Netgate 1537 BASE pfSense Plus Security Gateway

Netgate 1537 BASE pfSense Plus Security Gateway
Security Grade B Calculator v1	Netgate 1537 BASE pfSense Plus Security Gateway Brand: Netgate (Parent: Rubicon Communications LLC) Category: Firewall • Model / Gen: 1537 / formerly XG-1537; BASE configuration 1537 BASE / XG-1537 Release Date: 2017-09-27 • Status: End of sale Classification Date: 2026-10-27 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html 🔗 Proof]	The vendor documents physical-console recovery that can reset administrator credentials, including with a password-protected console. Rare is a qualitative rating of this documented physical-access weakness, not a measured tampering frequency.
Known vulnerabilities	Very common	[https://docs.netgate.com/pfsense/en/latest/releases/26-07.html https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/ https://docs.netgate.com/pfsense/en/latest/releases/versions.html 🔗 Proof]	The pfSense software family has repeatedly published security fixes, including numerous web-interface command-execution and XSS advisories addressed in 26.07. This is historical software-platform evidence, not a claim that all fixed issues remain exploitable on this updated unit.
Prior attacks	None	[https://docs.netgate.com/pfsense/en/latest/releases/26-07.html https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/ https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html 🔗 Proof]	No verified in-the-wild incident naming the Netgate 1537 was identified in the bounded vendor-advisory and original-research review completed on 24 October 2026. Published laboratory exploits were not counted as real-world attacks; None records that search result, not proof that attacks never occurred.
Updatability	Very common	[https://docs.netgate.com/pfsense/en/latest/releases/versions.html https://docs.netgate.com/pfsense/en/latest/releases/26-07.html 🔗 Proof]	The vendor provides recurring pfSense Plus releases and security fixes. Version 26.07 was released on 13 August 2026 and is marked supported in the vendor's release table; earlier releases demonstrate an ongoing update history.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	OpenVPN SSL/TLS mode can authenticate both endpoints using peer CA validation and a server certificate. This supports mutual authentication for configured VPN connections, but not for every routing, discovery, DNS, or management interaction.
Communications	Encrypted with up-to-date encryption	[https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html https://docs.netgate.com/pfsense/en/latest/releases/2-5-0.html https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/configure-server-crypto.html 🔗 Proof]	The assessed management connection uses the pfSense HTTPS webConfigurator. TLS 1.3 was added and obsolete GUI TLS versions were removed in the vendor's release history. This rating covers appliance management and modern VPN channels, not arbitrary user traffic merely forwarded by the router.
Storage	No encryption	[https://docs.netgate.com/pfsense/en/latest/config/xml-configuration-file.html https://docs.netgate.com/pfsense/en/latest/backup/password-security.html 🔗 Proof]	The active configuration is stored locally at /conf/config.xml. The vendor states that this configuration can contain plaintext or reversibly Base64-encoded service secrets. In the assessed standard installation without added disk encryption, encrypted backup export is not treated as local-storage encryption.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	[https://docs.netgate.com/pfsense/en/latest/usermanager/users.html https://docs.netgate.com/pfsense/en/latest/usermanager/privileges.html 🔗 Proof]	The local User Manager supports creating, disabling, editing and deleting ordinary users, user-selected password changes, group membership and per-user privileges. Lower-privilege users can be separated from administrators; the built-in admin account itself cannot be deleted.
Authentication	Basic	[https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html https://docs.netgate.com/pfsense/en/latest/usermanager/users.html https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html 🔗 Proof]	Network administration is authenticated, but the vendor documents that a person with physical-console access can reset administrator credentials and bypass a locked console. The conservative Basic rating includes this recovery path rather than considering only the web login.
Brute-force protection	Exist	[https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html 🔗 Proof]	The default sshguard login-protection mechanism covers both GUI and SSH failures, adding the source address to a blocking table after repeated failed attempts. The assessed configuration retains this protection and its required logging.
Event logging	Access event logged	[https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html 🔗 Proof]	The vendor documents successful GUI login events in the system log and login-failure monitoring used by sshguard. The assessment leaves logging enabled; it does not claim that every possible physical or forwarded-packet action is audited.
Passwords	Require change after setup	[https://docs.netgate.com/pfsense/en/latest/releases/24-03.html https://docs.netgate.com/pfsense/en/latest/usermanager/users.html 🔗 Proof]	Since pfSense Plus 24.03, new setup and later logins enforce changing the admin password away from the shared default and reject a password equal to the username. The cited controls do not establish a mandatory length-and-character-class policy, so the middle password option is used.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	pfSense Plus 26.07 (FreeBSD-based; assessment software version, not original launch firmware) (Companion App: Not applicable; browser-based webConfigurator management, no required companion app)
Hardware (CPU / GPU)	CPU: Intel Xeon D-1537, 8 cores / 16 threads, 1.7 GHz • GPU: ASPEED AST2400 BMC console graphics; no consumer discrete GPU
Memory & Storage	Memory: 8 GB ECC DDR4; expandable to 32 GB • Storage: 500 GB M.2 SSD (the manufacturer's last-listed BASE specification)
Power, Battery & Charging	Battery: Not applicable to rechargeable operating power — mains-powered appliance • Power: Internal 200 W AC supply; 100–240 V, 50–60 Hz; 20 W idle • Charging: Not applicable; mains-powered appliance, not rechargeable for operating power
Display & Camera	Display: No integrated display; VGA external-console output • Camera: Not applicable; network-security appliance with no integrated imaging function
Sound & Connectivity	Sound: Not applicable to multimedia playback; appliance status/console notifications only • Connectivity: 2 × 1GbE RJ-45, 2 × 10GbE SFP+, dedicated IPMI RJ-45, 2 × USB 3.0; optional PCIe expansion
Physical (Dimensions & Mass)	Dimensions: 17.2 × 9.8 × 1.7 in (W × D × H; manufacturer's stated units) • Mass: 3.54 kg (7.8 lb; manufacturer chassis specification)

One feasible assessed deployment: pfSense Plus 26.07 with HTTPS webConfigurator, local user management, logging and default sshguard protection retained, ordinary non-disk-encrypted local configuration storage and the vendor's physical-console recovery path. Network BMC/IPMI services are disabled or not deployed; BMC capabilities are not used as proof of pfSense account controls. Modern VPN mutual-authentication capability is rated Partial. No device was probed, upgraded, reconfigured or submitted during this research.