If this are the same cards as talked about in this thread, they are not running in 2.1.5 and 2.2.2 Link The first or best option you have is to insert this card into the device, do a fresh and full install and see if they got recognized by pfSense 2.2.4 latest stable or 2.2.5 alpha. The second option you have is to insert this cards in the device and you might install FreeBSD 10.1 pfSense since version 2.2.x is based on, and if you get the card working you should try out to copy the .ko module for this card over to the pfSense machine. And if nothing goes for you here are some cheap but Intel based multi LAN Port cards Link If you are aware of this refurbished cards and/or they are not PCI bus based you could at least try out to get your hands on some Soekris NICs! Link

I'm not saying here it has no added value, although VM for FW is very strange to me. Me too, but in some rarely cases, companies or their networks are growing up rapidly so that you are able then to let the Firewall grow up also fast as you might must be doing it. As an example: The Lanner FW-8896 Series is capable to handle many VMs and also sort them with many different LAN Port configurations. Your case Upgrade set ATX Dual PSU Diamond Head 12G6CB or Shasta 12G6S SSD RAM -Working as router with 15 separate networks(multiple will only have a laptop in them for Port NATing based on location) -Allow for 8 or more network ports(will probably vlan the less used ones if needed) ??? I really don´t know why not setting up a switch stack with some Layer3 Switches? Or some little, small or bigger MikroTik routers, for doing this job right.

Bandwidth currently limited to 1 X gbe port on TA334, provider would activate a second gbe port on request. So an Intel Xeon E3-1241v3, 8 GB ECC RAM and a Intel Quad Port card together with a SSD would do the job for you. I am considering asking for fiber split + second ONT or allowed to activate my own ONT using some sort of GPON OLT SFP + PCIe SFP adapter (if possible). Go by a cheap SFP > RJ45 media adapter. Budget $500 pfsense box only. Flexible. Supermicro Board for Xeon E3 Xeon E3-1241v3 8 GB ECC RAM 128 GB SSD Supermicro case and PSU or all assembled together as a Supermicro Superserver ready to go! Would be my personally choice of this setup.

Have you gotten this LCD to work???  I also have one of these LCD screens and haven't got it to work.  If I can't get it work in the next week, I will order a crystalfontz. Thanks!!

@robi: It surely will! Mainly for firewall and adblock. And that board I can only find for like $150 which is 3x more then the Wyse on ebay.

You will not face any problem with your PSU, except perhaps failure if it is very old but this is for sure powerful enough. i3 should handle one or two VPN quite easily ;-) your CPU is already more than enough for what you describe. Then it also depends on additional services you may run. for pfSense used as firewall, CPU will potentially limit network throughput (but you are very far from this  ;D) however if you add services like HTTP proxy, blacklists via Squidguard and anti-virus, Snort and/or stuff like this, this is another story. Then what you describe in term of computer "isolation" might not be directly related to pfSense but more to general network design where pfSense may play its own role. VLAN could be one direction.

The setup APUd4 running iperf 2.0.5.2 squid3 0.3.8 squidGuard 1.9.15 iperf test pfsense as client pc as server pfsense connected to gigabit router pc connected to gigabit router Only using lan nic results [ ID] Interval      Transfer    Bandwidth [  9]  0.0-10.0 sec  593 MBytes  497 Mbits/sec So when I said between 500 to 600 mbits it is really between 450 to 550 mbps. However, this is only using 1 core (50% CPU), need iperf v3 for multi threading testing. Squid cache test A 1GB test file Speed is about 250 mbps using full CPU power So that is about what I get.

You will have more luck with suricata than snort at 10gbps. The former is multithreaded. A Chelsio t420 + an i7 (1550/1551)or equivalent Xeon would do it for you.  Just grab 6-8 gig of ram You could look at some mikrotik switch gear if you are looking to save some $$

Whatever floats your boat.  I'd buy a new NIC.

@jc2it: This topic intrigued me. So I started looking around for options that might be: Fanless Low Power 64-bit Has anyone tried these: Latte 2750 from http://www.cappuccinopc.com/Latte_2750_Mini_itx_Computer_Small_Mini_Server_with_32GB_64GB_RAM_Memory.asp this has 4 nics. Intel NUC http://www.intel.com/content/www/us/en/nuc/nuc-kit-nuc5cpyh.html HP T820 http://www8.hp.com/us/en/thin-clients/t820.html The setup I'm currently building is like this 2 nodes of each: 8core Atom passive cooling (basically a industrial metal case) supermicro board with ipmi, quad gigE Intel 8GB ECC - this can be upgraded 100GB Intel S3700 SSD That's it, no other fancy pieces. The CPUs do AES and have enough cores to maybe even fire up a few jails if that ever becomes a feature. The price was ~$900 each which is pretty OK given it's a server board, good ssd and a "real" case, and all preassembled.

I have download version of pfsens 2.2.2 ISO and my hardware is Is there any reason not to go with the version 2.2.4? Intel Dual core (2.6Ghz) / Intel motherboard 31 PR 4 GB RAM DDR2 Transcend 500 GB Hard Disk From this tech. specs. it should be all ok, but related to the PC BIOS it will not work perhaps. Try to deactivate all things in the BIOS you don´t need really. trying to boot from USB, but not booting into the PC I got black the USB is detected in my Bios, and also tried to install from CD thats also failed anyone can help out this. has failed is not running freezes and stand still All this is not bringing peoples up to help you much. And in my machine I can able to install other OS like Ubuntu, Centos, Windows successfully This operating systems could boot fine on your hardware but FreeBSD or exactly pfSense is not Linux based or Windows related! Am having problem with Pfsense I want to install and learn about pfsense for my new project please consider and help me! So the first thing is to get supported hardware, and then all is running fine for you!

Hello, I would go with an Intel Core i3 (biggest model) or Core i5 (mid ranged model), 4 GB - 8 GB RAM and a SSD. The mini ITX boards often comes only sorted with one PCIe slot, so another form factor should be focused right.

you need two lan ports, so go: http://www.gigabyte.com/products/product-page.aspx?pid=4918#ov use at least 4gb of ram. its so cheap that in your place, i would add 8 and forget about it. 32gb ssd is fine. i have not seen anything below 120 on sale. kingston v300 120 is good enough. case is fine any itx case with a psu will do it you may need to laod windows to update the bios on this board, then format and load pfsense

I use a D-Link DSL-321B ADSL2+ Ethernet Modem which is the Annex B & J version the DSL-320B (Annex A). No problems with bridging at all. There was a security flaw with these devices about half a year ago. Be sure to use the latest firmware!

Depends on what you are plugging into. The i350-T4 is a good Nic Alternatively you could just get a dual port for your wan and a 10gig Nic (secondhand Mellanox or Chelsio for under $50USD) so long as you have a switch with sfp+ 10gig ports

@coachmark2: Thanks for your thoughts. It doesn't HAVE to be Snort if Suricata can do the same job while being multithreaded. :) That being the case, I'd still be going with the setup I mentioned above if I had the funds being that it has 128mb of eDRAM with which you could probably cache your suricata rules ;) I might also consider the new samsung 950 drive on a sled… http://www.samsung.com/global/business/semiconductor/minisite/SSD/global/html/ssd950pro/overview.html The bigger question here is are you shooting for low cost? Also, is this for home or for a business?

For people who want to get their Atheros NIC to work on pfsense 2.2.4 (running FreeBSD 10.1) - here's the link: https://forum.pfsense.org/index.php?topic=78932.msg434620#msg434620 arrmo uploaded a file if_alx.ko which works well!. You can dynamically kldload it to test and add it to loader.conf so its loaded on system startup.

My question is this:  can I trust the Qotom equipment to be relatively risk-free For going this way related to the point of risk freeness you should buy hardware that is really good supported by pfSense or well known supported by pfSense. with regards to potential backdoors etc? How from us should should know this really? Am I just being too paranoid?  Should I just get some standard mini-itx computers for a couple hundred dollars There are many small platforms out there ready to go or self made, likes you want. Qotom Pico this ones? Jetway NF9HG-2930 Intel Celeron Quad Core Fanless PC From the pfSense store a SG-2220 or SG-2240 unit should be also a really nice deal! more and expect them to deal with the size? Which size you mean. Only the OpenVPN and firewall task, this should be done by many computers, but then on top this otion, and this function and this packet and, and, and,….. so on, will only narrowing down the entire speed and throughput!

Are you able to get 1g/1g through the 4860 comfortably? I have ATT Gigapower and Google Fiber coming shortly here and need to start looking to upgrade my firewall. I currently have a 2440 and have read that you can probably only get about 600mb through it. No snort or packages here This depends also on how you will be measuring this throughput, with Iperf from machine to machine through the SG-2440 or SG-4860 or if you check a speed test website! Normally an Intel Core i3 or Core i5 (the biggest ones) will surely be able to push full 1 GBit/s through the WAN Port, but all things, services, installed packets and activated functions are also narrowing down the entire pfSense box and then also on top the throughput! An Intel Celeron G3260T @3,2GHz will be able to push a 1 GBit/s line also if money is rarely!