Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Watchguard Firebox M400/M500

    Scheduled Pinned Locked Moved Hardware
    584 Posts 58 Posters 672.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      zanthos
      last edited by

      After a lot of hacking, bricking my M400, re-flashing via SPI, on and on and on, I finaly managed to unlock the BIOS of my M400 by flashing a self-modified BIOS from Lanner. ✌ ✌
      If it is allowed, I can upload it here…
      0_1547128821004_startup.jpg
      0_1547128829914_bios.jpg

      S 1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by stephenw10

        Ooo fun. What mods did you have to do?

        Hmm, I'm pretty sure it's an FW-7585 though. The 7584 has an H81 chipset and the m400 defintely has a C226, like the 7585.

        Z 1 Reply Last reply Reply Quote 0
        • P
          pglover19
          last edited by

          Do you think this modification would work for the M440 model as well? I have 2 of these units that I would love to get pfSense working.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            No, the M440 is completely different. You would need to start out with the UP-2010 BIOS. But as we have found it still won't help you there as the FreeBSD igb driver is, currently, unable to recognise the NIC/PHY combination.

            Steve

            1 Reply Last reply Reply Quote 0
            • Z
              zanthos @stephenw10
              last edited by zanthos

              @stephenw10 said in Watchguard Firebox M400:

              Ooo fun. What mods did you have to do?

              After a lot of trial and error the solution was using UEFI Tool (https://github.com/LongSoft/UEFITool). For whatever reason I had to use an old build which let me replace parts of my file.
              I had to extract the BIOS part from the supplied Lanner BIOS and use this to replace the BIOS part of a backup ROM of my unit.
              0_1547135824191_bios-part-replace.jpg
              Maybe all the flashing (including Intel ME) finally did something else not covered in what i described above. But as I read some helping docs, Intel ME is stored in the BIOS chip which is a Winbond 25W64FV. So completely erasing this chip and reprogramming via SPI with my modified file finally did the trick.

              @stephenw10 said in Watchguard Firebox M400:

              Hmm, I'm pretty sure it's an FW-7585 though. The 7584 has an H81 chipset and the m400 defintely has a C226, like the 7585.

              I have been told by Lanner that the BIOS is exactly the same for both FW 7585 and 7584, even tough they have different chipsets. Probably the C226 is a superset of the H81...
              At least it is recognized in the BIOS:
              0_1547137989494_bios_chipset.jpg

              I 1 Reply Last reply Reply Quote 0
              • I
                iJay-XTM5 @zanthos
                last edited by

                @zanthos
                Does the unlocked bios allow the fans controls to be adjusted?
                I've got the fans dialed down pretty well for now, but still interested to know as I need to move to a Xeon at some point.
                Thanks

                Z 1 Reply Last reply Reply Quote 0
                • Z
                  zanthos
                  last edited by

                  Unlocked BIOS overview:

                  Main:
                  0_1547209413657_01_bios_main.jpg
                  Advanced:
                  0_1547209418589_02_bios_advanced.jpg
                  Advanced - CPU:
                  0_1547209423067_03_bios_advanced_cpu.jpg
                  Advanced - SATA:
                  0_1547209428370_04_bios_advanced_sata.jpg
                  Advanced - USB:
                  0_1547209434380_05_bios_advanced_usb.jpg
                  Advanced - Super IO:
                  0_1547209442229_06_bios_advanced_io.jpg
                  Advanced - H/W Monitor:
                  0_1547209448900_07_bios_advanced_hwmon.jpg
                  Advanced - H/W Monitor - Smart Fan:
                  0_1547209453563_08_bios_advanced_hwmon_smartfan.jpg
                  Advanced - LAN Boot:
                  0_1547209461859_09_bios_advanced_lanboot.jpg
                  Advanced - Serial Console Redirection:
                  0_1547209469490_10_bios_advanced_consoleredir.jpg
                  Chipset:
                  0_1547209475511_11_bios_chipset.jpg
                  Chipset - Power:
                  0_1547209484279_12_bios_chipset_power.jpg
                  Chipset - System Agent:
                  0_1547209490686_13_bios_chipset_systemagent_.jpg
                  Chipset - Memory Configuration:
                  0_1547209498424_14_bios_chipset_memory.jpg
                  Boot:
                  0_1547209504158_15_bios_boot.jpg
                  Security:
                  0_1547209509895_16_bios_security.jpg
                  Exit:
                  0_1547209515153_17_bios_exit.jpg

                  1 Reply Last reply Reply Quote 0
                  • Z
                    zanthos @iJay-XTM5
                    last edited by

                    @ijay-xtm5 said in Watchguard Firebox M400:

                    Does the unlocked bios allow the fans controls to be adjusted?
                    I've got the fans dialed down pretty well for now, but still interested to know as I need to move to a Xeon at some point.
                    Thanks

                    @ijay-xtm5
                    You can switch from Auto to Manual mode and define a value. Haven't played with this one tough...

                    @zanthos said in Watchguard Firebox M400:

                    Advanced - H/W Monitor - Smart Fan:
                    0_1547209453563_08_bios_advanced_hwmon_smartfan.jpg

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Hmm, can you not change the target value in Smart mode?

                      1 Reply Last reply Reply Quote 0
                      • S
                        Scorch95 @zanthos
                        last edited by

                        @zanthos

                        Could you upload the modified bios along with a detailed step by step instruction on how to flash it over?

                        1 Reply Last reply Reply Quote 0
                        • Z
                          zanthos
                          last edited by

                          Hi there

                          Just managed to unlock (hopefully) everything in this BIOS.
                          Speedstep is now working 👏

                          Unfortunately I cannot upload it here. File size limit ☠
                          Also split files (7z and rar) don't work...

                          Maybe @stephenw10 you can alter this setting?

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            It's better to host it somewhere separately and just link to it IMO. That's what I have always done for BIOS images.
                            I can put it with the other images on my Google site if you PM me.

                            Do you believe it's flashable directly? You seemed to imply you had done a number of things there.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • Z
                              zanthos
                              last edited by zanthos

                              DISCLAIMER: I don't take any responsibility if you flash using my files. I won't provide help if you brick your device.
                              (Unbricking is possible using SPI, see below)

                              Here's the BIOS:
                              https://1drv.ms/f/s!AgeHb7hLRzQ-iAw82hEAiVojSDWJ
                              @stephenw10 you may copy those files to your webhost. I cannot provide those files forever.

                              Currently it's my Version 5.
                              There may be things to be enhanced. There may be bugs. Be warned! 👆

                              How to flash:
                              a) SPI:
                              Use your favorite SPI programmer connected to the mainboard.
                              I used this one:
                              https://www.ebay.de/itm/CH341A-Series-Chip-SPI-Flash-USB-Programmer-24-EEPROM-BIOS-Writer-25-Neu/273040494657?hash=item3f927b5041:g:U8oAAOSw3wVaaagG:rk:1:pf:0
                              You will need a programming software. I used "AsProgrammer":
                              https://github.com/nofeletru/UsbAsp-flash/releases/
                              0_1547475755662_spi-flashing.jpg

                              b) Software flashing:
                              Download Rufus here: https://rufus.ie/
                              Create a bootable FreeDOS Stick or CF Card. FreeDOS is embedded in Rufus. So no need to download.
                              Maybe your original M400 will not boot from USB. Then create CompactFlash card.
                              Download "freedos_ext_v5.7z" above and extract it to your just created FreeDOS drive. Overwrite all files!!
                              Maybe you will need to alter "autoexec.bat" to match your keyboard layout. Current setting is German ("keyb gr"). To have US keyboard layout, you will need "keyb us".
                              Connect via Serial to your M400. Use a CISCO style cable. Use 9600 8 N 1. I tried higher speeds, didn't work.
                              I can't help using AFUEFI.exe or AFUDOS.EXE. There are lots of parameters… Maybe someone here knows all the tricks or find help with your favorite Internet search engine.

                              Good luck and please report back!

                              devid79D 2 Replies Last reply Reply Quote 1
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Just to be clear there is real risk doing this. Not until you've felt the regret of your shiny box failing to POST because you updated a firmware to get something you didn't really need in the first place will you understand that! Ask me how I know. 😉

                                If you have an SPI reader then you can be reasonably confident of being able to recover it eventually if anything does go wrong. But if you don't...

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • M
                                  moppa
                                  last edited by moppa

                                  Do we know what the max ram is on this board?

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    The standard Lanner board claims 8GB.

                                    Steve

                                    S 1 Reply Last reply Reply Quote 0
                                    • S
                                      Scorch95 @stephenw10
                                      last edited by

                                      @stephenw10

                                      Do we know if it’s ECC registered or unbuffered?

                                      Z 1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Unbuffered ECC or non-ECC. Again that's just from the fw-7585 manual, I haven't actually tried anything else myself.
                                        The RAM supplied is Unbuffered ECC which means I don't have anything spare lying around to add to it. Not that I need to as 4GB is plenty for most applications, and I only use it for testing.

                                        Steve

                                        1 Reply Last reply Reply Quote 0
                                        • Z
                                          zanthos @Scorch95
                                          last edited by

                                          @scorch95
                                          Registered ECC does not work. At least this one I tried: Samsung 8GB 2Rx4 PC3 10600R (M393B1K70CH0)
                                          0_1547710878565_memory_ecc_test.jpg

                                          .

                                          The supplied memory seems to be ECC unbuffered: Transcend 4G 1Rx8 DDR3 1600 ECC (679323-0288)
                                          0_1547711022069_memory_ecc_supplied.jpg

                                          E Z 2 Replies Last reply Reply Quote 0
                                          • S
                                            Scorch95
                                            last edited by Scorch95

                                            Is there any way to figure out why the system hangs on reboot whereas with the XTM5 it didn't have any problems? I went ahead and did a reinstall on the SSD and it still has the issue. I'm assuming that it has something to do with no longer running from the CF card.

                                            EDIT: By this I mean is there any kind of logs I can pull that I could post here that might be useful in determining the cause and hopefully help find a solution to the issue?

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.