Building a secure network segmentation using pfSense with WAN, LAN, and DMZ on VMware Workstation. Includes firewall rules, GeoIP filtering, and Suricata inline IPS for deep packet inspection.