Hardware Available at the pfSense Store

[jimp]

The bundled support is primarily handled via ticket system / e-mail / chat, but may include a phone call initiated by a support representative if circumstances dictate that it's necessary.

[Tiscan]

Hey,

So I am very excited to see the new hardware options on the pfsesne store.

The question I have is with a 1G up and down and a desire to run Suricata which would one be better off with, the SG-2440 or the SG-4860? No VPN traffic at all.

[Guest]

@Tiscan:

Hey,

So I am very excited to see the new hardware options on the pfsesne store.

The question I have is with a 1G up and down and a desire to run Suricata which would one be better off with, the SG-2440 or the SG-4860? No VPN traffic at all.

SG-2440
Dual Core Intel Atom C2358 1.7 GHz, with AES-NI and Intel QuickAssist

SG-4860
Quad Core Intel Atom C2558 2.4 GHz, with AES-NI and Intel QuickAssist

The SG-4860 comes with a higher CPU frequency, more cores and more RAM
so it would be the better appliance.

Overall let us not only taking at the todays CPU performance, but more at QuickAssist.

For some applications with Intel QA using code, it will be changing and one of the common
applications QuickAssist works for at this time is snort, so for those using Rangeley as a UTM
or firewall appliance, it is a major consideration as I see it right. So perhaps you should find out
at next if suricata also benefits from Intel´s QA or not and then what you have to do for activating
in snort for using the Intel QA option to speed up the entire performance.  :o

[Guest]

Intel removed the version of firmware that would accelerate Snort.

Read: don't believe everything you read on the Internet.

The firmware for QAT these days will accelerate crypto and compression.

[Guest]

@Tiscan:

Hey,

So I am very excited to see the new hardware options on the pfsesne store.

The question I have is with a 1G up and down and a desire to run Suricata which would one be better off with, the SG-2440 or the SG-4860? No VPN traffic at all.

You'll want more cores.

Someday I'll turn my attention to Snort/Suricata, DPDK and multi-core regex (probably with AVX/AVX2 acceleration.)

Today is not that day.

[Holysder]

Hi There
Do you have a supplier in China or Hongkong for the PFSense devices that you mention on this forum… if you do, what is that shop name and contact, willing to bought some of it for my network..

Appreciate asap reply...

[ttblum]

OK, the new website is saying that:

'Bundled' and 'Incident' support is for ticketing system/e-mail support, 24 hour response SLA

'Professional Services' is for consulting via telephone, e-mail, etc.

Is this correct?

What is the pricing of Professional Services?

[cmb]

@ttblum:

OK, the new website is saying that:

'Bundled' and 'Incident' support is for ticketing system/e-mail support, 24 hour response SLA

'Professional Services' is for consulting via telephone, e-mail, etc.

Is this correct?

What is the pricing of Professional Services?

Professional services is for more involved projects, usually on a fixed fee basis with a specific scope. It's described in more detail here:
https://portal.pfsense.org/professional-services.php

Cost is dependent on the project, starts with a 2 hour minimum at $250 USD/hour, so $500 minimum. Email professional.services (at) pfsense dot org with the specifics of your project and we'll get you a quote.

[kapara]

Also why are there only rates for vpn without AES-NI?

[ttblum]

I no longer see any devices on http://netgate.com that are labeled 'pfSense Certified Hardware with bundled support'.

I'm assuming ESF has pulled the plug on the Certified Hardware program?

[jimp]

Hardware pre-loaded with pfSense is all listed on the pfSense store now, https://store.pfsense.org/

[ttblum]

OK, thanks.

Are support incidents only supposed to be used with routers from the pfSense store, or can they be used with any hardware meeting FreeBSD requirements?

[jimp]

Support incidents included with purchased hardware can only be used with the hardware that included the incidents. For example if you buy an SG-4860 with two incidents, those two incidents may only be used for the 4860.

If you purchase incidents a la carte, you can use those with anything.

[iorx]

http://store.pfsense.org/SG-4860-1U/

Can figure out the depth of this unit. 19" wide I get. But how deep?

Brgs, ::)

[jdillard]

8.5". It will be on the sites shortly.

[tombell69]

Hello.

I´m new in this of firewalls in-a-box and I find very interesting solutions here @ pfSense site.  I´m evaluating to buy one of your appliances, but there is a question I haven´t found the answer reading throughout your site.

You say that appliances ships with the latest version of pfSense to date. My question is: If I buy one of these appliances, is it possible to update the software on an appliance in the future to a new release of pfsense?

Thank you in advance for your answer.

[jimp]

@tombell69:

You say that appliances ships with the latest version of pfSense to date. My question is: If I buy one of these appliances, is it possible to update the software on an appliance in the future to a new release of pfsense?

Yes, the devices support firmware updates, and we test the updates on the devices we sell first and most thoroughly.

Jim

[tombell69]

Thank you very much Jim for your kind and rapid answer.

Now allow me some more questions:

1. Firmware Upgrade means installing a new version of pfSense the my appliance?

2. Where is the option for doing that?

3. Is the installed memory enough for holding new versions? Isn´t there any memory constrains?

[oppland]

The upgrade process is easy and simple.  pfsense checks to see if there is a newer version, and if there is, it walks you through the easy download and upgrade.


[stephenw10]

@tombell69:

3. Is the installed memory enough for holding new versions? Isn´t there any memory constrains?

pfSense 2.2.4 will run in 256MB (though you can easily run out!), the smallest amount of RAM in any of the current hardware is 2GB.
There is room for future expansion.  ;)

Steve