Please submit a ticket to our support and they will help out. You can just link this thread. Thanks!

https://customercare.netgate.com/

@ivor:

We will have exciting update soon for those who wish to upgrade from 2220.

i'd love to hear it!

I had similar issues, the main thing is you need to fix the problem with the web-ui becoming unresponsive.
To prevent this I went from using the resolver to the dns forwarder.
I think the problem was caused by my netgear wifi "router" (used as an AP) flooding the SG-1000 - but moving to use the resolver fixed the issue.
I also stopped using the netgear as a secondary DNS anywhere, not sure which one fixed it - but it's been rock solid for months now.

Power cycling the sg-1000 (or any device) without a proper shutdown can cause filesystem corruption.
I once had (not a netgate device, or a firewall) the apache config in the hosts file!!!!
You maybe able to fix it by booting into single user mode (via the console) and running fsck (three times apparently).
But definitely speak to support as suggested.
Personally I'd save the config (if you can recover it) and re-flash.

As others have suggested, OP should contact our support and we'll get this sorted out.

@gcu_greyarea:

Had the same happen on a 2440. Netgate was so kind to replace the unit, but never received an explanation as to what caused the issue.
My suspicion is C2000 bug, but I could be wrong ….

This sounds familiar to me, didn't we talk about this? If I remember correctly we had a new guy working in warehouse and he closed the ticket after issuing RMA (which is correct step however it also stops notifications in case you reply). That's the feedback I received when I investigated this. But I may be confusing you with someone else, so please pm me your ticket number or email address you used to contact our support and I'll figure this out!

Thanks!

Hello,

Could you share status_output file?

You can get that by browsing to [your_firewall_IP]/status.php.  (For example 192.168.1.1/status.php)

That page can take longer to load than others as it contains a lot of data.  All of that is contained in a single compressed file, status_output.tgz, which is linked at the top of that page.

Nobody can recomend me a product?

Thanks for your input. What I worry about is that the POC was done with JavaScript but that does not mean other vectors are not available.

I do get your point about executables not running on a firewall. Attack vectors are limited. Agreed.

Good to know you contacted our support. Thanks!

Done. :)

Correct, it will be supported.

So – the next thing I'm looking to add now is an external logging setup so that if I have issues, I can get logs about what happened at least.

Any suggestions for this would be welcome.

Please contact our support and reference this thread. https://customercare.netgate.com/

That doesn't sound good, the unit should boot up without issues. Can you please contact our support and reference this thread? You may have to re-install pfSense on the SG-3100. https://customercare.netgate.com/

There's no need for Netgate coreboot update on your system, so it's giving you the generic error / warning.

HA! Sorry to bug you all. I spent some more time in this forum and discovered the Netgate Coreboot Upgrade package. I applied an update and that seems to have done the job. Ping times are find now. VoIP sounds good, too!

regards,
Cybertoy

Bit late but…

The MAC of traffic from the LAN ports will by the LAN interface MAC, mvneta1.

Whilst I think you could technically configure on of the switch ports as a mirror port we don't currently have any way to set the in the GUI.
It is possible to configure a bridge and set a span port to mirror the bridge traffic. That does incur a performance penalty though.

Steve

Derelict,

Again, thank you for responding!  I've decided to forgo the bridging idea.  In my other post, I bring up some questions I have about the way to properly trunk an interface and change it's native VLAN.  Thanks!

I'm running Suricata rulesets on three different VLAN interfaces without any issues. They take about 300 MB of RAM in each process. Running Squid on top of all this is what caused an out of memory condition and hung the device until I rebooted it. It's the Little Router that Could, but not too much.