http://lmgtfy.com/?q=pfsense+cellular+package

Thanks for the replies guys… I think I'll go for the sg-2220 and a managed switch. Do you recommend getting additional storage?... It's 50$ for 60GB.

Hi, Please contact our support at https://customercare.netgate.com/ Thanks!

I did a factory reset and used the wizard.  I generally do not like to use the wizard because of how the default gateway is named since I used multi-wan on many setups but since this setup only has 1 wan SG-2220 I just used the wizard. Oh and a suggestion do not delete the LAN interface or you will lock yourself out of the router and have to go in via console!  I felt like an idiot right after doing that!  Should be some kind of warning when doing that as it was very easy to do.  Also the default password would not work after addign the interface back via console.  Again just factory reset and used wizard.

That is also potentially a sign that something has consumed all RAM on the device and is not freeing it up, so be sure to tell the support crew which services you have enabled and which packages you have installed.

@TomT: Thanks.  Can you advise which box will be better for our needs ? The SG-2220 would be better or another option is the i3 version of the Qotom mini pc.  Check out the hardware section on the forum.

You won't be able to use the crypto accelerator until pfSense 2.5 comes out.  Right now, The SG-1000 can do about 10Mbps over VPN, give or take depending on cipher and what other services you have running on the box.

Any good ideas ?  Small PC boxes I could buy? and combine 3 network cards ? It all depends on the Internet connection speed and what and how many packets you have installed on that box! It could be that a smaller variant likes the SG-2440 would do the job also fine, and with more luck a smaller one will do the job too but without installing any packets then on that device. (pure firewall, DHCP, 3 VLANs,….) SG-1000 - up to ~100 MBit/s Internet speed and low VPN & firewall only SG-2220 - up to ~500 MBit/s, Internet speed IPsec & OpenVPNVPN, IDS/IPS SG-2440 - up to ~900 MBit/s Internet speed, VPN, Squid & SquidGuard, pfBlockerNG, IDS/IPS Or a total different way with the R1 from netgate.com

pfSense supports two IDS / IPS packages, Snort and Suricata. These filter network traffic for any malicious activities and available from the pfSense package repository. You can enable also ClamAV with Squid package, however Snort is much more effective.

It is to prevent scratches to that surface during assembly, packing, and shipping.

ADI images are available at https://www.pfsense.org/download/ After your support contract and warranty expires, you lose access to portal.pfsense.org however you can always download the images from our website. Simply select Netgate ADI under architecture.

@vilyallc: Getting an access denied message after I login with the same account that I bought the device with.  Frustrating but I guess I will need to get with NetGate support to find out why my account is messed up. Thanks for the help Yes, please contact our support and they will resolve it ASAP!

@tim.mcmanus: I want to download and archive the SG-2440 disk image because I've deployed two of these devices so far. I was following the instructions on this link:  https://www.netgate.com/docs/sg-2440/reinstall-pfsense.html The first instructions says to "retrieve the appropriate installer image after logging in on the Portal account page under Active Resources…"  I have a Gold Subscription and am using one of the two devices in my office, but I do not have anything listed until the Active Resources section other than my Gold Subscription. Is there anything I need to do to get access to that resource? I bought one of these devices 12/15/16, and had a client purchase theirs last week. Any guidance is greatly appreciated. Log in to portal.pfsense.org and then open the following link to activate support for your appliance https://portal.pfsense.org/members/signup/per-incident-support After that the SG-2440 will be automatically be added to your account with the Gold subscription.

Sorry, no AES-256-CBC numbers.

Follow this guide to connect to the console https://www.netgate.com/docs/sg-4860/connect-to-console.html If you restored the backup from another pfSense router, you likely don't have console selected as a default output (or perhaps at a different baud rate).

Thank you both for the replies, very helpful.

@n3mmr: I'm looking for official numbers for total routing capacity for various HW environments, and how this depends on various settings in ofSendmse. I'm a total newbie, so please be patient. We're a condominium in Stockholm, of 348 users. We share a single delivery of network capacity, currently of 2Gbps, soon to go up to 10Gbps. We'd like to be able to trust that entire cap to be shared in a fair manner, and having that entire capacity available at all times. I e if 20 tenants start a download at the same time, the aggregated speeds should add up to fairly near 2Gbps. So, are there any official numbers for total routing cap? As johnkeates points out, those are the specifications we currently offer. We don't offer more detailed stats on our website because we feel it would not be correct. If you are interested in purchasing our device, our sales and support will ask for more information about the environment in which you intend to deploy our device, your requirements and make a recommendation based on that. Our own Jim Thompson has worked on Network Performance Analysis for FreeBSD along with George Neville-Neil, explaining how benchmarks are hard (unless you're a marketing department). I suggest you check it out https://youtu.be/LE4wMsP7zeA

@mhab12: Looks like 500/500 should be easy for the 4860…just ran this on mine. Client connecting to iperf.he.net, TCP port 5001 TCP window size: 65.0 KByte (default) ------------------------------------------------------------ [  3] local xxx port 35498 connected with 216.218.227.10 port 5001 [ ID] Interval      Transfer    Bandwidth [  3]  0.0-10.0 sec  869 MBytes  729 Mbits/sec Should be a more. Up to a gigabit.

Through the web interface I did update the box to the latest(before getting the numbers in my first post). Never used traffic shapers or limiters on it. Network interfaces showed 1000 full duplex No Ierrs or Oerrs I brought the box into work and did some testing. Speedtest.net shows 120 mbps speedof.me shows 10 mbps testmy.net shows 10 mbps I also tried one of the other SG-1000s we bought for work with the same results for speeds.  My laptop directly behind the work firewall i am able to try the SG-1000s behind i get: speedtest 793, speedof 273, testmy 184 When I put a public IP on it i got 16 mbps for speedof

Yes, when ordering specify what type of plug you need. You can also order the SG-1000 from one of our partners, if you live in EU.