSense Firewall

GBAuth is a cross-platform authentication client that connects to any pfSense firewall running the GBAuth service. Dynamic IP whitelisting, encrypted connections, and multi-firewall management — for any organization.

WHAT IS GBAUTH?

Firewall Authentication,
Simplified

GBAuth provides a secure, encrypted bridge between users and pfSense firewalls. Instead of static VPN configurations or complex firewall rule management, users authenticate once and their IP is dynamically whitelisted on the firewall — granting access only to authorized users.

​​​

It works with any pfSense firewall running the GBAuth authentication service, regardless of who manages the infrastructure.

  • Works with any pfSense firewall deployment

  • TLS/SSL encrypted connections end-to-end

  • Supports LDAP and local authentication backends

  • No per-user VPN tunnels or client certificates required

HOW IT WORKS

Four Steps to Secure Access

No complex VPN setup. No firewall rule editing. Just authenticate and connect.

1

Connect

Point the GBAuth client at any pfSense firewall running the GBAuth service. Add multiple firewalls to manage them all from one place.

2

Authenticate

Enter your credentials. GBAuth validates them against the firewall's LDAP directory or local user database over an encrypted TLS connection.

3

Authorize

Your IP address is dynamically added to the firewall's authorized list. pfSense rules update automatically to grant you access to protected resources.

4

Stay Connected

GBAuth maintains your session with automatic keep-alive messages. Your access persists until you disconnect or the session expires.

FEATURES

Everything You Need for Firewall Access

Built for IT professionals, MSPs, and anyone who needs secure, manageable access to pfSense-protected infrastructure.

feature_1.png

Multi-Firewall Management

Connect to and manage multiple pfSense firewalls simultaneously from a single client. Monitor connection status for each in real time.

feature_4.png

Cross-Platform

Native applications for Windows, macOS, and Linux. Consistent experience across every platform your team uses.
 

feature_2.png

TLS/SSL Encryption

All communications between the client and firewall are encrypted with TLS. Credentials never travel in plaintext.
 

feature_5.png

Real-Time Monitoring

Built-in ping monitoring, connection quality indicators, and status tracking for every firewall connection. Know instantly if access is interrupted.

feature_3.png

LDAP & Local Auth

Authenticate against existing LDAP directories or local user databases. Flexible backend support fits any organization's identity infrastructure.
 

feature_6.png

Encrypted Credential Storage

Credentials are encrypted locally on your device. Automatic session management with secure keep-alive handles reconnection seamlessly.
 

USE CASES

Who Uses GBAuth?

GBAuth serves any individual or organization that uses pfSense firewalls for network security.

usecases_1.png

Hosting Providers

Give customers secure, credential-based access to their hosted infrastructure behind pfSense firewalls without managing individual VPN tunnels for each client.

usecases3.png

Enterprise IT Teams

Control access to data center resources, development environments, and internal services behind pfSense. LDAP integration works with your existing Active Directory or identity provider.

usecases_2.png

Managed Service Providers

Manage firewall access across dozens of client environments from a single application. Authenticate to any client's pfSense firewall on demand.

usecases4.png

Security-Conscious Organizations

Replace open firewall ports with dynamic, user-authenticated access. Only authorized users' IPs are whitelisted — reducing attack surface automatically.
 

FOR ADMINISTRATORS

Easy to Deploy on Any pfSense Firewall

The GBAuth server component installs on any pfSense firewall and integrates directly with the firewall's rule engine. No special hardware or third-party services required.

  • Simple Installation
     

  • Flexible Authentication Backends
     

  • Configurable Timeouts
     

  • Automatic Firewall Integration

Deploy the GBAuth service on pfSense with a single script. Runs as a lightweight background service on port 12345.

Connect to LDAP directories for enterprise environments or use simple local user files for smaller deployments.

Set authentication, IP, and session timeouts independently. Fine-tune security policies to match your organization's requirements.

Authenticated IPs are written directly to pfSense firewall tables. Rules update automatically — no manual intervention needed.

GET STARTED

Download GBAuth Free

Available for all major platforms. Connect to your pfSense firewalls in minutes.

The GBAuth client is free to download and use. No account required.

Need the GBAuth Server?

The GBAuth server component for pfSense requires a license. Contact us to get started with deploying GBAuth on your firewalls.

GBAuth does not collect, store, or transmit any personal data to Prominic.NET or third parties. All credentials and configurations are stored locally on your device with encryption. Your IP address is used only for dynamic firewall whitelisting during active sessions, communicated directly with your configured pfSense firewalls over TLS/SSL. The application does not integrate with any analytics, advertising, or tracking services. Uninstalling GBAuth removes all locally stored data. Contact: support@prominic.net.

bottom of page