Watchguard Firebox M400/M500

stephenw10

If that was my BIOS you wrote onto there I'm pretty sure I enabled it by default since it was not unlocked. Only the defaults were changes.
You can see the est lines in the boot messages if it's not enabled:

est0: <Enhanced SpeedStep Frequency Control> on cpu0
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 1fb100001b00
device_attach: est0 attach returned 6
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 1fb100001b00
device_attach: est1 attach returned 6

That's the standard G1820 in the M400.

caKuma

@stephenw10 yep it's enabled.

stephenw10

Ah well maybe run some tests with and without powerd enabled and see if it makes any difference. Personally I just like seeing it enabled.

Screenshot from 2021-09-01 19-24-27.png

pfsense1921

I have read everysingle post in this thread (and few hundred in the other watchguard thread).

Based upon Sept 2021 dollars, it looks like to get into a M400 + maybe a memory/cpu upgrade at least $300. How does a pfsense/unlocked bios stock M400 compare with the netgate 3100? I only have 4-5 users in the office (plus about 4-5 cell phones connected too) I love the technical modifications of messing with the M400, but seems like the 3100 is more than enough for me.

Please talk me out of the M400 and to just buy the 3100 :) Thanks!

stephenw10

The 3100 is fanless, consumes less power, comes with warranty and is tested on extensively on every pfSense release.

What WAN speed do you have? Might that get an upgrade in the near future?

Steve

johnpoz

@stephenw10 said in Watchguard Firebox M400/M500:

What WAN speed do you have? Might that get an upgrade in the near future?

This is the big question for sure in helping to size netgate appliance - with 4-5 users and their toys (cell phones).. Prob a 2100 would be fine as well?

pfsense1921

I do have 3 Voip devices too. My ISP is only 75 Mbps, my wan is 100Mbps. Sounds like 3100 is plenty. Is the 3100 locked down anywhere? Any proprietary stuff?

stephenw10

At those speeds I would look at the 2100 too. It isn't as fast as the 3100 but is arm64 (the 3100 is 32bit) and has 4GB RAM.
Both are ARM devices which means they only run Plus, you can't run CE on them.

Steve

pfsense1921

I am confident about formatting/bootable cf cards, storing bios/flashing bios, adding ssd drives etc.
Other than the 1-2 hours to setup the M400. What are the downsides of me going with the M400?

halk8888

@pfsense1921 said in Watchguard Firebox M400/M500:

I am confident about formatting/bootable cf cards, storing bios/flashing bios, adding ssd drives etc.
Other than the 1-2 hours to setup the M400. What are the downsides of me going with the M400?

-Power consumption
-Noise
-Heat

johnpoz

@pfsense1921 said in Watchguard Firebox M400/M500:

What are the downsides of me going with the M400?

Its huge compared to a 3100 or 2100 ;) Sucks way more power that is for sure - and take noisy compared to either the 3100 or 2100 which are fanless.

Since the M400 has been eol for quite some time - I doubt there is any sort of warranty, and while you can prob get pfsense to work on - are you sure there not going to be any issues? With netgate your sure it 100% works..

Nor does the m400 support netgate/pfsense in any way shape or form..

stephenw10

@johnpoz said in Watchguard Firebox M400/M500:

I doubt there is any sort of warranty

I guaranty there isn't once you've put pfSense on there.
Of course that's part of the fun....

pfsense1921

Thanks everyone.

What are the benefits of going with the M400?

johnpoz

@pfsense1921 Can not think of 1 to be honest. Other than the tinker factor.. If had it laying around free - ok.. But if yoru going to spend the same amount of money as getting a new netgate appliance anyway.. I would never in a million years go that route.

stephenw10

Yeah, I didn't pay anything like that for the one I have. But I got it for fun. I enjoy poking hardware and finding out how it works.
Comparing it directly with the 3100 I guess; it's rackmount, it's potentially a lot more powerful (it's upgradable), it has SFP ports.
I personally use a 3100 as my edge device. I'll probably be swapping it out for a 6100 soon just because I can.

Steve

chpalmer

@halk8888 said in Watchguard Firebox M400/M500:

-Power consumption
-Noise
-Heat

My m400 (which was a display model I got for free.. so no hours on it when I got it)-

uses less power than any other machine on my network..
is quieter than even my primary switch which has a fan..
generates less heat than any other box on my network.

I like this box because-
I like the inline network interfaces and do use them all.. (I wish the Netgate 7100 had this configuration)
I have a need for the SFP slots.. (although I do wish they were SFP+)
It does full speed of my cable connection without breaking a sweat plus all my VPN's.

YMMV.

:)

dlucas46

Hi all,

I have finally managed to acquire one of these as an eventual upgrade of my XTM5.

Do we have a definitive list of which processors will work correctly without the reboot hang bug?

I would like a Xeon but the ones that I have seen listed as working seem expensive still for such an old processor line.

What would be the recommended i7 or i5 processors?

stephenw10

I'm not aware of a list anywhere, pretty much everything known is in this thread.

Do you actually need something that powerful? The i3-4130 is known to work, it's cheap and it's a significant upgrade over the G1820.

Steve

dlucas46

@stephenw10

Hi,

I could probably use the i3-4130 without problem, this one will be in use on a BT Openreach FTTC 80/20 line so hardly taxed at all. The Xeon L5420 in the XTM5 hardly ever goes above 30%

Just like to put something reasonable in and forget about it rather than upgrading things later.

qetesh

@stephenw10 @Deathwarror @Scorch95 and everyone else with the reboot problem with an i3 CPU: I developed an open source hardware workaround for this! It's basically a microcontroller that checks the state of the power supply and one of the SFP LEDs (since those are lit when it hangs on reboot) and uses the internal power button connector to "manually" reboot the box.
All the details, sources and gerber files for the PCB are available in a post I made on my blog today and I hope it's ok to post the link here: Firebox Rebooter

I have a few of the boards left since I couldn't order less than 5 and I would be happy to give them away to interested people if they pay for shipping (I live in Germany so outside of EU it's probably cheaper to order the boards from a PCB fab yourself)