FireCtl:OPNsense&Proxmox Mgmt

FireCtl is the native app for OPNsense firewalls on iPhone and iPad. See what your firewall is doing right now, change rules and aliases on the go, and keep DHCP, VPN, DNS, firmware and backups under control. If your firewall runs on Proxmox VE, FireCtl manages that too.

DASHBOARD
• Live traffic per interface with 60-second charts and top talkers
• System info, firewall states and system health: temperature, memory, storage, swap and the firewall's own notifications

FIREWALL
• Rules: grouped by interface, search, switch on or off, create, edit, reorder and apply with one tap
• NAT: port forwards and outbound NAT rules
• Aliases: hosts, networks, ports, URL tables, GeoIP and more, including the live table content
• Live log with filters by action and interface, search, pause and a detail view for every entry
• States: every active connection, drop a single state or all states of an address
• Block an address with one tap, straight from the log or the state table
• Ruleset check: finds unrestricted allow rules, block rules without logging and unused aliases

NETWORK
• DHCP leases from ISC, Kea and dnsmasq, with static reservations
• ARP and NDP tables with vendor lookup
• VLANs and gateways with latency and packet loss

VPN
• OpenVPN instances and sessions
• WireGuard tunnels and peers with an on/off switch per peer
• Tailscale status, peers and settings

SERVICES
• Unbound DNS: host overrides, query forwarding, host aliases and statistics
• Start, stop and restart services
• Certificates and certificate authorities: list, details, create and delete
• Configuration history with a diff between any two revisions
• Ping and traceroute, run from the firewall
• FreeRADIUS users

MAINTENANCE
• Firmware: check for updates, install them and apply major upgrades with progress
• Backup: download the configuration, optionally encrypted, and manage ZFS boot environments
• Proxmox VE: nodes, VMs and containers with start, stop, shutdown, reboot and snapshots; automatic snapshot of the firewall VM before every firmware update

WIDGETS AND SHARING
• Home Screen widgets for system health, WAN status, VPN connections and certificate expiry
• Share a URL from Safari straight into an alias

SECURITY
• API key authentication, credentials stored in the Keychain
• Certificate pinning with trust on first use for self-signed certificates
• App Lock with Face ID, Touch ID or PIN
• Optional iCloud sync of profiles, end-to-end encrypted through iCloud Keychain
• Several firewalls as profiles, switched in one tap

FIRECTL PRO
The Dashboard is free. Everything else is FireCtl Pro, available as a yearly, monthly or lifetime purchase. Every installation includes seven days of full Pro access, with nothing to cancel.

Try everything without a firewall: tap "Try Demo Mode" on the welcome screen. For a real firewall you need an OPNsense API key; the in-app guide lists the required privileges.

FireCtl is an independent app and not affiliated with Deciso B.V., the OPNsense project or Proxmox Server Solutions GmbH.

LEGAL
Terms of Use (EULA): https://firectl.com/en/terms
Privacy Policy: https://firectl.com/en/privacy