Thanks much, jimp!

@magrw2066: Hello, I have a sg4860 and I have not been able to bring up webconfigurator. I get to the sg4860 console via 'screen' command from intel nuc/linux. (Does ANY UBUNTU/FEDORA carry minicom/cu/screen WITHOUT apt?) My ISP is ATT but their box mostly supplies WIFI. I have a direct line from att opt port to  the SG4860's wan. BUT the shell shell from sg4860 console says: netstat -rn -4 dest                    gateway 127.0.0.1            link#10          UH    lo0 192.168.1.0/24    link #2          U      igb1 192.168.1.1        link#1            UHS  lo0 192.168.1.240      link#2            UHS  lo0 192.168.1.254      0:8:a2y:z  UHS  igb1 I cannot bring up webconfigurator or ping 192.168.1.254. Note : wan is reported at console as igb1 and lan is reported as igb0 Security: an old zyxel based wifi usb dongle seems to cause crashes of pfsense. you have 192.168.1.0/24 network on WAN so you can not use 192.168.1.0/24 on lan. go command line, change lan network to 192.168.0.0/24 (192.168.0.1 addres on lan interface) apply config. now you will able reach from lan via https://192.168.0.1

I don't know your router model but I'm guessing our SG-4860 won't be bottleneck in your setup :) If your Asus router is too slow you can always install IPsec or OpenVPN clients directly on remote user's devices.

I too was having that problem until I finally figured out to make damn sure that I reboot the unit first and apply the upgrades immediately after completing the reboot.

http://lmgtfy.com/?q=pfsense+cellular+package

Thanks for the replies guys… I think I'll go for the sg-2220 and a managed switch. Do you recommend getting additional storage?... It's 50$ for 60GB.

Hi, Please contact our support at https://customercare.netgate.com/ Thanks!

I did a factory reset and used the wizard.  I generally do not like to use the wizard because of how the default gateway is named since I used multi-wan on many setups but since this setup only has 1 wan SG-2220 I just used the wizard. Oh and a suggestion do not delete the LAN interface or you will lock yourself out of the router and have to go in via console!  I felt like an idiot right after doing that!  Should be some kind of warning when doing that as it was very easy to do.  Also the default password would not work after addign the interface back via console.  Again just factory reset and used wizard.

That is also potentially a sign that something has consumed all RAM on the device and is not freeing it up, so be sure to tell the support crew which services you have enabled and which packages you have installed.

@TomT: Thanks.  Can you advise which box will be better for our needs ? The SG-2220 would be better or another option is the i3 version of the Qotom mini pc.  Check out the hardware section on the forum.

You won't be able to use the crypto accelerator until pfSense 2.5 comes out.  Right now, The SG-1000 can do about 10Mbps over VPN, give or take depending on cipher and what other services you have running on the box.

Any good ideas ?  Small PC boxes I could buy? and combine 3 network cards ? It all depends on the Internet connection speed and what and how many packets you have installed on that box! It could be that a smaller variant likes the SG-2440 would do the job also fine, and with more luck a smaller one will do the job too but without installing any packets then on that device. (pure firewall, DHCP, 3 VLANs,….) SG-1000 - up to ~100 MBit/s Internet speed and low VPN & firewall only SG-2220 - up to ~500 MBit/s, Internet speed IPsec & OpenVPNVPN, IDS/IPS SG-2440 - up to ~900 MBit/s Internet speed, VPN, Squid & SquidGuard, pfBlockerNG, IDS/IPS Or a total different way with the R1 from netgate.com

pfSense supports two IDS / IPS packages, Snort and Suricata. These filter network traffic for any malicious activities and available from the pfSense package repository. You can enable also ClamAV with Squid package, however Snort is much more effective.

It is to prevent scratches to that surface during assembly, packing, and shipping.

ADI images are available at https://www.pfsense.org/download/ After your support contract and warranty expires, you lose access to portal.pfsense.org however you can always download the images from our website. Simply select Netgate ADI under architecture.

@vilyallc: Getting an access denied message after I login with the same account that I bought the device with.  Frustrating but I guess I will need to get with NetGate support to find out why my account is messed up. Thanks for the help Yes, please contact our support and they will resolve it ASAP!

@tim.mcmanus: I want to download and archive the SG-2440 disk image because I've deployed two of these devices so far. I was following the instructions on this link:  https://www.netgate.com/docs/sg-2440/reinstall-pfsense.html The first instructions says to "retrieve the appropriate installer image after logging in on the Portal account page under Active Resources…"  I have a Gold Subscription and am using one of the two devices in my office, but I do not have anything listed until the Active Resources section other than my Gold Subscription. Is there anything I need to do to get access to that resource? I bought one of these devices 12/15/16, and had a client purchase theirs last week. Any guidance is greatly appreciated. Log in to portal.pfsense.org and then open the following link to activate support for your appliance https://portal.pfsense.org/members/signup/per-incident-support After that the SG-2440 will be automatically be added to your account with the Gold subscription.

Sorry, no AES-256-CBC numbers.

Follow this guide to connect to the console https://www.netgate.com/docs/sg-4860/connect-to-console.html If you restored the backup from another pfSense router, you likely don't have console selected as a default output (or perhaps at a different baud rate).

Thank you both for the replies, very helpful.