Netgate SG-2100 pfsense Firewall Hardware Review
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 218,335
ΠΠ΅Π½Ρ ΡΠΎΠΌΡConnecting With Us
---------------------------------------------------
+ Hire Us For A Project: lawrencesystems.com/hire-us/
+ Tom Twitter π¦ / tomlawrencetech
+ Our Web Site www.lawrencesystems.com/
+ Our Forums forums.lawrencesystems.com/
+ Instagram / lawrencesystems
+ Facebook / lawrencesystems
+ GitHub github.com/lawrencesystems/
+ Discord / discord
Lawrence Systems Shirts and Swag
---------------------------------------------------
βΊπ lawrence.video/swag
AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
π www.amazon.com/shop/lawrences...
UniFi Affiliate Link
π store.ui.com?a_aid=LTS
All Of Our Affiliates that help us out and can get you discounts!
π lawrencesystems.com/partners-...
Gear we use on Kit
π kit.co/lawrencesystems
Use OfferCode LTSERVICES to get 5% off your order at
π lawrence.video/techsupplydirect
Digital Ocean Offer Code
π m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
π hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
π www.privateinternetaccess.com...
Patreon
π° / lawrencesystems
www.netgate.com/blog/introduc...
www.netgate.com/solutions/pfs...
www.netgate.com/products/appl...
β±οΈ Timestamps β±οΈ
0:00 SG-2100 Intro
1:46 Netgate pfsense ARM Based Device Lineup 2020
2:02 Netgate pfsense SG-1100 VS SG-3100 vs SG-2100
3:24 Netgate pfsense SG-2100 Mounting
4:08 Netgate pfsense SG-2100 SFP Port & Fiber Hand Off
5:06 Netgate pfsense SG-2100 Power Connector
5:51 Netgate pfsense SG-2100 Specs
6:05 Netgate pfsense SG-2100 Configuring Switch Ports
7:01 Netgate pfsense SG-2100 VPN & Routing Speed Comparison
7:21 Netgate pfsense SG-2100 Cryptochip
9:09 Netgate pfsense SG-2100 Final thoughts
#pfsense #Firewalls
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
At 5:51 I mistakenly said 8GB and meant to say 4GB.
@cooloutac 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
you would think for the price it would be 8gb lol.
@Warrigt 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@3:05
@gjkrisa 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Thanks So is the ram user upgradable? 8 is what I was hopping for and a 1tb hdd for proxy
@agenthusser111 Π ΡΠΊ ΡΠΎΠΌΡ
Do you guys have a promo code to use at netgate when purchasing?
@B1663R 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Tom thanks for all you give to the networking and PFsense community. It is very appreciated.
@haroldfinch1955 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I loved my SG-1100, but you're right about the choking. Mine topped out at 300-400mbps. I've since upgraded to a second hand super micro pfsense server from ebay. Way overkill for my home lab, but with the 6 x 10GB ports, can't complain.
@imjustsaying2695 Π ΡΠΊ ΡΠΎΠΌΡ
Great Video! You mentioned the limitations of the 1100's WAN port but not the WAN specs for the 2100. We Don't want to assume this will handle our 10G ISP handoff. The manufacture site shows (1) 1 GbE (RJ45/SFP combo) which is disappointing not to have at least 2.5G ports for the combo.
@daytontechnician 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Seems like a nice little unit for the price. Great solutions for some of my small business users. Thanks for the review.
@imark7777777 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I love how I literally just got I got my order about a month ago and there's a new product thankfully I'm happy with the ones I got once I get them configured... And the configuration working... Overly complicated? Last week I went to the site and saw that they had the new model in between the two and I went what did I just miss did I get the wrong thing..... I'm upgrading from A system using an Old Dell that I built to Dedicated low-power Hardware I'm excited once I get it working. Oh and PS thanks for the VLAN tutorials!!!!
@gerardlunow567 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Just got my Netgate 2100 for the office and used a Dell 7010 at home with pfSense. Setting it up to seperate IOT, Open VPN and sorts. Excited to go play.
@DonGerico 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Currently have a USG but looking into pfsense. The more videos I watch of yours on the topic, the more I am thinking the 2100 would suit me very well. I currently have 400/400mbps that might be upgraded to 600/600. I am frustrated by what I've seen of the UDM line of products, I really just wanted an updated USG but I think I will bite the bullet and try the netgate - I have limited space and it'll take the place of the USG nicely.
@jimbrent8151 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Yep I bought this based on your other videos... Am setting it up this weekend.
@rfitzgerald2004 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I work for a fibre isp and these will be great for our advanced/business customers. Are the sfps limited to any particular vendor? We use Nokia GPON sfps
@alexeijolkin7851 Π ΡΠΊ ΡΠΎΠΌΡ
I was planning to buy the Unifi UDM Pro, when saw this vid. The SG-2100 seems to be a great product, the only thing I worry about is reliability. A LOT of people complain about the Netgate hardware issues after some time in operation, typically when warranty is out.
@geoff650r 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Sounds like this would be good for 1 gig fiber at home. I WAS going to go with a UDM-Pro and call it a day, but I'm starting to think this is the way.
@miketarbox1190 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I was hoping that you would review this device. The office is looking to me to purchase a new firewall. I was going to go with a Fitlet2, the same as I have at home, but this device is actually cheaper than the fitlet as I configured it.
@brianw.4985 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Thinking of doing this with spectrum. I have a small biz connect with them with a /29 as well.
@propeto13 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I myself am running pfsense on a DELL R210 II. How would you go about testing its routing capabilities/limitations?
@colinthomson5616 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Thanks for the video, could you advise how I integrate the sg-2100 into a small network?
@evolv3r113 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Really love your videos! I hope to see an Untangle/Unfi set-up soon π¬
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Wait....how so you know what videos I'm working on ??? ;)
@evolv3r113 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Lawrence Systems / PC Pickup π»
@---GOD--- 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Hope you could get your hands on the UniFi UXG-Pro (the USG-Pro replacement) and do a comparison with netgate and pfsense. Waiting patiently for that video!
@sitte24 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Well he wouldn't recommend any unifi router anyway because they all suffer from a lack of features
@scottluebke5012 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@sitte24 True. While Iβm a big fan of Unifi products, I really think Unifi routers shouldnβt be compared with firewalls like pfsense, untangle, Sonicwall, etc. Unifi routers are very limited in their feature set. Perfectly fine for some use cases. Pfsense is in a while other league of capabilities.
@UniPer85 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
You've got a great channel with lots of useful information and tutorials. The downside for me is, that you share so much information about so many devices that sometimes I get a little confused. For now I'm looking to upgrade my own network. Still working with a Netgear R7000 (as replacement of my ISP Fritzbox) on a fiber 500/500 connection. I want to get a device to replace my Netgear and act as a router and firewall. But my problem is ... I really don't know what is better for me. I've watched a lot of your videos, I've read tons of reviews and still can't make a solid choice between: - Ubiquiti EdgeRouter 10X - Dreammachine Pro - PFSense (on a Netgate or on my ESXi server) My needs: - Separate networks for my internal network (4 PC's / 1 Server / 1 laptop) / guest network / IOT devices (20+) / TV traffic (3 TV's) - Be able to secure everything and block unwanted connections - Optional: Setup a VPN connection so I'm able to connect to my home network when I'm on a public WiFI I don't trust Can you point me in the right direction here? I really don't know what's best. Besides this..keep doing what you do! Really helpful and interesting..I'm a big fan!
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Go with PFSense, the Ubiquiti / UniFi routing equipment is really not that great for advanced use.
@UniPer85 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS Okay..great! How's the learning curve of a PFSense config? I'm not that experienced with networking but eager to learn. And do I go with a VM with PFSense on it or a Netgate device? And isn't Untangle a good alternative?
@dalsomteam5238 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Good review, but would know what the the speed is when this box is coupled with a VPN service provider like nordVPN or surfshark?
@pabss3193 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Are there any plans to have centralized management for PFsense, yes, there are some third party tools... referring to something sanctioned by them, kind of how WatchGuard or other brands do it
@ehh54 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
there is a ansible module github.com/opoplawski/ansible-pfsense if you want an example i am working on a ansible playbook for my own use github.com/habbis/pfsense_ansible
@dezolorfien 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Tnx for a very nice review
@Nitrious89 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
What are your thoughts for a pfsense box using SG-3100/2100 vs Protectli 4/6 Port vs Building ITX-i3/Zen 3 ? (6 core home server things, suracata/snort openVPN, enough power for the "fun stuff")
@HisLoveArmy 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I was looking on Netgate website and it looks like they only offer software support. Do they do any extended hardware warranty? The Sophos firewalls I purchase include 3 year support which is nice.
@TheGreatWolf13 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Feel like this was a really needed device to fill that gap that existed. Now just need to easily get this in Australia :( Until then i guess I keep running pfsense on old desktops.
@benjaminrathjen152 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Do you have any update if the crypto chip was ever fully implemented. Thank you I really appreciate these tutorials and reviews.
@tedoyle61 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I do appreciate your videos, esp. on pfsense. I just grab a dell sff with a xeon, 8gb of ram, a small ssd and pfsense community edition.
@nazgoh Π ΡΠΊ ΡΠΎΠΌΡ
@tedoyle61, can you share with us the maximum throughput that you get with firewall turn-on for pfSense CE as I have the intention to utilize a mini-pc to run this firewall. I need a 1000 Mbps.
@brockeldridge9877 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
You should review the new Firewalla Gold. Its a new router offering from Firewalla.
@descod5863 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
excellent thank you!
@ASM1981 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Can I use single mode SFP? as this is the one coming to the ONT from the terminal outside ...
@dtkjohnson8461 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I noticed on the Netgate site (I think) that it has a mini PCIe expansion slot for wifi. Does anyone know if Netgate will be offering this with wifi bundled in at some point?
@computeguru3526 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I wish netgate brings ZFS to the arm devices so I don't need to worry about power failure corrupting the OS that's why I went with protectli, i'm deploying them in remote locations so it's an important feature
@DocNo27 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
OpnSense can be installed with ZFS and in general I prefer the UI in OpnSense as well.
@computeguru3526 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@S K I always use a good APC UPS when I can but I don't like one point of failure
@richarddownes7456 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Asking for a friend of course. πππ I live oversea and want to secure my network more. I have a Unifi setup and use to have a USG until it died. One thing I want to do is setup an SSID that is routed through a VPN all the time and one that isn't. You can't do that with Unifi, at least out of the box and I'm not interested in playing with the files. Could I do this with a PFSense box as my firewall for my Unifi system?
@miles5600 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@lawrence systems does the sg-2100 also serve as an ONT?
@NegroRotary 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
/I'm practicing for my CCNA and I have a Cisco 5505 ASA, is negate better than the ASA? can you do a video comparing both? Thank you
@alonzosmith6189 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
When my UDM-PRO crash or I just give up on the Unifi router/firewall. This Netgate SG-2100 will be my choice.
@Bierkameel 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Unifi routers suck, I switched back from an USG Pro to my MikroTik RB3011, love the MikroTik.
@Fiskgjusen 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I was using a UniFi Edgerouter before, but thought it was quite unintuitive to configure. I switched to pfSense running as a virtual machine, and it's simply a joy compared to UniFi. The documentation and community surrounding pfSense is AWESOME.
@jj-icejoe6642 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Fiskgjusen Pfsense in a VM is a big nono
@Fiskgjusen 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@jj-icejoe6642 any particular reason?
@jj-icejoe6642 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Fiskgjusen yes, because when your VM or server are down, you have no more network !
@TSnowy23 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
At 4min 35sec darn, I was hoping to use both SFP & RJ45 to boost speed. My cable box has multiple Ethernet out jacks
@imark7777777 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
FYI the little rubber feet don't stay on. And can anybody give me suggestions on what I'm doing wrong with configuring rules on Bridges? I'm barely getting DHCP I think I'm able to pass traffic on to the local network on the other side not really getting web pages and when I try to use it nothing got an IP address even though some devices did. I have a couple of weird requirements which has me setting these devices up fresh with filtering on bridging both because I think filtering will be easier and I need to bridge some ports and vlans within one box.
@finite934 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
as a home user with 500Mbps synchronous, do I really need to SG-3100 or would this be good enough?
@pipinopal 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Grazie saluti dall'Italia βοΈ
@JuanLopez-db4cc 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Excellent!! Party Time.
@trippyhippydan 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Are you going to, or do you already have a video on how to break apart the LAN so that you can have a second WAN on this device? 4:42
@samiam9059 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I used the SG1100 at home and was shocked at its strength for the little size.
@courierdog1941 4 Π΄Π½Ρ ΡΠΎΠΌΡ
I enjoyed your video on the SG-2100, I have the then Max 32 GB but I think I will increase the Storage. My big issue is it currently will not upgrade to 24.03
@greedyfirstalgorithmlast26 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I thought you were making Guitar Pickups, Oy Vey! I am old and cannot see very good. I also smoke lots of Marihuana to keeo my Blood Pressure normal, without last week it was 210/107 !!! After I reloaded my stash it is down to 118/69. I live in California, and am interested in pfsense Firewall, will it work on Ubuntu Linux ? Does it block Advertizements?
@gokhun 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Can I add m2 ssd if I buy eMMC version? Does the port exist for both versions?
@augurseer 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Ohhhhh that peel
@FullboarCreative 8 ΠΌΡΡΡΡΡΠ² ΡΠΎΠΌΡ
These don't really work with WAN (Internet) connections over 500Mbps. They just can't keep up overly well above that. Read the docs / specs for details. I think they're in need of a hardware refresh on the 2100.
@JC-tt5ip 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Tom, I have an old server that I wanted to integrate PF onto and wanted to get your take on it. Have you used pf for a while outside of the prefab boxes and seen a difference in performance using bigger hardware?
@chipcurrey653 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I had an IT consulting business for about 10 years and my goto was to buy the cheapest used 1U dell server I could find locally, add an intel 2 x 1gbps NIC (because pfsense always seemed to not like broadcom as much) and then install pfsense to an ssd. Never had one fail, stellar performance everywhere, even with 1gbps/1gbps fiber isp connections.
@iancortez1143 Π ΡΠΊ ΡΠΎΠΌΡ
Hi, i have a SG-2100 and I want to setup a dual wan, the documentation from the Netgate is confusing, it only shows VLANS for LAN and not for creating a WAN. Thank you
@edvarim 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I'm wondering how this compares with a chinese box having 7th gen i3, 8 gig of ram and 128 gig ssd and 6 port for the same price?
@danvining2186 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Have you played with Firewalla Gold yet and if so how does it compare to this. Price is similar.
@VisionaryApproach 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Crypto is always inactive by default. Did you try to enable it (System -> Advanced -> Miscellaneos -> Cryptographic & Thermal Hardware)?
@TomZ23 Π ΡΠΊ ΡΠΎΠΌΡ
I have AT&T 1 Gig fiber service. Can I unplug the SFP from my AT&T router and plug it directly into this device? Can this device handle 1Gig up/down?
@IndianaDiy 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
So if I want to replace my old WiFi router can I use the SG2100 with a smart switch and create a fast network? Iβm browsing net, games, streaming media, VoIP, etc. I figured the SG2100 would fit my needs I have a 500 mbps but upgrading to up to 1000 mbps. Looking at Using TL-SG108E for my switch since smaller network mixed wired/WiFi.
@grimer1805 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I want to do the same, could I make my current router an access point for wifi? or would it be better to just buy access points?
@IndianaDiy 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@grimer1805 I was going to make my current router a access point.
@redstrom7454 2 ΠΌΡΡΡΡΡ ΡΠΎΠΌΡ
Sooo.. will this thing choke my speed if i have a 1gb connection from my isp today?
@SB-qm5wg 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Can the SG 1100 vlan trunk on that lan port?
@Dawnseeker2000 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Great channel
@cwarehime 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Hey Tom! That purple/blue cable, where did you get that ?
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
ukposts.info/have/v-deo/pGaif2ashoGdp2Q.html
@jttech44 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Looks like a good option for places that need just a little more grunt than what Ubiquiti offers.
@garyadams7913 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Fills an empty space in the WFH space. One box to configure for lans for work, school and play, Should be a big seller for Netgate.
@sarmadpervez7923 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I clicked the like button right away when u said it
@obwizy 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
for small business how many users can the 2100 support?
@jamesaikens 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Having all of the systems I manage in one cloud-based platform has me spoiled and lazy. Is there a cloud portal where I would be able to see all of the pfsence units I deploy, similar to Peplink, UniFi, or Untangle?
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
No
@jaisonrolling123 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Does it Support the captive portal?
@rlibby404 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Noob here, does anyone know why netgate is soldout/backordered for almost everything on their site? Has it been like this for long? Should I expect to wait a couple weeks for restock or buy something else? I need to get started asap.
@pepeshopping 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Cmon, keep up. The crypto is not enabled yet on any ARM device as they are still developing for the specific modules/hardware of the ARM architecture.
@johns4707 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Can I connect a USB mobile doggie for backup WAN?
@user-cl9iz3wb1u 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
μ νλΈμ μ μ μλ μκ³ λ¦¬μ¦μ΄ λλ₯Ό μ΄κ³³μΌλ‘ μ΄λμλ€.....
@viq234 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Im thinking of building all in one build nas, pfsense and windows vm using unraid. Does pfsense run well in this configuration assuming I have enough hardware resources ?
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I have not use unraid and I prefer hardware firewalls over virtualization as there are less issues.
@imotivate963 Π ΡΠΊ ΡΠΎΠΌΡ
sir, what model of netgate would you recommend for a network with 1500 plus clients?
@LAWRENCESYSTEMS Π ΡΠΊ ΡΠΎΠΌΡ
Depends on the speeds needed but at least the 8200
@agbefii8453 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Can you do a video on how to deploy both firewall and router in one network, and which role will be assigned to the router and the firewall?
@MichaelSmith-fg8xh 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Pfsense has both
@agbefii8453 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@MichaelSmith-fg8xh yes i know, but I am referring to 2 physical devices and the roles that will be assigned each
@TheADiggins 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I thought the SG1100 was ok for 1gb internet ?
@joshuabrixey4679 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I like pfsense but have had issues properly configuring the built-in switch to function as individual ports with these prebuilt systems, any feedback on that?
@rpsmith 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I don't care for that built-in switch crap myself!
@rickh925 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Yeah, the crazy ports and vlan config... I have to look at an existing setup every time to get the order correct. Seems I configure 4-5 and go a few months and forget the tricks. Google usually helps, but looking at another installed switch helps be every time.
@NicolaiSyvertsen 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
It is cheaper for them to use that Marvel switch chip than having 4 independent NICs. At least you can easily do VLANs on them. Remember that this is priced low when factoring in the support for pfsense development that is baked into the price. You pay for the software as well as the hardware. There are alternatives if you are not willing to do that.
@rpsmith 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@NicolaiSyvertsen - I'm not a big fan of paying a premium price for economy hardware. If I need professional help, I'm more than happy to pay for it.
@joshuabrixey4679 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
β@@NicolaiSyvertsen It makes sense at a basic level, but I bought the 1U 7100 version for a business install... Either I really don't understand the way they tied the switch in properly or it is way too hard to configure properly. $1000+ is too much to spend on something with a cheap switch, I would have settled for 4 discrete NICs over what I have, or even just two... I didn't understand that there wasn't properly dedicated NICs until after I bought the thing. It shouldn't really take an hour-long video tutorial to explain the switch configuration...
@RudyAmid 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
So Netgate doesn't offer an appliance with SFP+ support for 2.5GB cable modems?
@LAWRENCESYSTEMS 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
They currently only offer SFP+10GB models, but not on the 2100
@fox2fon 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Hi sir jus wanted to know can we do 2 ISP bonding with the SG-3100?
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Bonding is more of an SDWAN function so it's not that simple
@joellemorris5684 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Hi Tom, I'm comparing Fortigate 40F and Netgate SG-2100. I researched but could not the answer to this question: can the USB port access a 4G modem and be considered as a backup internet connection and there could be bond to WAN1? If this model is not capable of doing this, does Netgate have a model that could do this?
@LAWRENCESYSTEMS 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Never tried to do that, reach out to their sales team about it. When we do fail-over it's always a separate device connected to pfsense.
@joellemorris5684 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS thanks I will do so
@joellemorris5684 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS For information, the sales dpt said that all their appliances could do 4G failover.
@danvining2186 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Have you had a chance to play with Firewallaβs Gold >3gbps firewall, router. Similar price to this.
@LAWRENCESYSTEMS 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
It's a consumer devices that uses a phone app for control and seems very limited when it comes to doing anything more advanced, not something we would use so not something I plan on reviewing.
@ahoeppner 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
As the average home user, seems like a nice upgrade from the 1100 but not necessarily required. Thanks for the review Tom, informative as always!
@zax123 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
So the SG1100 tops out at approx a 400mbps connection. Can the SG2100 handle a 1Gbps fiber-to-the-home connection? How much can it route max? The specs aren't clear on that.
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I discussed speed, VPN, routing abilites and even made a timestamp index mark so viewers could skip right to that. It's even titled "Netgate pfsense SG-2100 VPN & Routing Speed Comparison" I wish UKposts made people watch the video before commenting. π
@zax123 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Lawrence Systems / PC Pickup I actually did watch the entire video first. Iβm confused by the difference between the speed rating for routing and for firewall. Iβm not sure what the difference is exactly. Iβm sorry if I wasnβt clear. I definitely appreciated the video and have even used your companyβs services in the past.
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I was not trying to be offensive, I just spend a lot of time trying do reply to comments as I want to engage with my audience, but SO MAN of the comments are people asking what I covered in the video. "L3 Forwarding VS Firewall" speed is a comparison to it's raw L3 power (not a particularly useful number) and the speed at which it can route while parsing firewall rules (more realistic). Netgate does this test with a lot of rules applied.
@wilsonpe 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Feature for feature, it seems like these are a lot pricier than mikrotik devices? Am I missing something.
@PWingert1966 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Can you talk about how the routers handle the IP6 features? A friend just discovered that his ISP modem has his ip4 firewalled by NAT but the IP6 traffic is wide open. He discovered it when I logged into his computer from my place and took control of it during a skype call! I am going to set him up with an SG-2100 but want to know a bit more about IPv6 features for a home network with a couple of fixed IP servers and NAS Units.
@MichaelSmith-fg8xh 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
The same firewall is in front of both ipv4 and 6 adresses (router and LAN clients) IPv6 can be annoying to set up if your ISP is being a pain (requiring funny special params to get an IPv6 address etc)
@KeithTingle 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
how hot does it run?
@VW_Fan 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Wish these were also a VDSL modem. That way I can keep it all in a single device.
@clockwork666 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
there are vdsl-modems in sfp format ;)
@imark7777777 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Yeah it would be neat somebody made a little module for that. I remember seeing while ago floating around that you could upgrade the modem in some of the older the airport access points for ISDN support and I'm like that's kind of a neat idea. That's one of the reasons I bought my airport was the built-in modem subsequently by the time I got it I no longer had dial-up, although restarting on every configuration change was what brought me to m0n0wall so I wouldn't be with pfSense?
@nhojmedina22 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Hi can you give me tutorial how to make sg-2100 as dual or 3 isp wan. Or convert lan 3 to wan 2 and lan 4 to wan 3. Thanks π
@jeffm2787 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I wish I could trust the specs Netgate shows. Owning an SG-3100 it just has never performed as advertised. The SG-3100 is discontinued for a reason. Hopefully the SG-2100 is not as bad.
@StephenByersJ 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
If my SG-1000 has taught me anything, it's not to expect "future drivers" for the cryto chip to ever be released. That product went through the entire product lifecycle, and it now EOL and the promised driver for the cryto chip was never released. If the SG-2100 doesn't have it enabled now, don't expect it ever will be.
@cooloutac 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Gov't pressure? Sure makes you wonder why so little hardware support practical openvpn. You gotta buy the chinese junk lol or pay ridiculous prices even by commercial standards that noone in their right mind would pay. when it comes to cheap consumer routers the asus ac86u is all there is, but be prepared if you run openvpn on it, the router will die prematurely while you get tons of stability and software errors in the meantime lol.
@mythicalscrub356 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Could this be used as a firewall only (like ids/ips things like that) And plug my Asus router running nordvpn into this device?
@LAWRENCESYSTEMS 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Yes
@mythicalscrub356 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS that's badass thanks for the info
@TheSecurityAgency 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Would you mind explaining why should I pay $299 not to mention $399+β¦. If there is an option to buy a Fanless mini PC, same sized as SG-2100 industrial computer rocking Intel i5 8th gen 16GB RAM 6xLAN Intel NICs able to run any virtualizations you like with PF or OPNsense on top for $299 from AliExpress?
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Because you care about supporting the people who do the development on the pfsense open source product and contribute to the upstream BSD codebase.
@andrescalapt_ 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Ey Tom, make sense have a pfsense then my udm-pro? Will they like each other? :) thks
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
nope
@andrescalapt_ 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS nope for the 1rst or for the 2nd question? or maybe a nope nope ? xDD
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@andrescalapt_ I don't know why you would want to double nat
@andrescalapt_ 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS because I have both, maybe I could use them. I'll stay with UDM Pro then. Thks
@zappatx Π ΡΠΊ ΡΠΎΠΌΡ
Dumb question - but when you say "Logical port" is that the same as LAN port?
@LAWRENCESYSTEMS Π ΡΠΊ ΡΠΎΠΌΡ
Each physical port is a logical is a port that can be assigned an IP or set as WAN
@michaelventarola7100 Π ΡΠΊ ΡΠΎΠΌΡ
Should I purchase this are the Unifi Dream Machine?
@LAWRENCESYSTEMS Π ΡΠΊ ΡΠΎΠΌΡ
ukposts.info/have/v-deo/j4leZmqYo6inpKs.html
@Marshallpuppy 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Do a vacuum cleaner reviews please
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
ukposts.info/have/v-deo/g6qKo6ycm5ufk4k.html
@KameraShy 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Maybe a Flowbee
@BrianThomas 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Wait. What? pfsense on arm? Can I choose my own arm hardware?
@bigchew3149 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
I love Pfsense ran for ever but never could get my plex port & a cuple of game ports open (i ran pfblock & Snort,Watch dog ,Agian the only way i could get plex & my games to work right was to stop useing PfSense And as bad as i hated to i did..I am a avid gamer/tech Enthusiast/Nerd & Love to Tweek & Tinker But like i said i got to have plex working right & im just not smart enough to figure it out ! i have Run Freenas for years also n still do but my main 2 i went to UnRaid...So Much Easier to set up & use Now More Than Ever With that new permissions BS(imho) for the home/average joe they take something good & fix it till it breaks..from a plain home /average home user any way ! ! I Miss the speed so so bad That i had to throw another box together just for freenas an just let my 2 Dual Xeon servers stay on unraid..I Love but so very Slow even with 10gb..
@aajeev 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Whatβs the explanation for recommendation these (even the sg-1100) for your home customers. I get it for small/medium size office. But for the price I donβt see real value for home customers. I started out with pfSense built with an old DELL box then upgraded to using HP620plus. I mean they worked fine and it was fun to do the setup. But due to power consumption I have since went back to a wireless router with pi-hole. I feel that if they want to compete these should be at $50-150 range. What do you tell your home customers why they REALLY need this? I supposed unless the customer has real specific needs. But thatβs not most people. I would like to see these priced lower.
@nhojmedina22 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Tom please help me! i suggest to our company to buy sg-2100 is it compatible to 2 WAN? and How?
@LAWRENCESYSTEMS 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
You can assigned the OPT port to be WAN2
@nhojmedina22 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS there is no OPT port only 1 WAN and 4 LANS
@LAWRENCESYSTEMS 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Sorry, I misread on my phone and thought this was the 3100. Get the 3100 for dual WAN / failover setup.
@nhojmedina22 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
We've bought already sg-2100. So you mean it's not possible for Sg-2100 for dual Wan?
@nhojmedina22 2 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Huhu tom is there any way? I think the only way for me to do is to return this SG-2100 and replace with SG-3100
@henrysosa8565 Π ΡΠΊ ΡΠΎΠΌΡ
How are these things so expensive? There are close to phone prices. Is it because not many company make them so they are able to charge ridiculous prices?
@c1nema1 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Little Typo in the title :o) "NeTgate"
@egomatthisum 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Nice
@lifebarier 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
How well does this run suricata compared to apu2d4 ?
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
Β―\_(γ)_/Β― dunno, I never used an apu2d4
@lifebarier 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
β@@LAWRENCESYSTEMS Oh, strange. That thing used to get recommended Very often. Anyhow, rephrasing my question - would this be able to handle 300/300 internet with suricata on? (apu2d4 cpu goes to 100% even on 100/100)
@LAWRENCESYSTEMS 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@lifebarier Maybe, depends more on the traffic more than the speed.
@lifebarier 3 ΡΠΎΠΊΠΈ ΡΠΎΠΌΡ
@@LAWRENCESYSTEMS Oh, I did not think much about that... When I was testing suricata on apu2d4 I was actually running speedtest net - and cpu goes 100% basically cutting of internet. If I recall correctly torrents did same... Well, this seems more powerful than what I have now. Maybe I should try it...
Lawrence Systems
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 1,1 ΠΌΠ»Π½
Crosstalk Solutions
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 97 ΡΠΈΡ.
ΠΠ²ΡΠΎΠ±Π°ΡΠ΅Π½Π½Ρ Π£ΠΊΡΠ°ΡΠ½Π° | Eurovision Ukraine official
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 667 ΡΠΈΡ.
ΠΠ»Π΅ΠΊΡΠ΅ΠΉ ΠΠ°Π²Π°Π»ΡΠ½ΡΠΉ
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 6 ΠΌΠ»Π½
Oscar's Funny World
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 119 ΠΌΠ»Π½
ΠΠ»Π΅Π± Π Π°Π½Π΄Π°Π»Π°ΠΉΠ½Π΅Π½
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 9 ΠΌΠ»Π½
Lawrence Systems
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 166 ΡΠΈΡ.
Lawrence Systems
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 602 ΡΠΈΡ.
Linus Tech Tips
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 2,4 ΠΌΠ»Π½
Lawrence Systems
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 51 ΡΠΈΡ.
Rocket Tech School
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 347 ΡΠΈΡ.
ΠΠΏΡΠΎΡΠ½ΡΠΉ
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 199 ΡΠΈΡ.
Rocket Tech School
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 347 ΡΠΈΡ.
ΠΠΠΠ’ ΠΠΠΠ’ΠΠΠ’ Π‘Π΅ΡΠ²ΠΈΡ ΠΏΠΎ ΡΠ΅ΠΌΠΎΠ½ΡΡ ΡΠ΅Ρ
Π½ΠΈΠΊΠΈ Π² ΠΠΠ, Π‘ΠΠ
ΠΠ΅ΡΠ΅Π³Π»ΡΠ΄ΡΠ² 34 ΡΠΈΡ.