Netgate image download after Gold subscription expiration



  • Hello,

    I bought a Netgate SG-2440 in 2016. It's running the netgate pfSense version. I think I registered the device on portal.pfsense.org, but I'm not sure.

    Anyway, as I bought the product more than one year ago, my initial subscription expired, and I did not renew it (the device is for my home). Currently I don't have any factory ISO install  backup. I tried to login to portal.pfsense.org in order to donwload it, but I can't.

    Is that related to the initial 1-year period support expiration ?
    If I add/renew a gold subscription, would I be allowed to access the netgate ISO downloads ?
    Or should I have renewed the subscription before expiration ?

    Thank you,
    Frederic



  • i am on the same predicament with my sg2220



  • I too am interested if my SG-1000 will receive updates after my Gold subscription expires in two months.


  • Galactic Empire

    You will receive updates if Gold subscription or warranty expires. I will provide more information once I get response from my superiors.


  • Galactic Empire

    Here's more information. If you had our device registered on our portal and your access has expired, you can get images by purchasing Gold subscription and then contacting us so we can link your device with the new subscription. Ideally, purchase Gold subscription prior the expiration. Hope that clears it up.



  • @revengineer:

    … if my SG-1000 will receive updates after my Gold subscription expires...

    @ivor:

    … you can get images by purchasing Gold subscription ... we can link your device with the new subscription.

    Interesting, because as of today you officially still run a beta version of pfSense on an SG-1000. A final (or first officially released) version 2.4 supporting your ARM platform is still in the works.
    I would have expected to get updates (for SG-1000 and SG-3100) for a year after first release. Everything else would be paying for being a beta tester, wouldn't it?



  • Also, if you need a factory install image and your router it is out of warranty, you will need to pay to get a copy of the install image. This is provided for in the enterprise support subscription, which is unnecessary for home use.



  • @superweasel:

    Also, if you need a factory install image and your router it is out of warranty, you will need to pay to get a copy of the install image. This is provided for in the enterprise support subscription, which is unnecessary for home use.

    so I paid 300 dollars for a product,  downloaded an update from the manufacturer.  it bricked their own device,  I have to pay to get what i originally paid for.

    that is highly unfortunate


  • Banned

    If you are on ARM, you'll apparently have to wait for the 2.4 release. After that, they presumably should be available at https://www.pfsense.org/download/. (If not, I'd never ever buy any ARM-based product from Netgate again.)

    On anything else, download the CE images now from the above link and move on. The "tuning" plus 3 very much useless Azure/EC2 packages simply are not worth paying. And yeah, if you ask me, this HPE-like model is disgusting. Shame on Netgate.


  • LAYER 8 Global Moderator

    Hmmmm…

    So let me get this right... You got a device that shipped with RC software, you got 1 year gold with the purchase.. The gold has now expired and you can not longer get "factory" versions?  When you run update in the device.  Or your saying you can no longer download a factory install image for clean install?  And the 2.4 has not gone too release yet, so when the release comes out you will have to go to CE?  I am curious on this to be sure.. Will have to make sure I download a factory install for the sg-2440, I will look when get to the office but fairly sure its running factory and just updated it through the gui from 2.3.3 to 2.3.4p1..  But if its gold runs out I will not be able to update it to 2.4 factory when it comes out?  Or I will not be able to download a factory install image?

    This does seem a bit odd.. I would think anyone that bought a device that can only run RC/Beta software because of its hardware should be able to get a image when released so they can have a clean image restore available to them.  Even if their gold expired..

    Going forward though.. Lets say when 2.5 or 2.4.X releases if you do not have a support model, be it gold or higher it would be in line that you can not get these "factory" versions.. Many enterprise companies do the same thing.  Riverbed comes to mind off the top of my head.  If you do not have a support contract you can not get copies of the software or new copies, etc.  Cisco is the same way.. If you do not have a support contract you can not access ios versions, etc.

    This is an interesting topic to be sure, as I get ready to go into official hardware for my home setup as well.. And as we start adding more pfsense hardware into the work place.  While we did not see the need to go with full support since well to be honest have been running pfsense for so many years.. Im pretty sure can handle anything we are doing with them ;)  And have no real need for the official support - at such time that it would be needed could always purchase, etc.  But the ability for the devices to update and maintain "factory" images does throw a twist into the mix.

    Is this clearly documented somewhere?

    Off top my head another example is infoblox appliances.. While they have a perpetual license for running.. If you do not have a support contract you can not update the software at all.

    I wouldn't really expect pfsense to provide "factory" versions of software years and years into the future if your not even paying for gold.. But if the min version the hardware can run is 2.4 and it has not released yet.. I would think you should for sure be able to get a copy of that factory software when it does.. That only seems fair..

    Example of this.. So while you can run 2.4 "factory" on your hardware you purchased today.. When 2.5 comes out maybe you would need "support" to be able to move to 2.5 factory - but you could run 2.5 CE on it..  Or you could buy gold, to get the factory version for it..

    But dok has some good points - maybe the difference between factory and CE is not all that much so that maybe it doesn't make budget sense to run the factory if you not up for paying for the support..



  • i purchased the sg2220 from netgate on 5/10/2016.

    two weeks ago i wanted to install 2.4 because i read about the OpenVPN vulnerabilities, (since i use PIA on my device i wanted to upgrade)    in between that time i download RC after RC update.. probably about 10 more updates of 2.4 RC.

    like so many others on friday i downloaded an update and it disabled my device.  it was not pingable or accessible by IP.  i learned quickly how to console into the device with a usb cable, then after a few downloads i finally tried the ADI download here: https://www.pfsense.org/download/    choosing install > netgate ADI > location.    extracted that to a USB thumb drive and wiped my device and installed it back to 2.34.

    after hours of resetting up my device i noticed its now labeled Pfsense community edition when i login to the device by IP.

    is there a difference between what i have and had?    i don't know,  i do know the dashboard is slightly different…

    if i had known i needed to download the original software i would have before.. i just didn't know..    the community version is working and my VPN and portfowarding for my cameras work so i am happy but if there is a difference between them i wish there was a way to get my original version..

    just my thoughts and experience


  • Banned

    @johnpoz:

    Is this clearly documented somewhere?

    Dunno what they are documenting, pretty much every piece of HW they sell is advertised as "security solution unencumbered by traditional annual contracts, licensing fees". That includes the AMR-based SG-3100 where no CE exists anywhere…

    The X86 based HW can use the CE images, or be repurposed for whatever else if needed. These ARM boxes are basically worth a paperweight without the OS.


  • Galactic Empire

    @bcruze:

    @superweasel:

    Also, if you need a factory install image and your router it is out of warranty, you will need to pay to get a copy of the install image. This is provided for in the enterprise support subscription, which is unnecessary for home use.

    so I paid 300 dollars for a product,  downloaded an update from the manufacturer.  it bricked their own device,  I have to pay to get what i originally paid for.

    that is highly unfortunate

    Incorrect, you can download the CE image from pfsense.org/download. Once your access to portal expires you can't download the factory images and you can use CE. Apart from AWS and IPsec wizards, there are no differences in functionality.

    If you downloaded the factory image from portal, you can use it even if the support or subscription has expired.


  • Galactic Empire

    @jahonix:

    @revengineer:

    … if my SG-1000 will receive updates after my Gold subscription expires...

    @ivor:

    … you can get images by purchasing Gold subscription ... we can link your device with the new subscription.

    Interesting, because as of today you officially still run a beta version of pfSense on an SG-1000. A final (or first officially released) version 2.4 supporting your ARM platform is still in the works.
    I would have expected to get updates (for SG-1000 and SG-3100) for a year after first release. Everything else would be paying for being a beta tester, wouldn't it?

    This is a valid point, as 2.4.0-RELAESE will be out soon we will provide the option for our SG-1000 users. I have to check on how exactly will this work.

    e: last I hear the recovery image will exist. Obviously, this is subject to change as 2.4.0-RELEASE is not out yet!


  • Galactic Empire

    @revengineer:

    I too am interested if my SG-1000 will receive updates after my Gold subscription expires in two months.

    Yes, it will. Gold subscription is not required to use your device.


  • Galactic Empire

    @doktornotor:

    @johnpoz:

    Is this clearly documented somewhere?

    Dunno what they are documenting, pretty much every piece of HW they sell is advertised as "security solution unencumbered by traditional annual contracts, licensing fees". That includes the AMR-based SG-3100 where no CE exists anywhere…

    The X86 based HW can use the CE images, or be repurposed for whatever else if needed. These ARM boxes are basically worth a paperweight without the OS.

    They won't be "worth a paperweight" as we're working on a solution in from of recovery installer. More information soon.



  • To give a feedback, I finally renewed my Gold subscription, and I could access to the /firmware/memstick/ directory only a few hours after renewal.
    Right now my account is back to "Access denied", don't know if it's temporary. I will try again later today.


  • Galactic Empire

    @fred7911:

    To give a feedback, I finally renewed my Gold subscription, and I could access to the /firmware/memstick/ directory only a few hours after renewal.
    Right now my account is back to "Access denied", don't know if it's temporary. I will try again later today.

    Can you please PM me your Gold subscription username or email? Thanks!



  • @ivor:

    Here's more information. If you had our device registered on our portal and your access has expired, you can get images by purchasing Gold subscription and then contacting us so we can link your device with the new subscription. Ideally, purchase Gold subscription prior the expiration. Hope that clears it up.

    That's awesome news.
    last time i ask i got info that when my warranty expires i will lost access to factory recovery images, no matter if i prolong Gold subscription.
    In couple months i will test that as my initial Subscription expires soon ;)



  • Out of curiosity- it doesn't seem that these devices are available without pfSense installed like they used to be. Is there still a point in having a factory ADI version and community ADI version vs everyone getting the same?



  • @A.Bursell:

    Out of curiosity- it doesn't seem that these devices are available without pfSense installed like they used to be. Is there still a point in having a factory ADI version and community ADI version vs everyone getting the same?

    Actually, they are still available with CentOS, without the gold support. They just raised the price so they are the same as the ones with it.
    https://store.netgate.com/ADI/RCC-VE-2440.aspx



  • @dotdash:

    @A.Bursell:

    Out of curiosity- it doesn't seem that these devices are available without pfSense installed like they used to be. Is there still a point in having a factory ADI version and community ADI version vs everyone getting the same?

    Actually, they are still available with CentOS, without the gold support. They just raised the price so they are the same as the ones with it.
    https://store.netgate.com/ADI/RCC-VE-2440.aspx

    I stand corrected, though I think the point is still valid. I'm not sure there are many/any people who would buy that version and install pfSense vs those that buy the pfSense version, now that they are the same price. Likewise I would think there are not many/any people that maintain a gold subscription just for access to a factory image vs upgrading a current factory image already installed. So my thinking is that at this point it probably costs more to maintain two versions of ADI image than the benefit.
    Just thinking, no harm intended.
    Adam



  • @ivor:

    @revengineer:

    I too am interested if my SG-1000 will receive updates after my Gold subscription expires in two months.

    Yes, it will. Gold subscription is not required to use your device.

    My Gold subscription expired today, and I no longer have access to the SG-1000 images. This somewhat sucks because the the software for this device is barely out of beta and fixes are still being worked. I understand that I can do incremental updates via the interface but the right thing by netgate to do would have been to allow firmware image access for one year following final release. To be clear, I am not talking about extended access to other Gold subscription features, just the firmware.



  • @doktornotor:

    If you are on ARM, you'll apparently have to wait for the 2.4 release. After that, they presumably should be available at https://www.pfsense.org/download/. (If not, I'd never ever buy any ARM-based product from Netgate again.)

    On anything else, download the CE images now from the above link and move on. The "tuning" plus 3 very much useless Azure/EC2 packages simply are not worth paying. And yeah, if you ask me, this HPE-like model is disgusting. Shame on Netgate.

    I do not see any CE ARM firmware images in the downlink section. Am I looking in the wrong place?


  • Galactic Empire

    @revengineer:

    @ivor:

    @revengineer:

    I too am interested if my SG-1000 will receive updates after my Gold subscription expires in two months.

    Yes, it will. Gold subscription is not required to use your device.

    My Gold subscription expired today, and I no longer have access to the SG-1000 images. This somewhat sucks because the the software for this device is barely out of beta and fixes are still being worked. I understand that I can do incremental updates via the interface but the right thing by netgate to do would have been to allow firmware image access for one year following final release. To be clear, I am not talking about extended access to other Gold subscription features, just the firmware.

    PM me your portal username and we will extend it. We are doing this for all SG-1000 owners.

    I understand that I can do incremental updates via the interface but the right thing by netgate to do would have been to allow firmware image access for one year following final release. To be clear, I am not talking about extended access to other Gold subscription features, just the firmware.

    We are working on exactly that. However due technical issue we are expanding Gold subscriptions until we sort out downloads access from portal.


  • Galactic Empire

    @revengineer:

    @doktornotor:

    If you are on ARM, you'll apparently have to wait for the 2.4 release. After that, they presumably should be available at https://www.pfsense.org/download/. (If not, I'd never ever buy any ARM-based product from Netgate again.)

    On anything else, download the CE images now from the above link and move on. The "tuning" plus 3 very much useless Azure/EC2 packages simply are not worth paying. And yeah, if you ask me, this HPE-like model is disgusting. Shame on Netgate.

    I do not see any CE ARM firmware images in the downlink section. Am I looking in the wrong place?

    That's because the images are specific to our devices, they won't work on other ARM hardware. I replied to you above, please PM me your username. Also please ignore doktornotor's hostility. He's not with us anymore because of attitude like that.



  • @ivor:

    PM me your portal username and we will extend it. We are doing this for all SG-1000 owners.

    PM sent. Thank you!

    We are working on exactly that. However due technical issue we are expanding Gold subscriptions until we sort out downloads access from portal.

    Fantastic, thank you again.


  • Galactic Empire

    Done. :)


Log in to reply