FIREFX Network Guardian IoT Cyber-Security Router & Intrusion Prevention System

[madoublet]

Hello All,

Recently join the Opnsense forums as I am looking for an economical device to get started with. I've been watching Ebay for a few days and something that looks very similar to a Protectli W10416 has come up. Anyone know anything about the FIREFX Network Guardian IoT Cyber-Security Router & Intrusion Prevention System? Hard to find any documentation on the hardware specs but look very similar to all of the fanless PC options that are opt there.

Your input will be very appreciated. Look for a lower buck way to get started.

ebay link for reference.

https://www.ebay.com/itm/FIREFX-Network-Guardian-IoT-Cyber-Security-Router-Intrusion-Prevention-System/333763260661?_trkparms=aid%3D1110006%26algo%3DHOMESPLICE.SIM%26ao%3D1%26asc%3D20201210111314%26meid%3Df6d328c43cde43c2bcb44cc504473860%26pid%3D101195%26rk%3D1%26rkt%3D12%26mehot%3Dco%26sd%3D143927409704%26itm%3D333763260661%26pmt%3D1%26noa%3D0%26pg%3D2047675%26algv%3DSimplAMLv5PairwiseWebWithDarwoV3BBEV2b&_trksid=p2047675.c101195.m1851

Thanks!

[Jimmyray007]

I, too, was investigating this when I found your post.

Here's the sales material: https://www.exertisusa.com/wp-content/uploads/FIRE-FX-master-sales-deck-v1.6c.pdf

Page 10 lists it as FXNG-D4 Desktop Appliance, but Googling that yields nothing.

Page 17 shows a clearly rebranded pfSense install, running on an Atom C2358. Only 2 cores, but has AES-NI. No idea on the memory, but Intel says the CPU supports up to 16GB.

For that price, though, super tempting...


UPDATE - Also found this: https://vo-general.s3.amazonaws.com/53aee5c6-9690-4c74-a82a-09f1d0f1ec68/aa74a72b-4fcd-4365-85db-2ce22192bd90?AWSAccessKeyId=AKIAJ4PRWO26HAX3IOCA&Expires=1633264452&response-content-disposition=inline%3B%20filename%3D%22Network%20Guardian%202.0%20SPEC%20SHEET%20b.pdf%22&response-content-type=application%2Fpdf&Signature=FOIkJL48pkfAWBsApekdk1JmCSM%3D

It shows a Celeron J1900 instead. Looks identical, so which one you'll be getting is

[Jimmyray007]

Ordered 1. Will return and report.

[Devine]

and here https://www.youtube.com/watch?v=owdfvWO58i8

The company's website Firefx.com is blank.

I'm tempted also.

[Jimmyray007]

Back to report.

My FireFX came today. Shipped from TradePortUSA.com. Box label (from TradePort, dated 05/19/2020) lists it as FXNGD4-N, but the device's label itself just says "Fire-FX". Serial number implies it was the 46th one manufactured! Includes a wall mount plate with screws and standoffs, and 12V 4A (48W) AC adapter.

It has a Celeron J1900, 4GB of DDR3 memory, and a Kingston mSATA 60GB SSD. Manufacture date sticker on the motherboard shows 2/2017.

There's a vacant PCIE slot labelled "WIFI" Looks like there's two knockout on the front for antennas. All 4 NICs are listed in OPNsense as Intel Pro/1000 Network Connections. WAN is em0, LAN is em1, OPT1 is em2, and OPT2 is em3. Case has 4 screws holding on the cover, and 4 additional screws holding on the 2 removable side panels (2 screws each). Build quality seems very good.

BIOS is American Megatrends (by Aptio), with a Model Name of "BayTrail", and a BIOS ID of ZLBTG004 (haven't looked for firmware ugprades yet). It supports UEFI and Legacy boot.

OPNsense installer and GUI both require a tweak, which has been thoroughly reported with other J1900 Celerons. Those instructions state to use 2 boot mods by pressing space bar at boot, then 3 for shell commands. The first one sort of works, but it tweaks the console output by splitting the screen, at least on this hardware (set kern.vty="vt"). However, it's unneccessary, as the following command just fixes the issue entirely:

Code: [Select]

set hw.vga.acpi_ignore_no_vga="1"
boot
Set that before booting the installer, then write that to /boot/loader.conf.local after installation to make it persistent on reboots:

Code: [Select]

echo 'hw.vga.acpi_ignore_no_vga="1"' > /boot/loader.conf.local
Just got it installed but minimal effort besides the above flag and loader.conf.local, and so far, so good!

[Verqillius]

Is this network guardian the most effective way to protect the IoT system? Sorry if this question sounds silly, but I’m not a cybersecurity professional. I’m just a guy who wants to install his first IoT system and make it secure. There are many ways to do that, and I don’t know which one will fit the best for me.
I even think I might need help from the people from penetration testing Brisbane to test my system and find all the breaches because I want to build an IoT system that would be safe to use for everyone. I don’t want to risk my personal data because hacking seems to happen so often.