Just got the info! The new BIOS version adds C2000 rev C support and a USB component changed.

Aha, that's interesting that you also have a Netgear in AP mode. When you mentioned it before, I didn't fully understand the resolver/forwarder setup. I've checked mine, and the resolver is turned on though I don't actually use it, since all the devices on my network are using my Pi-hole for DNS, set either manually on each device or via DHCP. I guess it could probably have both the resolver and forwarder completely off. Glad you've found a way around it.

Ok, so I made a bonehead move and realized I was actually into the console on the wrong device (more than one connected to this PC so I can play with them). Anyway, I got into the correct one and re-ran the commands. Same results on the gpart commands. When using dd I was finally rewarded with: [2.4.0-RELEASE][root@pfSense.localdomain]/root: dd if=/dev/zero of=/dev/da0 bs=1m dd: /dev/da0: end of device 3649+0 records in 3648+0 records out 3825205248 bytes transferred in 310.579761 secs (12316338 bytes/sec) [2.4.0-RELEASE][root@pfSense.localdomain]/root: Total ends up pretty close to 4gb. I would say that is a success! Thank you! Adam

TRIM is enabled by default.

The units we have are actually VKT-40Es.  One needed to go from i386 to x64.  Used the USB memstick image and the 'rescue config.xml' option.  Reinstalled to x64 without issue.  Also upgraded the other VKT-40E we have which was already running x64 without issue.

I have turned it off, as I'm not happy with the load staying that high continually. The SG-1000 started off as just a fun toy, but it's reliability and performance have made it a permanent home firewall. But it was interesting that it actually works at all. The SG-3100 looks more fun too.

My internet is working fine on all my workstations. I get the speeds which my ISP promises me (arrount 90Mb/s down & 14Mb/s up). But when I go to my dashboard at the "version" tile, it is indeed very long loading for "obtaining update status" This is sins a few weeks ago, when I made a OpenVPN site-to-side tunnel (to a SG-1000). The tunnel is working perfect. But I had no idea it have so much impact on a update. I think I have a quite simple config: PPPoE (WAN) 4x VLAN a few firewall rules and port forwards This SG-4860 is running as a OpenVPN site-to-site server (for 1 client) and only 2 packages installed: ntopng & netgate_core_boot_upgrade Went maybe something wrong with my VPN tunnel?  

Glad it's all working.

If you have a local backup, yes. If you do not have a local backup, try to get connected to the GUI to use Diagnostics > Backup/Restore, or even scp/ssh on the current system and see if you can download /conf/config.xml from the box

Bill, They have updated the other thread that they are aware and working on a fix. Probably monitor that thread for updates.

@magrw2066: The checksums are the 1st thing faked. How? Checksums on our website?

That's another possibility, thanks.

The link in the first reply contains a link to the blog post which is our official response to the dnsmasq CVE: https://www.netgate.com/blog/no-plan-survives-contact-with-the-internet.html That link contains information on how to upgrade the dnsmasq version in place on 2.3.4-p1 without needing a full firmware upgrade. As for your console, that looks like a faulty cable or connection in some way. Without knowing anything about the hardware or how you are connecting to the console, we can't give you any solid suggestions other than to try a new cable. If you purchased that device from Netgate, contact our support team at https://customercare.netgate.com/ and someone can lead you in the right direction for the console access issue. For factory reset, it has never been intended to be a complete reset in the way you describe. The only way to accomplish that is with a complete reinstall from an installation disk or other installation media.

You can't add a USB serial adapter as a console, at least not that I've ever seen work. The USB device is not present early enough for it to be viable as a console for debugging purposes. It's a path that only leads to anger, heartache, and disappointment. You can turn a cheap rpi or similar into a network/OOB USB serial console mux/server that connects to loads of other USB serial consoles quickly and easily with off the shelf hardware and without modding anything. Just USB hub(s) and such.

Very good point  :)

Glad you fixed it, now maybe you can work on fixing that camera shake  ;D