All 5 of your questions have been answered in the ticket you opened with the sales department.

Thanks.

Done.  Issued a RMA right away.  Ordered a second SG-2440  for a HA firewall setup when replaced SG-2440 is delivered

Okay, in that case please submit a ticket so our support can take a look. Thank you! https://go.netgate.com/support/login

Hardware Checksum Offloading is enabled by default (box unchecked in the GUI)
Hardware TCP Segmentation Offloading is disabled by default (box checked in the GUI)
Hardware Large Receive Offloading is disabled by default (box checked in the GUI)

Those are the settings you want for a firewall. If you read the help text on the page, and at https://doc.pfsense.org/index.php/Advanced_Setup#Networking then you'll see why.

jimp was asking you to access the console on the SG-1000 and then run those commands.  You seem to have opened a console window on your Mac and run the commands there.

It should do great! Thank you and hope you enjoy your new XG-7100 appliance!

@stephenw10:

Disabling it in OpenVPN or in System > Advanced > Misc?

In the OpenVPN client settings

@stephenw10:

Did you end up using AES-CBC or -GCM?

I can use both in the settings and get full speed (10,5 MB/s) as long as I do NOT enable Hardware Crypto. If I enable it I do not get more the 7 to 8 MB/s

Please have a look at this: https://forum.pfsense.org/index.php?topic=142311.0

Thanks for your response.  This is not good for me.  The device is at a remote site.

Not enough information to work with here however I can confirm there are no issues related to our OVA. This is likely related to configuration or ESXi.

There is no changelog for Netgate Coreboot Upgrade package, the git history is what you are after. Github link below can be slow sometimes due to the size of the repository but it nearly always loads here for me.

Try looking at the history of the Makefile for the port instead: https://github.com/pfsense/FreeBSD-ports/commits/devel/sysutils/pfSense-pkg-Netgate_Coreboot_Upgrade/Makefile

Is this just a numbers matchup??

No, one has nothing to do with other.

h, BTW, the netgate bios update procedure page https://www.netgate.com/docs/pfsense/sg-4860/adi-bios-flash.html still shows version 12,
And the bios page at https://firmware.netgate.com/bios/ does not have the current 01.00.00.17 firmware
If you are not going to keep these pages current…  could someone at least point the owners to the github site for the latest firmware.
https://github.com/ADIEngineering/adi_coreboot_public/tree/master/releases

That's bootable upgrade image, not the same as the package. Always use the package as this method provides the latest BIOS upgrades.

What does the status LED do when you apply power?

I would want to use an SSD if you are caching.

The eMMC on the SG-3100 has a high write cycle life, it's not expected to fail within the life of the device. That's with the usual disk write rates pfSense has. We do not do anything special there to lower writes.

However caching to it will increase disk writes significantly and the write life is finite so it must reduce the lifespan.

If you're using Squid/Squidguard just for filtering sites you set it not to cache which would eliminate the issue.

I would be more worried about using all available disk space with snort and squid installed to be honest. That could easily happen if you enable too many snort signatures or allow squid to log too much.

Steve

Those default limit values in the sensors widget are not really valid for the SG-3100. You can adjust them.

Temperatures in the 65-75C range are completely normal.

Steve

The first place to check would be in the system log covering the period is stopped responding.

Your description sounds like what happens if you exhaust the firewall state table, that would be logged if so.

It could also be a php issue if you are always using the webgui when it fails. That too would be logged.

Steve

Thanks,

I'll do that one night this week and let you know.

Sean