How safe are cwwk mini computers for pfsense?

I’m thinking about building a pfsense firewall using a cwwk mini computer/firewalls. From what I can gather, cwwk does not update its bios nor provide any support. I’m concerned that these devices are not secure in a similar manner to poe cameras. However, I dont know of any tech youtuber suggesting that people should avoid these devices because of security issues.

My question is am I being overly concened? How secure are these devices?

This alone can potentially cause future security issues.

But then again I dont think I’ve updated the BIOS on my PCEngines APU2. I cant even remember how I installed coreboot on it :rofl:

I do not see the appliance anymore or less secure than other hardware options. To me, it is the OS I focus on. Many people run on these small appliances. I expect nefarious actors will look for juicer targets than my home network.

I use a topton and there are firmware updates shared between the brands, including unlocked bios that expose more control over the cpu.

You can find more about it on servethehome in the “CWWK i5-1235U 6 port i226 report” thread under networking.

I dont know how to wrap my head around this. I’m trying to determine what kind of risk I’m taking by using the cwwk firewalls with pfsense. The literal lack of information on these firewalls makes it hard to determine whether its risky or not. Its the unknown unknown that worries me.

I cant afford a netgate appliance that is over priced and old hardware. These cwwk firewalls are affordable and modern but with unknown security risks.

My current firewall is a hp t730. Hp has not updated the bios in the last 6 years ish. I had 2 of these hp t730s and one of them being used as xcpng server just died. I’m guessing that the firewall is not going to last much longer.

So my thought is to just yolo it and get one. Then lockdown my network.

So, I’m curious as to what other people who have these firewalls are doing to secure their networks.

Thanks for any insites.

Thanks for the info. I now have some reading material for the weekend.