@Rico Hi Rico, Thank you. I tried changing the LAN IP from the web configurator but that just locked me out. I reset to factory default from the CLI set it up again and everything is working fine now.

@prfoks perfect solution. You are superman bro. Thank you

Hello again, Thanks for the replies. You have some very valid concerns there Rico, and I totally agree. However this kind of feature sounded good to me as I was thinking in the lines of the MSSP business. Not for businessclients, but for customers at home that needs help to secure their own environment. The easier this is for the end-user the better in my opinion, but loading the correct config before shipping as teamits suggested solves this. That removes the complexity and risk of having a secure deploymentenvironment that also can fail :-) Thanks! -Øystein

@hawkbh said in PFsense logs are not being stored: @bmeeks said in PFsense logs are not being stored: Okay, just to be sure I am clear on your symptoms -- When you go to STATUS > SYSTEM LOGS and click the System tab, do you see logs then or is that screen also blank? What your screenshot is showing is that Firewall logs have been selected. There are at least two reasons you might not have firewall logs. One would be you don't have any rules selected for logging; another would be you have accidentally clicked the option to disable the packet filter (and thus the firewall engine). Post up a screenshot of some of your firewall rules from the FIREWALL > RULES menu. The physical log files exist in /var/log on the firewall. You can see them either via a direct console connection or remotely via an SSH connection. Thank you buddy. Now it's working! Good deal. When I submitted my reply above I was for some reason thinking you had already tried the Reset Log Files button without success. Otherwise I would have mentioned it. Reading over your posts again showed that you had not tried that, so my bad for overlooking. @jimp caught it, though!

https://forum.netgate.com/topic/152551/downgrade-from-2-4-5-to-2-4-4p3 -Rico

Internal scan is only if your service provider... And you sure and the hell do not need to make the web gui of pfsense available on the networks that are involved in the PCI.. For example - we are service provider, we host stuff that is PCI for customers... We don't need to scan the management vlan, only need to scan the networks that are directly involved in the processing of the payments.. We are not scanning every single network in the company... You only need to scan the network related to your pci environment.. If your switches and or routers and firewall interfaces are available on your pci networks - your doing it wrong!

Try disabling UEFI boot on that last screen, see if it helps.

Glad you have it working now. -Rico

If you only use 2 or 3 interfaces this should be fine. For more you need to deal with VLANs first because LAN 1-4 is switched on the SG-3100 -Rico

@bmeeks said in Installtion on a laptop with Ethernet and USB: SG-1100 Yes, looks like a better option. Thanks

@rks I am not sure what you're doing when I see that extraction on the screen. I can tell you that, having installed both pfSense 2.4.4 and 2.5 on a 2011 Mac Mini server, it is possible. You should download the pfSense for flash drive, then get balenaEtcher for Mac and use that to flash the pfSense onto your jump drive ... you'll find that easy than trying to use Terminal which creates issues. Once you have your jump drive with pfSense, connect it to your Mac Mini and boot it by holding down the option key while you're startup ... it will take a few minutes to boot fully. Once the installer appears, you can let the installer do the work; for example, format the hard-drive and install pfSense. Those thunderbolt adapter uses Broadcom NIC ... I ended up getting a used thunderbolt PCI enclosure and put in an Intel i350 NIC for IDS/IPS.

@moelharrak said in PPPoE Goes Down Frequenctly: what to do Use another non-Realtek NIC or try another driver. -Rico

The team create rules, to Tenable access and execute scanning. But the "external Scan" follow architecture of banking. Not is open for world, is segmented. The Team have fear the application PFSense not work e lost access to server.

@jimp Thank you, i will work on option #2

@fnarq Check if you run block bogons on the interfaces when filter reloads. uncheck them. It destroys the box completely....

That ^. What are you installing on? Exactly what image are you using? Steve

A wise decision.