A user rents a cloud server hosted on VMWare and is provided a pfSense appliance to protect it. The pfSense appliance has a web-based login page to access its console. Although pfSense is supposed to protect the rented server, what protects pfSense? Is there another way to remotely manage the firewall other than exposing a web-based login page?
I read this, but it appears to be related to the LAN side. Since the user is renting the server, administration would have to occur from the WAN side.
Would setting up a VPN through pfSense then administering from within there be the only way to do it? If so, how do you protect the VPN's port? Is there a way to lockout certain IP ranges or limit to those you use yourself? What if you have a dynamic IP?