Was browsing thru redmine just now and noticed #7307.  So it seems this is offically a bug. Not a huge deal, but just wanted to link here in case anyone else stumbles onto it.

Played around with it and eventually got it to boot from memstick, but after intsall it hung at the  Consoles: EFI console. I found a post on the FreeBSD forum which is exactly my problem on the very same hardware.  No answers or workarounds (other than ugly manual process). https://forums.freebsd.org/threads/61243/ and the bug report he posted here: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219957 So to save myself headache's once this is running I'm going to stick with Legacy boot and the fuzzy console. Unless… Someone can help me with the linux commands to set the console to something better. Roveer

Fixed it! Made the following modification: https://doc.pfsense.org/index.php/Boot_Troubleshooting gpart recover da1 gpart set -a active da1 Then changed the boot drive in the bios.

502 bad gateway issue has a separate topic. It appears to be related to something triggering the issue with pfBlocker's DNSBL. To be clear, the issue is still under investigation and I am not pointing fingers at pfBlockerNG. For now, disable DNSBL. Lastly, pfBlockerNG is not installed by default with pfSense as its a community developed package. We love and fully support pfBlockerNG development however it's not maintained by pfSense team. https://forum.pfsense.org/index.php?topic=137103.255

@Modesty: I have exacly same issue. Tried a lot but still no internet. Are there any solution for this? You probably want to start a new thread with a complete description of the problem you are experiencing. This thread referred to a (long resolved) issue with migrating monitoring parameters from apinger to dpinger which affected monitoring only.

I found that I can get to the GUI using http://192.168.2.1/system.php. I went right to System/Update to try to fix the update but it reply's with Retrieving      Unable to check for updates

same here. GRE under ipsec. I setup a cronjob every minute correcting the mtu when needed, my tunnels are up now. I'm running 2.4.2.

@MainSail: No known way for me fix this failed upgrade! FreeBSD showing 11.1 but still showing 2.3.4-Release-P1 as the current version/"up-to-date". I later noticed that all F/W logging had stopped so at that point the only solution was to just reinstall. I had 2.4.0 ready to go on a thumb-drive and then upgraded to 2.4.2 through the console and restored my configuration from backup. All looks fine now and happy with what appears to be a noticeably faster VPN. If someone else have this issue, backup your config and try this - https://forum.pfsense.org/index.php?topic=135582.msg742380#msg742380

Yep you're right - that was indeed one of the problems. fetch -v https://www.google.com resolving server address: www.google.com:443 SSL options: 83004bff Peer verification enabled Using CA cert file: /usr/local/etc/ssl/cert.pem No server SSL certificate fetch: https://www.google.com: Authentication error I thought I had fixed it by SCPing over cert.pem from the source tar.gz and updating the symlinks everywhere, but that wasn't working reliably. Two consecutive fetch commands right after one another would have different results, one would connect over TLS successfully and the second would fail. I think I've messed up horribly somewhere when tweaking the box. Finally gave up and restored factory settings, and everything seems to be good again - was also able to upgrade to 2.4.2 without issues. Thanks Gertjan for all your help.

RTFM https://www.netgate.com/docs/sg-4860/reinstall-pfsense.html

Wanted to finally update this.  Remember this error: Waiting for Internet connection to update pkg metada and finish package reinstallationUpdating pfSense-core repository catalogue… Essentially, it was FreeRadius.  It needed to be re-installed but, with the previous problems I was having, it was not working.  Once I resolved those (i.e. Internet and Internet VPN working), I was able to reinstall this package.  That took care of this. Hopefully, this helps someone dealing with the same/similar situation.

Pretty sure it went well then.. If you really want you could re-install all packages with a 'pkg install -f' or perform a complete reinstall from installation media if you want to be 101% sure.. but seems like way to much work for highly likely no gain..

ZFS snapshots are also usefull, if you do one before you screw up.

Currently I have 2.4.2 installed, i might have had another issue prior. Now i have another issue, basically i'm capped at 100Mbps whereas the DSL service is 250Mbps Up & Down. My NICs are both gigabit so i'm wondering what is causing the loss of performance? Could it be the PCs specs? Duo Core.. Thanks again for all your help :)

@Jordan10: @bimmerdriver: @Jordan10: The pc is running Windows Server 2016, sorry i should of mentioned that before, it also meets all the hardware requirements needed for pfsense apart from the dual nics which is why I've ordered another nic today :) Okay, that's another matter. I'll explain how I have my system set up and you can see if that makes sense for you. My system has 3 nics, wan, lan and other. The wan and lan nics are externally connected to the bridged port on the modem and and a physical ethernet switch, respectively. Internally, they are connected to virtual switches. The lan switch is set to allow the management operating system to share the lan nic. The wan nic is also set to enable source mirroring so I can connect a virtual pc to the switch running wireshark. With this configuration, I can have multiple pfsenses connected to the wan switch and I can even have a completely virtual lan and virtual clients. I can also have physical clients on the physical lan switch. I've been using this configuration for several years and it works well. The "other" nic is connected to a lan port on the modem so I can access the modem GUI from the hyper-v server. (I bumped up the routing metric on this interface so no traffic will exit.) Feel free to ask more questions if you have any. Thanks for the info, so from what you've said wan and lan nics can go to the ethernet ports on my router and i can still let the router handle dhcp and the wan connection? Or do i need to have a physical switch as well in order to do this? Obviously I'll have the wan and lan nics connected to the virtual switches running in hyper-v as well.  New nic is arriving tomorrow so hopefully I'll be able to access the web configurator again at least which is what I'm struggling to do at the moment even with the existing nic i have which is set up with pfsense too  :-\ I attached a picture. Maybe it helps. The AP, along with pcs and other devices are on the lan switch.