Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SG-1000 microFirewall Optical Illusion

    Scheduled Pinned Locked Moved Hardware
    69 Posts 32 Posters 40.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      heper
      last edited by

      most arm devices are usb-slave only (like you cell phone). usb-otg means they can be both slave or master / your average pc can not be a slave, it is always a master ( the terminology is probably wrong, but thats how i perceive the whole OTG thing)

      1 Reply Last reply Reply Quote 0
      • W
        whosmatt
        last edited by

        @sirozha:

        What USB device can I connect to this USB OTG port that I cannot connect to a USB port not labeled OTG on any other computer?

        An example might be connecting it to a regular PC and being able to mount the filesystem, in addition to being able to use the port as a regular USB port; i.e connecting flash storage or something.  I don't know what it's for, really, since there's already a USB console port next to it as far as I can tell.  Maybe for firmware updates or something?

        1 Reply Last reply Reply Quote 0
        • J
          jolebole
          last edited by

          @sirozha:

          This may be an excellent box to run Asterisk on.

          Asterisk already runs great on Raspi3 :)

          1 Reply Last reply Reply Quote 0
          • F
            Finger79
            last edited by

            @jdillard:

            @sirozha:

            Wow. Over 100 Mbps throughput. Released just in time to be obsoleted by the average cable internet bandwidth offering.

            There are plans to improve the bandwidth, but current technical limitations have to be overcome. Gigabit nics are on there for a reason.

            Cool!  I've been craving a portable pfSense firewall/router for traveling.  The SG-1000 will fit the bill if it's beefy enough to install a few packages like pfBlocker.  I'm looking to improve my travel router/firewall/AP setup.  I currently use a Linksys WRT-54GS with dd-WRT for travel.

            1 Reply Last reply Reply Quote 0
            • ForsakedF
              Forsaked
              last edited by

              @stan-qaz:

              The Edge router line is very interesting and may meet the needs of some folks but the gui is sadly lacking and trying to use the command line is very frustrating when you only do it a couple times a year.

              Since Chris switched over to Ubiquiti, i hope he can get involved in the GUI development, to see a better one in the Edge-Line.

              pfSense: 2.4.3

              System: QOTOM-Q355G4
              CPU: Intel Core i5-5250U
              RAM: 8GB SK Hynix DDR3L-1600
              LAN: Intel I211-AT
              SSD: 256GB Lite-On

              1 Reply Last reply Reply Quote 0
              • ?
                Guest
                last edited by

                Asterisk already runs great on Raspi3 :)

                But now you will be also able to install a pfSense on that small SG-1000 and set it up as a small Captive Portal
                into existing networks, also a separate Radius Server is able to set up fast and/or a log server that is secured
                "like" a firewall will be nice to see in many companies to save their log files, also able to think about is you may
                need sometimes a smaller or or little device for doing sniffing or with some network tools measuring from an
                other point in the network likes you PC or laptop so that small SG-1000 is really interesting for many peoples
                as I see it right.

                The Edge router line is very interesting and may meet the needs of some folks but the gui is sadly lacking and trying to use the command line is very frustrating when you only do it a couple times a year.

                they have some nice small to bigger router devices that would be fine rocking together with pfSense in
                my eyes as a firewall only option and for sure it will be also looking likes a real router or firewall.

                Since Chris switched over to Ubiquiti, i hope he can get involved in the GUI development, to see a better one in the Edge-Line.

                Wich Chris was switching over to what? Is Chris Buechler now working at UBNT now? Or do you mean
                he is switching over to that smaller UBNT routers? Would you please so friendly and tell me something about.

                1 Reply Last reply Reply Quote 0
                • B
                  bennyc
                  last edited by

                  @BlueKobold:

                  …

                  Since Chris switched over to Ubiquiti, i hope he can get involved in the GUI development, to see a better one in the Edge-Line.

                  Wich Chris was switching over to what? Is Chris Buechler now working at UBNT now? Or do you mean
                  he is switching over to that smaller UBNT routers? Would you please so friendly and tell me something about.

                  in case you missed this: https://forum.pfsense.org/index.php?topic=114659.0;all

                  4x XG-7100 (2xHA), 1x SG-4860, 1x SG-2100
                  1x PC Engines APU2C4, 1x PC Engines APU1C4

                  1 Reply Last reply Reply Quote 0
                  • I
                    ikkuranus
                    last edited by

                    @sirozha:

                    This may be an excellent box to run Asterisk on.

                    I suppose if you like to edit the config files by hand. I say this because you wont have enough ram to use freepbx without it paging constantly. Actually I'm thinking of the pogoplugs 128MB of ram that's insuffucient so I guess 512 would be enough but it still seems a bit expensive for this purpose. A rpi3 is superior and cheaper. The only advantage this thing has is disk on module which I'm unsure if it's more reliable then flash memory or not.
                    The second nic don't really serve any purpose for asterisk.

                    1 Reply Last reply Reply Quote 0
                    • K
                      kcallis
                      last edited by

                      I just ran across the info on this little device. I am going to assume that it will run the latest, greatest version of pfSense? I have been trying to deal with the limited amount of power that I get from a 30A connection (I live in my travel trailer when I am working contracts). I was thinking about the J19000 because the price was do-able and the power very do-able.

                      In the end, this device might might fit the bill, because I can connect the WAN to my cable modem and the LAN could be connected to my Nighthawk AC1900 since I can create VLAN and connect small switches for very network needs. So I guess this is going to be on the list when the device is available. I guess I would have like to have seen 1 or 2 Gb (because memory is cheap), same with the eMMC. I can pay $27 for a 32Gb, but I am sure that I will do just fine with 512M/4GB.

                      1 Reply Last reply Reply Quote 0
                      • F
                        Finger79
                        last edited by

                        Sorry to ask again, but will the SG-1000 support packages?  Looking for very basic pfBlocker, FreeRADIUS.  Snort/Suricata would be a dream but doubt it.

                        I may have to bump it up to the SG-2220 as a good, portable travel pfSense setup if the SG-1000 isn't beefy enough.  (I'm looking to build a nice solution for when I travel and stay in hotels/conferences/family homes and am currently using a DD-WRT setup, which is wonderful for Wi-Fi/repeating/client/AP but lacks the full UTM setup I can get in pfSense.)

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          yes, it will support some packages. Exactly which ones we have not fully defined yet. Snort/suricata are highly unlikely.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • P
                            pppfsense
                            last edited by

                            Very nice.

                            I'll wait until they get offered without the Gold subscription and under $80.

                            (You can get a mini system with quad core N3150 with dual nics for $170).

                            You need to make money, I know, but the competition is fierce.

                            @NOYB:

                            INTRODUCING THE
                            SG-1000
                            microFirewall

                            https://netgate.com/products/sg-1000.html

                            Optical illusion.

                            1 Reply Last reply Reply Quote 0
                            • KOMK
                              KOM
                              last edited by

                              You can get a mini system with quad core N3150 with dual nics for $170

                              With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?

                              1 Reply Last reply Reply Quote 0
                              • P
                                pppfsense
                                last edited by

                                AsRock is not a flyby company that I know?

                                You should know that most motherboards are made by the same handful of companies, so quality is not really an issue anymore.

                                I am willing to spend $60 more dollars for the memory and the ssd, in a system that will be 4x as powerful.

                                I am all about open/standard components so you can fix/replace them yourself.

                                @KOM:

                                You can get a mini system with quad core N3150 with dual nics for $170

                                With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?

                                1 Reply Last reply Reply Quote 0
                                • W
                                  W4RH34D
                                  last edited by

                                  Cool, I ordered one.

                                  I was wondering when we'd see ASIC stuff in networking gear.

                                  Did you really check your cables?

                                  1 Reply Last reply Reply Quote 0
                                  • R
                                    RangerZ
                                    last edited by

                                    If I were to push a pair of these into service as an OpenVPN client and server, can anyone guess at the throughput, assuming a good connection.

                                    What is the purpose of the sd-card?

                                    1 Reply Last reply Reply Quote 0
                                    • KOMK
                                      KOM
                                      last edited by

                                      What is the purpose of the sd-card?

                                      That's probably the boot drive.

                                      1 Reply Last reply Reply Quote 0
                                      • JKnottJ
                                        JKnott
                                        last edited by

                                        I think they should start an Evangelist program where they give free units to any forum member with more than +4000 posts and +468 karma…

                                        I used to use a 6in4 tunnel, from gogo6 to get IPv6.  They sent me one of their hardware adapters for free, because of all the help I was providing in the forum.  They even wanted me to go to Los Angeles, to make a presentation at an IPv6 conference, but I passed on that.

                                        I never used that adapter though as, at that time, my firewall was openSUSE Linux on which I ran their tunnel software.  They apparently shut down the tunnel shortly after my ISP started offering IPv6 last spring.

                                        PfSense running on Qotom mini PC
                                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                        UniFi AC-Lite access point

                                        I haven't lost my mind. It's around here...somewhere...

                                        1 Reply Last reply Reply Quote 0
                                        • U
                                          uknownme123
                                          last edited by

                                          Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?

                                          I know there was no ARM processor support for pfSense in the past.

                                          1 Reply Last reply Reply Quote 0
                                          • jimpJ
                                            jimp Rebel Alliance Developer Netgate
                                            last edited by

                                            @uknownme123:

                                            Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?

                                            I know there was no ARM processor support for pfSense in the past.

                                            Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.

                                            It only means that this one specific ARM device will work.

                                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                            Need help fast? Netgate Global Support!

                                            Do not Chat/PM for help!

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.