CloudLabBox
Try the free demo

pfSense in EVE-NG: CE and Plus

pfSense Community Edition and pfSense Plus are in the Add Node list of every CloudLabBox workspace. Practise firewall rules, NAT, VLANs and VPNs on Netgate's FreeBSD-based firewall.

Choose a planCheck it in the free demo

Vendor
Netgate
In Add Node
13 images
Templates
pfsense pfSense_plus
Newest
pfsense-pfs-2.7.2

Installed versions

Every pfSense name in the Add Node image list, exactly as you’ll pick it.

Started in our checksEach links to the tested tip below.

Template pfsense

pfSense CE

12 images on this template. Newest first.

  • pfsense-pfs-2.7.2Started in our checks
  • pfsense-pfs-2.7.0
  • pfsense-pfs-2.6.0
  • pfsense-CE-2.6
  • pfsense-CE-2.5.2-RELEASE
  • pfsense-CE-2.5.2
  • pfsense-CE-2.5.1-RELEASE
  • pfsense-CE-2.5.0-RELEASE
  • pfsense-CE-2.4.5-p1
  • pfsense-CE-2.4.5
  • pfsense-CE-2.4.4
  • pfsense-2.3.3

Template pfSense_plus

pfSense Plus

1 image on this template.

Add it to a lab

In Add Node, choose the template, then the image. The template fills in these settings; change them before you start the node.

Add Node defaults for pfSense, read from the EVE-NG templates on 28 October 2026
ImageTemplateCPURAMInterfacesConsole
pfSense CEpfsense12048 MB2 interfacesVNC
pfSense PluspfSense_plus12048 MB2 interfaces: em0 to em1VNC

EVE-NG admits a node by the CPU and RAM set on it, so a running node counts against your plan at these values. The largest of these templates starts nodes at 1 vCPU and 2,048 MB, which fits the free demo’s 6 vCPU and 8 GB, so you can start one there and open its console.

See default usernames and passwords Read every node tip

A pfSense firewall with a DMZ

Give pfSense a third interface for a DMZ, with an IOSv router as the ISP, one Alpine Linux host on the LAN and one in the DMZ. You practise interface assignment, rules between the zones and a port forward to the DMZ host.

  • 1×pfSense CE pfsense1 vCPU, 2048 MB
  • 1×IOSv vios1 vCPU, 1024 MB
  • 2×Alpine Linux clbalpinebase2 vCPU, 512 MB each

Added with these defaults, the lab uses 6 vCPU and 4 GB of RAM. The smallest plan that fits is Lite, with 6 vCPU and 8 GB: £3 a day, or £0.50 an hour On-Demand.

Choose a planGive nodes more CPU or RAM and you add that instead.

Licences are yours to bring

pfSense Community Edition is open source and needs no licence. pfSense Plus has Netgate's own licence terms: CloudLabBox doesn't supply a Plus licence, and its activation hasn't been checked here.

The images run only inside your CloudLabBox workspace; they aren’t available to download.

Guided labs that use pfSense

Ready-made labs in the Shared folder of every lab workspace, each with a scenario, tasks, checks and the full solution.

All guided practice labs

Questions about pfSense

What is Netgate pfSense?

pfSense is Netgate's FreeBSD-based firewall and router, managed from a web interface. Both the free Community Edition and pfSense Plus are installed.

What's the difference between the CE and Plus images?

The CE images use the pfsense template, where pfSense sees its interfaces as vtnet0 and vtnet1. pfSense_plus-24.11 uses its own UEFI template, with interfaces em0 and em1.

Can I add an interface for a DMZ?

Yes. Set the number of interfaces when you add the node, or edit the node while it's stopped, then assign the new interface from pfSense's console menu.

pfSense: why do I see interface assignment instead of a login prompt?

pfsense-pfs-2.7.2 boots to the graphical console's initial interface-assignment screen. New nodes use VNC by default; select VNC if an existing node still has a text-console setting. In the default two-interface layout, assign vtnet0 as WAN and vtnet1 as LAN, then complete the normal console setup. Existing saved guest configurations are preserved.

From the node tips, updated 9 October 2026.

pfSense Plus 24.11: which profile and first-run steps should I use?

Use the dedicated pfSense Plus profile with 1 CPU, 2 GB RAM, VNC and the supplied UEFI settings. Its two e1000 adapters appear as em0 and em1, matching the retained factory configuration. Plus 24.11 completed boot and automatic boot verification, then required changing the default admin password. Complete that prompt and configure your topology. The web interface, forwarding and activation have not been verified.

From the node tips, updated 9 October 2026.

Which pfSense images are installed?

13 images (12 pfSense CE, 1 pfSense Plus), all listed on this page exactly as Add Node shows them. The newest is pfsense-pfs-2.7.2.

How much CPU and RAM does a pfSense node use?

When you add one, the pfsense template adds 1 vCPU and 2048 MB of RAM; the pfSense_plus template adds 1 vCPU and 2048 MB of RAM. You can change both in Add Node, and your plan counts what each running node is set to.

More images

CloudLabBox is independent of the vendors named on this page. Their names identify the images in the workspace’s Add Node list.