i was not happy the RC candidate crashed my sg 2220… but now that i have learned the process to console and reinstall the OS i am happy.  i did learn several tricks on the way to improve my network from all the research i did!

it breaks enterprise folder redirection too soo…......

We don't have specific budget for this, we wish to use desktop with core i3 processor/4GBRAM/500GB Hard disk.
Is enough for all, but pending on the configuration of pfBlockerNG & DNSBL & TDL you may need more
RAM inside.

Branch A=50, Branch B=20, Branch C=20

Could be also a SG-4860

Traffic: Mailing, surfing. Internet Speed is 50Mbps (Up/Down).

Could be also a APU2C4

My thanks to all of you for this avalanche of useful replies. Yes, my intent was as restated by johnpoz. I understand the image file needs to be in the forum and the reason for that. Also, it must not be too heavy but readable: 1000px width seems to be an acceptable compromise. For more than one images, I will use reference numbers inserted in the text at the appropriate position as suggested. Thanks.

Resistance is futile.

Thanx for doing this  :)

But it would be so much more usefull if presented in a PDF document

/Bingo

What ports are you using for TCP, UDP and TLS? in the software  Forward those!

https://doc.pfsense.org/index.php/How_can_I_forward_ports_with_pfSense

@BlueKobold:

You will be able to create groups and each of them is able to get a different lease time as credential!
So you are abele to create;

group 1 = 1 hour group 2 = 2 hours ect…...

Hi BlueKobold Thanks for the reply.

im talking about ramdom users, they dont have to login or to have any credentials on pfsense.
example: someone will connect to my open wifi, and have 1 hour or internet

Hi, I am new to pfSense experience. My friend told me about pfsense but I have no idea what it is and how it operates?

It is an OpenSource x86 firewall distribution based on FreeBSD as the underlying OS.

Is it a paid service? or a platform?

He is telling you about his firewall, and nothing more?

He said something about securing the network. How pfsense can help me in that?

A router does usually only SPI/NAT and a firewall is working with firewall rules for allow and deny
or plain passing through the entire network traffic. Or in short a router is routing between one and another or
more networks and a firewall is separating one from another or more networks. As today this border will be for
sure becoming blurred more and more.

There are 2 different things here.. There is the UI that is built into the host of esxi (free)  And then there is the web client on the vserver.  I think the issue in the kb article is only on the vserver web interface.

I updated the embedded because there was a nasty bug on the UI where items were not populating, and you would have to log out and back in.. The 1.23.0 update fixed that.. There is a whole long thread on the fling site.

i believe the reason enterprise lan isn't being converted to v6 is this:
why? whats the point?

there isn't a single "good enough" reason for 99.99% of the lan-networks in the world, to migrate to v6. (at this point in time)
heck i think there will be nat4->6 gateways (wan on v6, lan on v4) long before any sane IT-admin would migrate without any compelling reason todo so.

What he is asking for is professional services

https://www.netgate.com/our-services/professional-services.html

Professional Services
For professional services inquires and quotes, send us an email at sales@netgate.com and we will reply as soon as possible

Simples, found it slow…

Solution - Stop using Facebook. ;)

Well is pf2 natting?  If so port forward to whatever client your trying to get to on the 192.168.100, and then hit the 192.168.20.2 address.

If pfsense 2 is not natting then yes its routing, where this 192.168.20 would be the transit network, where is your client that is trying to get to the 192.168.100 network?

Intel J1900 CPU does not support AES-NI, so your box will not be able to run pfSense 2.5.

https://www.netgate.com/blog/pfsense-2-5-and-aes-ni.html

@NogBadTheBad:

@Harvy66:

@NogBadTheBad:

Are you all slacking, spotted this 5 days ago :P

What gathering is that from?! I want to learn about upcoming DPDK!

Google dpdk and also follow gonzopancho on twitter.

DPDK pfSense video from DPDK Summit 2017

https://twitter.com/pfsense/status/913063738584035328

https://www.pscp.tv/DPDKProject/1dRKZnleWbmKB?t=18081

TPG fttn requires vlans and a higher mtu than standard - its fiddly.

Check out the guide at https://store.bytefoundry.com.au/blogs/guides/fttn-nbn-with-pfsense

Did anyone ever hear of or even used an Edge-corE switch? That's the business division of Accton from which you might know the consumer brand SMC.
I had an ECS4210-12T switch which is reasonable hardware (8+4 ports) with familiar Cisco-SG-like CLI. Even has an internal PSU, yes! The GUI is lousy though with frames and dividing the 12-port configuration into two pages (10 ports and 2 ports) and still you always have to scroll within the frame. And there's more of such nonsense.

I really wonder to which markets Edge-corE sells. They even offer SDN with 100GbE L3 switches which I find impressive. That stuff isn't cheap either so who buys that?

I forgot to add one of the super cool feature why I also use Intel AMT on WAN:

because I can have also a HW firewall; enabling Network Filters & Policies and building my rules on Intel AMT I can harden firewall and I am 100% sure that nothing can open privileged port or admin ports on pfSense wan because they are disabled from AMT.

Another possibility that need to experiment is to see how AMT react to DDOS…