Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Watchguard Firebox M400/M500

    Scheduled Pinned Locked Moved Hardware
    583 Posts 57 Posters 666.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      You need good single thread performance. I would grab an i3-4130 and try it. They are pretty cheap most places and don't hit the reboot bug. I would expect it to be fine.

      Steve

      N 1 Reply Last reply Reply Quote 0
      • N
        nd-t @stephenw10
        last edited by

        @stephenw10

        Looks like less than $50 on ebay, not bad at all. The host I use has a 2.66Ghz CPU, so hopefully the i3 is enough. I'd still be okay with not using PPPoE, not a huge deal for me.

        Would you also know if controlling fan speed is possible without flashing the BIOS?

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          It is. You can use WGXepc64 to set the minimum fan speed after booting.

          A 1 Reply Last reply Reply Quote 0
          • A
            aasimenator @stephenw10
            last edited by aasimenator

            @stephenw10

            I recently bought a WatchGuard Firebox M400 which has an Intel i3-4130, the system was already pre-configured with pfSense and I didn't have to do any bios hack or installation of pfSense. All I did was reset the pfsense and started configuring it.
            7325aa1d-3863-4a2d-b0ef-d69736b2e03c-image.png
            There are 2 fan's in the system and they are too loud running at 7000 rpm each. I followed the steps to get WGXepc installed on the box, ran the permission chmod 0755 /conf/WGXepc but when running ./WGXepc -f 10 I get Permission denied.
            a1fa1afb-75ca-4114-a64c-8f40c58ed351-image.png
            I have also tried to make WGXepc executable with chmod +x but that doesn't work either
            35df4d74-50dd-466c-bf2e-84f0c6863019-image.png

            I also tried the WGXepc64 you linked about that didn't work either
            f3edd1d9-fdf2-4eb3-8fa1-96d81ace261e-image.png

            permissions:
            d292696d-f2b6-4078-bac0-15d4d4db9bc3-image.png
            I really need to get the fans to slow down so I can use it at my home.
            If you could help me out, it would be greatly appreciated, Also is there anything that monitors the Fan Speed in the GUI?

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              I'll just point out that selling that with pfSense pre-installed is against the license restrictions. Whoever sold that to you has broken the terms.

              I would also recommend re-installing anyway it since you have no idea what might have been modified. You can't be sure it's still secure.

              It looks like is has been flashed with one of the modified BIOSes since we can see that Speedstep is active. That also means powerd is enabled which isn't part of the default install.
              Depending on which BIOS was used that fans may already be set slower or you can enter the BIOS setup and set them.

              You need to use the 64bit version of WGXepc so WGXepc64. pfSense is 64bit only since 2.4.

              You need to set the permissions but chmod 0755 should be sufficient for that.

              Try running it without a switch. it should report the hardware type and program version.

              [2.7.0-DEVELOPMENT][admin@m400-2.stevew.lan]/root: ls -ls WGX*
              28 -rwxr-xr-x  1 root  wheel  27393 Nov 22  2020 WGXepc64
              [2.7.0-DEVELOPMENT][admin@m400-2.stevew.lan]/root: ./WGXepc64
              Found Firebox M400/500
              WGXepc Version 1.6_1 22/11/2020 stephenw10
              WGXepc can accept two arguments:
               -f (CPU fan) will return the current and minimum fan speed or if followed
                  by a number in hex, 00-FF, will set it.
               -f2 (System fan) will return the current and minimum fan speed or if followed
                  by a number in hex, 00-FF, will set it.
               -l (led) will set the arm/disarm led state to the second argument:
                  red, green, red_flash, green_flash, red_flash_fast, green_flash_fast, off
               -b (backlight) will set the lcd backlight to the second argument:
                  on or off. Do not use with LCD driver.
               -t (temperature) shows the current CPU temperature reported by the
                  SuperIO chip. X-e box only.
              Not all functions are supported by all models
              

              Steve

              A 1 Reply Last reply Reply Quote 0
              • A
                aasimenator @stephenw10
                last edited by

                @stephenw10

                Thank you for that, I was able to run WGXepc64 in the /root folder
                originally I had it in /conf folder based on the site hexhound information

                I install a fresh version of pfsense on the device and configure it. I didn't know that it's not allowed to be sold, there are lots of these things being sold on eBay pre-installed with pfsense.

                Can you help me understand the Hex number 00-FF that I need to set, can it be queried to get the current running hex number or rpm of the fan?

                97328859-b925-4f20-a314-be533a06ecc4-image.png

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Yes, it is showing 0xa as the current speed there. Which is odd because that implies 0x0a which is lower than 0x8c, by a lot!

                  I am running:

                  [2.7.0-DEVELOPMENT][admin@m400-2.stevew.lan]/root: ./WGXepc64 -f
                  Found Firebox M400/500
                  Current fanspeed is 22, minimum fanspeed is 1e
                  

                  Steve

                  A 1 Reply Last reply Reply Quote 0
                  • A
                    aasimenator @stephenw10
                    last edited by

                    @stephenw10

                    01c40c01-4b12-4efb-92b6-2ba576efd0f8-image.png

                    The below value was something i was playing around with and not something that it came with
                    1118a1b9-57c0-4b23-89a9-a93caf097102-image.png

                    after taking both screenshots above I change the Smart Fan Configuration to auto
                    now when I run ./WGXepc64 -f it is showing
                    7ef4f8f6-b138-4466-99b9-5c272aa1d916-image.png

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Actually my last values were with my modified BIOS. Since you can access it you must have the Xanthos BIOS.

                      On an unmodified box I have used:

                      [2.7.0-DEVELOPMENT][admin@m400-2.stevew.lan]/root: ./WGXepc64 -f 16
                      Found Firebox M400/500
                      Minimum fanspeed set to 16 at 45°C or less
                      

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • M
                        mithermo1
                        last edited by

                        Can anyone offer some guidance on creating a freedos boot device as the images I've seen posted and linked to this thread I'm unable to create a bootable cf card with freedos on. The m400 just doesnt seem to want to boot freedos. Using the same cf card with pfsense image on it booted no problem and I was able to use that to install pfsense onto an ssd attached.

                        J M 2 Replies Last reply Reply Quote 0
                        • J
                          jutg987654321 @mithermo1
                          last edited by

                          @mithermo1 I had the same problems. The only combo I could get working was with the provided freedos image from this thread and the STOCK CF CARD that came with the watch guard.

                          I had multiple other brands/sizes of CF cards and none would boot on the M400 - but the stock card that was in it would (same image same write method same size card etc...)

                          Check out my post from awhile back in this thread it shows all the combos I tried to boot from.

                          Makes no sense why it did what it did - but I tested and retested (and verified all images worked on other hardware). I also ended up connecting VGA output straight to the motherboard at some point - that helped a bunch with troubleshooting.

                          M 1 Reply Last reply Reply Quote 1
                          • M
                            MH 0 @mithermo1
                            last edited by

                            @mithermo1 I can't say specifically for the M400/M500 but I have had a similar issue with a M570, only pfsense would output to the console enabling me to do an install.

                            My way around this was to install my non-pfsense OS on another machine and config the bootloader to enable serial/tty0 output as well as screen/console output, I then moved the SSD from that machine into the M570 and was able to review the output screens, complete the install and modify IP addresses using the console.

                            I've had VMware ESXi v7 and ProxMox running on the M570 thanks to this method.

                            1 Reply Last reply Reply Quote 0
                            • M
                              mithermo1 @jutg987654321
                              last edited by

                              @jutg987654321 said in Watchguard Firebox M400/M500:

                              @mithermo1 I had the same problems. The only combo I could get working was with the provided freedos image from this thread and the STOCK CF CARD that came with the watch guard.

                              Looks like this was the same issue I had. Used the stock 4GB card that came with it, freedos booted and bios flashed. Thank you.

                              1 Reply Last reply Reply Quote 1
                              • M
                                mithermo1
                                last edited by

                                Is there a setting in the bios that will restore power to the M400 after a power outage? Unless it natively will do this (I am yet to just yank the power from it)

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  It comes up at the last power state in the default BIOS.

                                  M S 2 Replies Last reply Reply Quote 1
                                  • M
                                    mithermo1 @stephenw10
                                    last edited by

                                    @stephenw10 Many thanks.

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      seacombe2379 @stephenw10
                                      last edited by

                                      After been sat on the sidelines and reading through this I'm swaying towards getting a m400, hopefully soon in my village I will have full fttp so 1gb up/down, but before I do is it worth it still today as the this thread has been around a while.

                                      I have a pfsense build on a older gaming pc ( i7 3770k 32gd ram 256gb ssd) but it's in a tower case on top of my x3650 m3 which is impractical and power hungry.

                                      Had pfsense running on a VM but the post time of a server to a bare metal machine is night and day in a family household.

                                      Not shy in tinkering and messing with stuff 🤣 spent a week trying to get pfsense to run on a meru wireless controller for lols only to find out its 32bit CPU and definitely not worth it 🤣.

                                      Any advice or suggestions would be great and thanks in advance

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        It will pass 1Gbps easily enough if that's what you mean. You can replace the CPU with a variety of other 4th gen models for more throughput or less power consumption.

                                        Steve

                                        S 1 Reply Last reply Reply Quote 0
                                        • S
                                          seacombe2379 @stephenw10
                                          last edited by

                                          @stephenw10

                                          Hi Steve, thanks for your input much appreciated, is there any difference between the one with a screen on it or the one with the 2 sfp's?

                                          Cheers Oliver

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            The m400/m500 has no LCD and has two 1G SFP ports. There are many other firebox models of varying age, you'll have to be more specific.

                                            S 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.