Successful Install on Watchguard Firebox X700!
-
I just wanted to say thanks to everyone for their work in this thread. I successfully converted an x700 to pfSense using the 2.0 RC version embedded on a 4GB CF card.
The only real problem I had was probably more of a pfSense problem in general. Prior to this install, my office was using a Watchguard x20e as the central firewall (static IP), with five older x5 and x15 firewalls in employee home offices (dynamic IP). This VPN configuration has worked pretty flawlessly for the past 4-5 years, and to Watchguard's credit despite the bad rap they get around here, with very little downtime over that span. When I recently acquired an x700, I discovered this thread and decided to give pfSense a try. My original thinking was to replace the x20e with the pfSense-enabled x700, but that plan failed miserably as I couldn't configure a single tunnel to work properly even after watching the mobile VPN video on pfSense's website, so the office went back to the old x20e because we couldn't afford the downtime. I set up my new pfSense-enabled Watchguard in my home, with VPN to the office's static IP, and that configuration has been very stable in the week that I've had it up.
While I really like pfSense, with its wealth of configuration options - it's definitely a big leap forward versus the old Watchguard mini-appliances that were my only prior experience. However, the inability to more easily ipSec to remote dynamic IP is pretty disappointing considering that it's a pretty common configuration for VPN firewalls and many other firewalls have been offering that functionality for 5-10 years even in consumer grade products. Hopefully, the developers will implement that in a not-too-distant future version.
-
Hi Guys, I have a X1250e and opened it up. I had a thought; could one of these be used to put in a cold swap 2.5" hard drive?
It fits into a PCI slot and allows you to put a laptop HD in.I've put in a PCI NIC I had lying around and it seems like it would fit almsot perfectly! You'd just have to drill a couple of small holes into the mounting bracket so it can be screwed into the Firebox itself.
-
That would work but it's not going to be hot swappable though.
The 1250e has a space for a hard drive caddy already, no?
Steve
Edit: This really belongs in the X-e thread here:
http://forum.pfsense.org/index.php/topic,20095.0.html -
Sorry, didn't mean hot swap, even cold swap would be fine. There's a space for some sort of caddy thoughI don't think a 3.5" HD would fit (and even if it did, where do I get the caddy??), an a 2.5" on its own would just be loose in the case.
By the way, how would you connect a SATA 2.5" laptop to the motherboard, what kind of adapter would be needed?
-
This caddy fits almost perfectly. It fits a 2.5" pata laptop drive.
You would need some sort of adapter to fit a sata drive and it then wouldn't fit in the caddy. They seem to be easily and cheaply availbale though.
It's a shame Watchguard didn't use sata as it's built into the chipset on that board but not implemented.Steve
-
Hi Guys, I have a X1250e and opened it up. I had a thought; could one of these be used to put in a cold swap 2.5" hard drive?
It fits into a PCI slot and allows you to put a laptop HD in.
I've put in a PCI NIC I had lying around and it seems like it would fit almsot perfectly! You'd just have to drill a couple of small holes into the mounting bracket so it can be screwed into the Firebox itself.
Aziz - I was looking at this too…
Been trying to do what you are and you can purchase a 44pin to sata.
My only concern is there is micro-sata and reg-sata and I think this holder is the regular sata.
At least - when I looked at the specs on their website I was trying to see this in the technical data but it was not obvious. The 44pin to sata adapters are out there, you would just need one to fit the height requirement and remove the existing hotswap adapter. I am thinking that the front could be modded to slide in and yes - NO hot swap - but a managable way cold swap.I found another good solution. We are starting to use M-25 INTEL SSD's at work and the INTEL SSD drives arrive with a 2.5 to 3.5 mounting plate that fits right into the existing drive trays on the Watchguards... It slides right in - still have to pull the cover to attach the ribbon cable.
OCZ has one on http://www.amazon.co.uk/OCZ-Mounting-Bracket-Solid-Drives/dp/B002I8MUU0/ref=pd_cp_computers_1 that is similar to the INTEL drive tray and these fit the slot - at least the INTEL drive tray that comes with tne m25SSD does. Works well enough on the x700 but not as slick as the one you found here… And it looks like you have the X-box like Steve... -
As recommended by others in this thread, I put in some 40mm Scythe Mini Kaze fans in the case and a Papst 60mm over the CPU. The problem was that I wasn't really happy with the ventilation on the CPU fan, as the top cover of the x700 sat too flush against the top of the fan. So I decided it was time to do some case modding. First, I used an angle grinder to cut out an area in the top cover just bigger than the CPU fan, then I covered it with a simple case fan screen salvaged from an old Lian Li case. See pics below for final version.
I don't have a temperature meter, so I don't know what effect this had on the overall case cooling, but assume it's pretty good since the hot air off the CPU is being directly expelled from the case.
-
I particularly liked your backdrop of clamps, mallet and chisel! :D
I agree though, the fan runs too close to the case to allow adequate air flow.Steve
-
As recommended by others in this thread, I put in some 40mm Scythe Mini Kaze fans in the case and a Papst 60mm over the CPU.
atxgo - Man - that grinder rocks - I could destroy a few x700's with that puppy… Nice mod! I think yours came out better than what I could do! (WOW) :)
-
Thanks. The grinder with a metal cutting blade sawed through the case top like butter. Once I had the layout marked, it probably took me only about 90 seconds to cut out the entire square. ;D
Here is a closer image of the fan grill. It is made of aluminum, and the circular pattern is embossed, so the whole assembly sticks up maybe 3/16 of an inch off the top of the case. The embossing probably isn't necessary since the fan seems even with the top of the case, but I used it because it was the best solution I had on hand.
If you noticed the black edge around the square cutout, that was where the angle grinder burned the red paint when I was cutting it out. Under normal lighting conditions, it isn't very noticeable, but the light from the camera flash is highlighting it in this picture. If I were setting my x700 in a highly visible location, I probably would have touched it up with some red paint, but I didn't bother because I am mounting the unit in a rack.
-
I've had an x700 running stable for 2-3 months then all of the sudden it started to flake out. At first the backlight on the LCD would say on solid and the power LED would be a very faint orange. Now I get no response from the LCD, the power/arm/disarm LEDs don’t light and the only response I see is the fans spinning. I've tried to pull the CMOS battery out to get the BIOS to reset but still get nothing on serial console. Anything else to try or has the unit faulted at this point?
-
Try re-seating the CPU and the ram. If they work loose then you can get similar symptoms.
Then try using a different power supply that's also a likely suspect.Steve
-
Try re-seating the CPU and the ram. If they work loose then you can get similar symptoms.
Then try using a different power supply that's also a likely suspect.Steve
Thx for the reply, I tried the original memory stick that came with the unit but will try to reseat the CPU when I get home. Do you know of any vendors that just sell the individual PSUs or do those need to be pulled from other Watchguard units?
-
Hmm, I was under the impression that the PSU used a standard ATX connector, as it does in the X-peak and X-e boxes. Now I look at some internal photos I'm not so sure.
Steve
-
Stevew
the x700 has a proprietary PS. It sits on the left side… -cvstealth - Yes, I would reseat the memory but in my opinion your symptoms are pointing at something else like the power supply. Hopefully it will be the PS and not the system board... I have looked online for parts for these units as I have 2 now and have not found anything... You may have to buy again and just keep this one for parts....
http://cgi.ebay.com/Watchguard-Firebox-X700-Security-Firewall-VPN-R6264S-/220793958256?pt=LH_DefaultDomain_0&hash=item3368586f70#ht_1159wt_932H.
-
After some investigation the connector on the cable that connects the PSU and mainboard was charred on the end closest to the PSU. My guess is the PSU is toast and since it's proprietary the unit is now destined as spare parts for someone. As much of a fun project that this was I think I'm going to look to an ALIX board for my next setup.
-
Well that's a sad outcome. :(
It may be possible to recover the PSU. Just because the connector has been damaged doesn't mean the PSU is dead.
The connector, usually just one or two pins, has been damaged because it got hot. It got hot because there was a bad connection between the pins of the plug and socket which meant that all the current had to pass through a small area. As it gets damaged the area of good connection gets smaller which increases the heat and hence the rate of damage. It may be possible to simply clean up the pins, crimp up the socket slightly and re connect it. Obviously it depends of the level of damage. Alternatively you could take the connector off the PSU and solder the cable to directly.Steve
-
After some investigation the connector on the cable that connects the PSU and mainboard was charred on the end closest to the PSU. My guess is the PSU is toast and since it's proprietary the unit is now destined as spare parts for someone. As much of a fun project that this was I think I'm going to look to an ALIX board for my next setup.
bummer…
If you find parts let us know...
H. -
After some investigation the connector on the cable that connects the PSU and mainboard was charred on the end closest to the PSU. My guess is the PSU is toast and since it's proprietary the unit is now destined as spare parts for someone. As much of a fun project that this was I think I'm going to look to an ALIX board for my next setup.
Hi,
I've got an x1000 with a faulty MB (fried RTC it seems) that I'm breaking for spares. You're welcome to the PSU for the cost of postage & packing. Not sure where in the world you are…
StuartW
-
Hi,
I've got an x1000 with a faulty MB (fried RTC it seems) that I'm breaking for spares. You're welcome to the PSU for the cost of postage & packing. Not sure where in the world you are…
StuartWSorry to hear about your faulty unit too but would love to take you up on the offer for the PSU, I'll send you a PM to get everything setup.
