+ Post New Thread
Results 1 to 15 of 15
O/S Deployment Thread, Pfsense help ? in Technical; ...
  1. #1
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Angry Pfsense help ?

    Hey guys this is my first post and not sure if this is in the right section so sorry moderators

    Any ways a week or two again i have come across a watchguard SSL core firewall, and i am in the stage of installing pfsense to my new 4GB CF.

    I ahve been using this guid on how to do this as this is all new to, never used watchguard products before :
    » How to flash pfSense 2.1 to a WatchGuard Firebox x750e / x550e / SSL 500 - HexHound
    >How to install pfsense 2.0 on a Watchguard x750e Core | PracticalKungFu.net

    And have come to a standstill at this part in the guide where i have to flash the firewalls bios, it sates in the guide that my firewall has to match the same bios information as described in the guide. But mine is not the same, here is a image of my bios information:
    putty.PNG

    But is says in the guides that i should have these types of bios

    cap.PNG cap2.PNG

    Is there any custom bios bin files for this bios type as i have a firewall that is useless until i get past this stage ?

    Thanks guy and gals if you try to help me Peace !!

  2. #2

    Join Date
    Oct 2008
    Location
    Lincolnshire
    Posts
    2,247
    Thank Post
    13
    Thanked 231 Times in 220 Posts
    Rep Power
    68
    The person you want is @cjpitserivces he has done a few but one think you should note is that the SSL core is a VPN box rather than a standard firewall, it may make a difference. I've got a x550e or 750 here but no joy with it.

  3. #3
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by MatthewL View Post
    The person you want is @cjpitserivces he has done a few but one think you should note is that the SSL core is a VPN box rather than a standard firewall, it may make a difference. I've got a x550e or 750 here but no joy with it.
    AHH!!! Makes sense now as when i first powered up the device a cf card with a image of citrix receiver was left on all locked down, By the chance would you know where to may be find some form of recovery image to write to the cf so i can at least get some life in to this kit, as i seems a dam shame that a £200+ sit there and do nothing !!

  4. #4

    Join Date
    Jun 2014
    Location
    United States
    Posts
    4
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Quote Originally Posted by MatthewL View Post
    The person you want is @cjpitserivces he has done a few but one think you should note is that the SSL core is a VPN box rather than a standard firewall, it may make a difference. I've got a x550e or 750 here but no joy with it.
    The SSL500 & x550e/x750e/x1250e are all the same hardware. I wrote the HexHound article and while the screenshots are from an SSL500, I also have a x750e. That said, your BIOS does look different and I would proceed with a extreme caution. Unless you find someone that has the same BIOS as you, and flashed with success, I would suggest using a PCI-e video card and entering the BIOS that way. The BIOS flash is only necessary to redirect BIOS output through the null modem at boot. If you can change the settings blind or use a video card, it will work perfectly fine. IIRC, a VGA header is also on the board but it's an oddball size. Nevertheless, it's another option if you want to go that route.
    Quote Originally Posted by Slipknot1995 View Post
    AHH!!! Makes sense now as when i first powered up the device a cf card with a image of citrix receiver was left on all locked down, By the chance would you know where to may be find some form of recovery image to write to the cf so i can at least get some life in to this kit, as i seems a dam shame that a £200+ sit there and do nothing !!
    PM me with your e-mail address. I have a dump of the factory image I can send you (but I have to find it!)

  5. Thanks to Cyrix2k from:

    Slipknot1995 (3rd June 2014)

  6. #5
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,504
    Thank Post
    519
    Thanked 292 Times in 268 Posts
    Rep Power
    83
    Best thing to do is load monowall onto the CF card and see if it will boot into that - Only certain models of the SSL Watchguards will work on pfsense because of the interfaces and the BIOS. If your not having any luck try monowall (m0n0wall) and see if that boots - if it doesn't chances are it wont work on that box.

  7. Thanks to cpjitservices from:

    Slipknot1995 (3rd June 2014)

  8. #6
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by cpjitservices View Post
    Best thing to do is load monowall onto the CF card and see if it will boot into that - Only certain models of the SSL Watchguards will work on pfsense because of the interfaces and the BIOS. If your not having any luck try monowall (m0n0wall) and see if that boots - if it doesn't chances are it wont work on that box.
    Yeah seems a food idea I was looking at it last night, oh and btw I forgot to mention that my model came with a 40gb hard drive installed ?

    Am guessing it was used for logs and files to be stored onit but could I take advantage of that drive and use the cf card as some form of boot loader and install the software to the 40gb drive ? But the only thing I could think of that might be stopping me form doing that may be the bios. As I will have to set the 40gb drive as the 1st IDE boot drive instead of the cf card

  9. #7
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Cyrix2k View Post
    The SSL500 & x550e/x750e/x1250e are all the same hardware. I wrote the HexHound article and while the screenshots are from an SSL500, I also have a x750e. That said, your BIOS does look different and I would proceed with a extreme caution. Unless you find someone that has the same BIOS as you, and flashed with success, I would suggest using a PCI-e video card and entering the BIOS that way. The BIOS flash is only necessary to redirect BIOS output through the null modem at boot. If you can change the settings blind or use a video card, it will work perfectly fine. IIRC, a VGA header is also on the board but it's an oddball size. Nevertheless, it's another option if you want to go that route.
    Thanks for that !! Hmmm would like to go down the pci-e route but one issues, I have popped the cover off the device and it only has a standard pci connector ?

  10. #8
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,504
    Thank Post
    519
    Thanked 292 Times in 268 Posts
    Rep Power
    83
    If I where you, id not bother with the CF - pull the HD out and install PFsense on it or even monowall and see if it boots it. Turn the box on with HD instaled with pfsense and give it 5 or 10 minutes to boot and do it's first install - make sure you use the EMBEDDED version of pfsense

  11. #9

    Join Date
    Jun 2014
    Location
    United States
    Posts
    4
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Quote Originally Posted by Slipknot1995 View Post
    Thanks for that !! Hmmm would like to go down the pci-e route but one issues, I have popped the cover off the device and it only has a standard pci connector ?
    I looked up the SSL Core and between the specs and your description, I think it's based on the older firebox hardware whereas the SSL 100 & SSL 500 are x-core-e hardware. It's a very good thing you didn't flash the x-core-e BIOS because it would have bricked it. Try following a guide for the X500/X700/X1000/X2500 fireboxes instead. Those older models do not need their BIOS flashed at all, you should be able to write the pfSense image to your 4 gb CF card, pop it in, and go. Be aware that the SSL Core only has 10/100 ports which will quickly become a bottleneck if your internet service exceeds 100mbit/s, or if you route between gigabit networks.

  12. #10
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by cpjitservices View Post
    If I where you, id not bother with the CF - pull the HD out and install PFsense on it or even monowall and see if it boots it. Turn the box on with HD instaled with pfsense and give it 5 or 10 minutes to boot and do it's first install - make sure you use the EMBEDDED version of pfsense
    Thanks ! Yeah I shall try this when I get the time, so could I do the configuration as I would do with a cf card just dump the files to the hard drive and boot from there ? As well would a NTFS file system format for the hard drive ?

  13. #11
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Cyrix2k View Post
    I looked up the SSL Core and between the specs and your description, I think it's based on the older firebox hardware whereas the SSL 100 & SSL 500 are x-core-e hardware. It's a very good thing you didn't flash the x-core-e BIOS because it would have bricked it. Try following a guide for the X500/X700/X1000/X2500 fireboxes instead. Those older models do not need their BIOS flashed at all, you should be able to write the pfSense image to your 4 gb CF card, pop it in, and go. Be aware that the SSL Core only has 10/100 ports which will quickly become a bottleneck if your internet service exceeds 100mbit/s, or if you route between gigabit networks.
    The speed shall not be a issues as I am only giving my home network a little more of a security boost, my plan will be from my VDSL modem WAN port 1 connect to the external port on the watch guard device, I can provide you with a image of the device it self if that help you

  14. #12

    Join Date
    Jun 2014
    Location
    United States
    Posts
    4
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Download this https://www.pfsense.org/download/dow...nanobsd.img.gz Verify the MD5 checksum is 41a480f7763bdd41c323b649e7669021

    Then use Win32 Disk Imager to write it to your 4gb CF card, pop it into your SSL Core, and it *should* boot into pfSense.

  15. #13
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Cyrix2k View Post
    Download this https://www.pfsense.org/download/dow...nanobsd.img.gz Verify the MD5 checksum is 41a480f7763bdd41c323b649e7669021

    Then use Win32 Disk Imager to write it to your 4gb CF card, pop it into your SSL Core, and it *should* boot into pfSense.
    Yeah well could do the same if i used the 40Gb hard drive that came with teh ssl core ?

  16. #14

    Join Date
    Jun 2014
    Location
    United States
    Posts
    4
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Quote Originally Posted by Slipknot1995 View Post
    Yeah well could do the same if i used the 40Gb hard drive that came with teh ssl core ?
    I don't know. As far as I know, the CF card is set as the boot device and I don't believe it is autodetected, meaning you would need access to the BIOS to even boot from the hard drive (unless it's already set that way). Then you want a prebuilt image to write to the 40gb drive... the 4gb embedded image will overwrite everything, and while I think it will work, I'm not positive. It should be much easier and faster to flash the image to the 4gb card as a first step. If that doesn't work, then try the hard drive.

  17. #15
    Slipknot1995's Avatar
    Join Date
    Jun 2014
    Location
    THE SERVER ROOM
    Posts
    13
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Yeah i will give this a try as soon as possible and see if it works

SHARE:
+ Post New Thread

Similar Threads

  1. Pfsense - 2.0-RC1 - Radius Windows 2003 HELP!
    By MattGibson in forum Internet Related/Filtering/Firewall
    Replies: 0
    Last Post: 19th May 2011, 09:46 AM
  2. making passwords help
    By browolf in forum Scripts
    Replies: 7
    Last Post: 26th August 2005, 09:49 AM
  3. Exchange Go BANG ***HELP***
    By ICTNUT in forum Windows
    Replies: 9
    Last Post: 23rd August 2005, 11:33 AM
  4. Free Help!
    By mark in forum How do you do....it?
    Replies: 16
    Last Post: 27th July 2005, 03:50 PM
  5. EZ_GPO usage and helpfulness query
    By tarquel in forum Windows
    Replies: 6
    Last Post: 21st June 2005, 02:00 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •