Good Old FW-1541 - Safe To Use?

rcoleman-netgate

https://docs.netgate.com/pfsense/en/latest/install/upgrade-guide-versions.html#upgrading-from-versions-older-than-pfsense-2-4-0

rcoleman-netgate

@nachoguru said in Good Old FW-1541 - Safe To Use?:

How dangerous is it to be using older hardware like this that doesn't get updates any more?

Very. Many many many bugs and vulnerabilities since May 14, 2018. 22 updates since then: https://docs.netgate.com/pfsense/en/latest/releases/versions.html#id22

SteveITS

@nachoguru If you open a ticket with Netgate (which Ryan may answer ) there is a 23.01 installer for the 1541.

Info on how: https://docs.netgate.com/pfsense/en/latest/solutions/xg-1541/reinstall-pfsense.html

2.3.x was the last 32 bit version of pfSense...could your 1541 have 32 bit and thus not see the 64 bit upgrade? In which case reinstalling would get it on the latest.

The hardware itself I don't see as a security issue just the software.

rcoleman-netgate

@steveits The FW-1541 never existed, but the 7541 did and it is not the same as the XG-1541. It is possible the system does not qualify for pfSense Plus: https://docs.netgate.com/pfsense/en/latest/solutions/fw-7541/index.html

SteveITS

@rcoleman-netgate Dang is this another competitor with a similar number... :( "Fool me seven times, shame on you. Fool me eight or more times, shame on me."

Well if not the Netgate hardware, then if it is a 64 bit CPU, OP can install 2.6. If 32 bit, then it's rather old...

nachoguru

Thanks all I will look into these upgrade paths.

Apologies for confusing the model numbers... the older two I'm referring to are actually these FW-7541's:

https://docs.netgate.com/pfsense/en/latest/solutions/fw-7541/index.html

...and we replaced them in production with XG-7100's:

https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100-1u/index.html

So I've been using the FW-7541's in the home lab and just figured I couldn't upgrade them any more.

But this is all BSD-based stuff so it finally occurred to me that there must be a way to get more life out of these, so I thought I'd ask what other people had done, likely many many years ahead of me.

These are built like tanks, so with efficient software, I figure my grandchildren's clone's android caregivers should be able to us them in 2049. :)

SteveITS

@nachoguru said in Good Old FW-1541 - Safe To Use?:

couldn't upgrade them any more

https://docs.netgate.com/pfsense/en/latest/solutions/fw-7541/reinstall-pfsense-ce.html doesn't say it won't work, it just says to use CE. As above if they had 32 bit pfSense then a reinstall is necessary to move to 64 bit.

jimp

The FW-7541 had an Atom D525 CPU which is 64-bit capable. That said, even that CPU was discontinued ~13 years ago so I'm not sure how much I'd trust it.

It may be possible to run the latest CE on there at least, but we haven't tested on those in years so there is no knowing if it will work (and how well it works) without trying.

Some of those older units required some fiddling with gpart to get the USB memsticks to boot and/or the target disk itself post-install, but that's been so long ago it's possible that current versions of FreeBSD work fine on there. Only way to know though, again, is to try.

stephenw10

Yup try 2.6 on there. I bet it will work fine.

Though obviously it's never going to be that fast.

nachoguru

Thanks all, I will give this a go when I get some quality home lab time, hopefully this weekend.