Ah, I have never restored all data, only individual backups. I see now that the full backup backs up certificates and CAs. When transferring my pfSense installation to a new machine, I have preferred to only restore some parts of the config (i.e., not the interface config due to network adapter differences) but I guess the easiest way will be to restore the full config, and change the network config manually from the console. Sorry for the hassle.

I ended up uninstalled Squid and installing Squid3.  I am still having some odd issues with local authentication. Now, everything seems to work OK, except when I turn on local Auth.  I keep getting prompted for my password, even though I know its the correct password.  I have left a post in the Packages forums hoping someone will respond.  If I turn local auth off, it works great.  I have tried deleting the squid.passwd and re-creating my users through the web panel, but no luck.

This is the root cause of the problem here, with a fix that can be installed using the system patches package. https://redmine.pfsense.org/issues/4393

Thanks for replying. I'll get this setup a go and post the results. Much appreciated! Andy

It really does sound like management is doing this guy no favors and really doesn't care if it works or not.  It's asinine to not get a sample unit and do a proper survey first.

As posted by the doktor on the other thread: https://redmine.pfsense.org/issues/4437#note-2 Nothing to see here.  The perils of -current.

@Derelict: I wish Jim or Chris would chime in. https://redmine.pfsense.org/issues/4437#note-2 Move on…

enable SNMP in pfSense and have PRTG auto discover the services on the box.

I don't know what that output means but you might have better luck by posting this in the Traffic Shaping forum.

1.  Questions about the traffic shaper are best posted in the Traffic Shaping forum. 2.  I have no idea what you mean when you say "how many protocol or port that use on my traffic shaper such as (Skype, Hangout, SIP phone, Go to Meeting, Lync)"?

Limiters. You might want to post in the Traffic Shaping section with a descriptive title.

Just found the problem and made it work System>Advanced>Firewall/Nat uncheck "Disable reply-to on WAN rules" Now ping works and TCP and UDP.

imho it's best to use the system->patches addon to insert commits

Ok, the problem was the connected serial cable with the other end open for all the time, means without termination of a serial device or serial-usb adapter. May be some signal reflection/induction on the open end back to the serial port on the APU.1D4 board.

maybe its just me, but installing non security, or very basic network functionality features (dhcp, dns) on my firewall seems like bad juju to me. I would go the VM route - this allows you to use the same hardware for lots of thing, but still isolate from installing stuff on your firewall OS.

Thank you NOYB and grandrivers for the helpful information. When looking at the packets I captured on the WAN I do see many re-transmission because of "TCP  new fragment overlaps the old". This leads me to believe it is on Charters end since it is their IP throwing the error. I also see some inconstancy with Apinger which makes me question the data in RRD graph as well.

Thanks for the answers. When I reproduce the issue I will try few things and let you know @dgcom That seems to be a good workaround. If I can't troubleshoot the problem then I will go with that. Thanks