@stephenw10 sent thanks!

Most of the Checkpoint hardware I've seen are Portwell/Caswell appliances so should run any x86 OS OK. I would expect that work fine as long as it's not locked down in some way. Steve

@beerguzzle said in SG-2100 factory reset does not remove packages: I don't find bugs, they find me. Ha, yup I know that feeling!

@stephenw10 I'm not 'concerned' ... I just aiming for as low power waste as possible. Just min/maxing it. :)

At the downloads page: https://atxfiles.netgate.com/mirror/downloads/

@SteveITS Restoring the backed up config via the GUI did the trick, all the packages are there now Instead of uninstalling the ntopng package, I disabled it in the settings. So with that, I'm crossing my fingers that my SSDs will last longer this time :-o

@viragomann Thanks a lot! I had to reconfigure the LAN and WAN assignements upon reboot, which was not that hard. Then the vlans had to be redirected to the new LAN. And it is working. I do have some questions on the outcome. My LAN interface still does not have an option for 10Gbase-T. It only has autoselect. [image: 1713694838176-bba2ff40-0303-4c87-ac11-ef8923904e2e-image.png] Speeds are definetely better, but far away from 10Gbit/s. Is this normal? Is there any other configuration I have to do to get the right intel driver for the interface in pfsense? I was looking at CPU usage and it goes to about 9%. Once it hit 30% when running iperf3 -P 10. Which resulted in lower speeds in sum :/ I do have a high MTU set on the network adapter of the windows PC I am running as the iperf3 client. And I haven't changed anything regarding that on pfsense. I imagine that could be the reason for not reaching higher speeds. Different MTU settings?! [image: 1713694885581-6e49445c-1414-4657-9c5f-cdde012df3ec-image.png] [image: 1713695067283-c7737fbb-bf5b-4d6b-a4ce-6bb1ec74a570-image.png]

@Cool_Corona just changed those settings, it didnt seem to have any effect

@mikey_s said in Install PFSense on a Sophos SG appliance: Like others on the XG230 Rev2 the LCD works fine, but the buttons are the wrong way round if I recall. The SDEC driver was developed or the firebox hardware so the button order could well be different. It's possible to set the button mapping if you use a custom conf file with LCDproc. You'd probably have to start it outside of the GUI though.

The alternate driver still prevents some issues for some NICs and supports some additional models. The kmod pkg is in our repo now though so you can just install it from the command line directly.

@stephenw10 Yeah agreed and this is a good fix for now. At least I fully know what is going on now as well. It's a bit sloppy for me to go and leave an audio interface enabled. But I figured it didn't matter as PFsense shouldn't load any drivers for the audio interface as far as I know. This problem could come back if the BIOS is ever reset or defaulted for any reason, but I at least will know what to do in that rare event. ASUS consumer motherboards like to mildly overclock some settings by default. This occasionally results in a failed boot and a "hit F1" to load defaults message which would re-enable the audio. I'm not worried about it and it will get fixed in a future update obviously. I already knew what I was getting into building a box on a consumer AMD light gaming motherboard LOL. Incidentally the Realtek NIC is doing great! A little slower than the dual Intel server NIC (as expected) that is also installed. And the Realtek is only going to be used for very rare management of the web interface and SSH. I did put it through a series of long multi-hour high bandwidth testing to see if I could make it fail and it did just fine before taking it out of the routing mix. The install was planned to disable it and install another NIC if it gave any problems. The hit was minimal and could have been far worse! Thanks!!

@Jakub_ Sweet, this is at least a good start, appreciate the follow ups!

@lazyt There are some of them available, but in that price range you will be better of some of the Netgate devices but they will then 100% supported, also 1U is not even given and last but not least you don´t know how fast they are in real. Intel N100, RJ50k, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, Type-C, SIM Slot, TF, 8G RAM, 128G SSD Intel N100 - 370 € on amazon.de miniPC 12th Gen U300E, DDR5 8GB RAM M.2 NVMe 128GB SSD, 2 x 10 Gigabit Ethernet SFP, 4 x i226V 2.5GbE 640 € on Amazon.de miniPC Pentium Gold 7505, RJ50, AES-NI, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, HDMI, DP, 8G RAM, 128G SSD Intel Pentium Gold 7505 - 370 € on Amazon.de miniPC VPN, Router PC, Pentium Gold 8505, RJ50f, AES-NI, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, 8G RAM, 128G SSD Intel Pentium Gold 8505 - 440 € on amazon.de miniPC 13th Gen Firewall Micro Appliance, 2x10G SFP, 6X i226 2.5G LAN Fanless Mini PC Intel i5 1240P, No DDR5 No SSD, 4* USB, HDMI, DP, BIOS, AES-NI VPN Router, WiFi Slot Intel Core i5 - 640 € on Amazon.de miniPC VPN, Router PC, Intel Core I7 1355U, RJ50f, AES-NI, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, 8G RAM, 128G SSD Intel Core i7 - 810 € on Amazon.de miniPC Protectli Vault Pro VP6650-6 Port, Micro Appliance/Mini PC - i5, 2X 10G SFP+ & 4X 2.5G Ports, DDR5 RAM, M.2 NVMe or SATA SSD Storage, AES-NI, 16GB RAM, 250GB SSD Intel Core i7 - 1250 € - 16GB RAM - 250GB SSD miniPC Protectli Vault Pro VP6670-6 Port, Micro Appliance/Mini PC - Intel i7, 2X 10G SFP+ & 4X 2.5G Ports, DDR5 RAM, M.2 NVMe or SATA SSD Storage, AES-NI, 16GB RAM, 250GB SSD Intel Core i7 - 1500 € - 16 GB RAM - 250 GB SSD miniPC Supermicro SuperServer E300-9D-8CN8TP IoT Box 8-Core D-2146NT Intel Xeon-D 2146NT - Supermicro 4 x 1 GB, 2 x GbE, 2 x SFP+ - 2300 € 1,5 U

Correct the 2100 SoC has no thermal sensors pfSense can read. There is no driver that recognises multiple devices like there is in x86. For arm each device has to be specified. The 3100 does have a readable sensor. The SG-1000 did have a sensor we could read but the values from it proved so inconsistent that we did not display it.

One more bit of odd behavior from this card in case anyone has any ideas: When installed in my system, which is a HP slimline desktop S01-PF1013W with a Pentium Gold G6400T, one of the RAM slots is effectively disabled. The system acts as if it has no RAM installed if only that slot is populated and has half the RAM expected available if both are populated. I've seen this once before, with another Dell NIC, that one a Broadcom 5720 dual port 1Gbps NIC with PCIe x1. That time I never figured out that it was the RAM slot that was the culprit so I just moved ahead with a different NIC. It's not a deal breaker as I can live with just 4GB RAM until I scrounge up an 8GB stick. Just wondering if anyone else has seen anything like this before. I never have, except with this system.

@q54e3w Thanks for all the info here, glad to hear it's working well and has been stable. I'm only considering it since I have an 8 gigabit WAN connection now.

SUCESSO! Acabei de seguir os passos recomendados no post do @RobEmery e tive sucesso em meu hardware Dell PowerEdge R630. PERC H330 Mini (Embedded) Firmware Version: 25.5.9.0001 Drive Version: 4.23 HBA mode State: Non-RAID em todos os SSDs Muito obrigado!

@mcarson75 said in i226-V not getting expected speed: However, if I connect to the same server from pfsense I am only getting about 500 megabit: In normal it would make more sense in my eyes, if you connect the sender (server 1) and the receiver (server 2) to the pfSense without any switches between the set up and then you make the test once more again. If you will see then something between 2,3x GBit/s and count the TCP/IP overhead on top you may be ending with nearly 2,5 GBit/s the pfSense were able to route, because it was running pure through the pfSense box.

Hmm, seems like that device might be in some odd mode then. The virtual CD drive function doesn't require any sort of driver. The USB ID implies it should be there but isn't for some reason. I would check it in Windows. If it has some setup utility make sure it hasn't been set with something odd.

There is no thermal sensor on the 1100 SoC that pfSense can read. Steve