I'm not aware of any plans to do so at this time. I'll ask.

Steve

yes they are there as an example

You can open a ticket with us at https://go.netgate.com

Nice catch! Hard to imagine what the Anyconnect client needed that would be blocked by such a filter. If it was filtering as expected at least.

Steve

Ticket opened, thank you.

@LamboJ said in Wifi on XG-7100 1U via add-on-card or USB adapater:

But if that's not available, then I'll go with this. Thanks.

No, they definitely ARE available, just not supported. I'm guessing that's what you probably meant...

https://forum.netgate.com/topic/56196/can-i-use-a-wireless-usb-adapter-to-make-pfsense-a-access-point

https://www.reddit.com/r/PFSENSE/comments/75zd8t/usb_wifi_card/

https://linustechtips.com/main/topic/48272-pfsense-wifi-usb/

https://homeservershow.com/forums/topic/6048-help-with-installing-a-usb-wireless-nic-on-a-pfsense-router/

Jeff

Please message our sales team: sales@netgate(dot)com

https://forum.netgate.com/topic/144636/sg-1100-intermittent-reboots

open a ticket with support

It's not like an uncommited change like you might find on a switch. If there is something set that's allowing it to function it would have to have been done manually from the CLI. There's no way for the config to know about that but it seems unlikely unless maybe there was a lot of trouble-shooting on that firewall at some point.
Try running those two commands on the running firewall and compare the output with the non-running device.

Did you open a ticket?

Steve

Ah, nice! 🙄

Glad you got it sorted.

Steve

Unlikely. It's possible to break the ruleset entirely by having shaping that ends up invalid on the interface it's defined on but you would see problems all the time if that were the case.

Steve

@richtemark "Parts left out cost nothing and create no service problems" ~ Bunkie Knudsen, Chevrolet General Manager - 1961

Try to start Suricata from the GUI. If it fails, then click on the LOGS VIEW tab and then select the suricata.log file in the drop-down for which log to view. Read through that log, or post its contents here for assistance. There should be an error in that log file describing the problem. Suricata is pretty good about letting you know what it does not like.

In the rare event that log is totally empty, then the next possibility is that the Suricata installation itself is corrupt or failed to complete. You can either try deleting the package and installing it again (you won't lose your current settings), or you can try this at a shell prompt to be sure Suricata can actually run:

That should print out some version information and exit. If it prints any error message, then you will know what's up. But run this command only after checking the suricata.log file that I mentioned previously.

Yes, that is the PoE injector, it passed data and adds power as you say.

As an access point the UAP-AC-LR is better. It's a dedicated access point. 😉

Steve

https://forum.netgate.com/topic/144636/sg-1100-intermittent-reboots

@ahoeppner said in SG-1100 incorrect date and time:

Guess my only option is to stick with the manually entered time for now.

That was in idea to get you into the ballpark. Being too far off the pool time may result in a no-sync.

You can try to use your local gov's NTP servers as well
time-a-g.nist.gov 129.6.15.28 (Gaithersburg, Maryland)
time-b-g.nist.gov 129.6.15.29
time-c-g.nist.gov 129.6.15.30
time-a-b.nist.gov 132.163.96.1 (Boulder, Colorado)
time-b-b.nist.gov 132.163.96.2
time-c-b.nist.gov 132.163.96.3

AFAIK those are not pools so it makes more sense to use their IPs instead of the IPs of an ntp.org pool.

It's not full line rate unless that is small packets. Mb/sec is pretty meaningless without pps.

At this time we do not recommend using ZFS on eMMC. Though I have run at and had no issues there.

Steve