Netgate 1541 BASE pfSense+ Security Gateway
- Cables
- Adapters
- Expansion Cards
- Accelerator Cards
THE NETGATE 1541 HAS REACHED END OF SALE. UPGRADE NOW TO THE NEW NETGATE 8300.
HIGH AVAILABILITY: FOR CUSTOMERS SEEKING TO PURCHASE THE XG-1541 IN A HIGH AVAILABILITY PAIR, PLEASE READ OUR INSTRUCTIONAL PAGE FOR MORE INFORMATION HERE.
The Netgate® 1541 Security Gateway with pfSense® Plus software is our most powerful solution for medium to large business data centers or server rooms. It features a 2.1 GHz, 8-core, 16-thread Intel® Xeon® D-1541 processor with AES-NI, dual 10GBase-T ports and dual 1 Gbps RJ-45 ports. The CPIC-8955 Cryptographic Accelerator Card with QAT (QuickAssist Technology) can be added to offload encryption processing for improved VPN throughput performance. Other expansion options include a 2- or 4-Port Intel 10 GbE card for additional SFP+ ports, or support for a wide selection of 3rd party PCIe cards via the PCIe 3.0 x 16 card slot. With RAID configurations and high availability options, the Netgate 1541 is our most robust solution for high-performance throughput and/or mission-critical deployment needs.
Featuring a Eight Core Intel Xeon® 2.1 GHz, upgradable memory up to 32 GB, and expandable network interfaces up to (8) ports the Netgate 1541 achieves up to 18.8 Gbps routing performance.
L3 Forwarding
- IPERF3 Traffic: 18.8 Gbps
- IMIX Traffic: 15.1 Gbps
Firewall
(10k ACLs)
- IPERF3 Traffic: 18.64 Gbps
- IMIX Traffic: 12.3 Gbps
IPsec VPN
(AES-GCM-128 w/QAT)
- IPERF3 Traffic: 9.30 Gbps
- IMIX Traffic: 1.77 Gbps
Netgate 1541 performance tests conducted with pfSense plus software version 22.01
CPU: Eight Core Intel Xeon® 2.1 GHz, with AES-NI compatibility, significantly improves encrypted throughput and increases RAM performance by up to 50%.
Network Ports: Expandable up to 8 network ports the Netgate 1541 features (2) 10GBase-T LAN/WAN via SoC, (2) 1 GbE LAN/WAN via Intel i350-AM2, and support for a wide selection of 3rd party PCIe cards via the PCIe 3.0 x 16 card slot, or a 2- or 4-Port X710 Intel 10 GbE SFP+ expansion card.
Storage: 500 GB M.2 SSD
Memory: 16 GB DDR4 (Expandable to 32 G ECC), DDR4 memory allows more stable, higher transfer rates for memory-intensive applications (e.g. IDS/IPS). Our hardware flexibility allows you to upgrade your memory at any time to 32 GB, future-proofing this appliance.
pfSense Plus software provides the performance, flexibility, reliability and business assurance expected from leading secure networking applications:
- Up to 10 Gbps performance
- Flexible 3rd-party application options
- Traditional management mechanisms
- Proven reliability
- Complete business assurance support
All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include load balancing, traffic shaping, captive portal, UTM device, DNS/DHCP Server, IDS/IPS, failover WAN, and much more.
"In case there's any confusion, this is one monster of a firewall." - Tuan Nguyen, Editor-in-Chief, Maximum PC
Hardware Specification:
| CPU | Intel "Xeon-DE" D-1541, 2.1 GHz FCBGA 1667 supported SoC |
|---|---|
| CPU Cores | Eight Cores, 45W |
| Networking | Dual LAN via Intel® i350-AM2 1 Gigabit Ethernet Dual LAN via SoC 10GBase-T Virtual Machine Device Queues reduce I/O overhead Supports 10GBASE-T, 100BASE-TX, and 1000BASE-T, RJ45 output 1x Realtek RTL8201N PHY (dedicated IPMI) |
| Storage | 500 GB M.2 SSD |
| Memory | 16 GB ECC DDR4 RDIMM (expandable to 32 GB) |
| Expansion | 1x PCI-E 3.0 x 16 slot 1x M.2 PCI-E 3.0 x4 (SATA support) M Key 2242/2280 6x SATA3 (6 Gbps) ports via SoC |
| Other Ports | 1x BMC integrated ASPEED AST2400 1x IPMI Port 1x VGA Port 1x Fast UART 16550 Serial Port (header) |
| USB Ports | 2x USB 3.0 ports |
| LED | Power LED Hard drive activity LED 2x Network activity LEDs System Overheat LED Information LED (temp., status) |
| Enclosure | 19" 1U Rack Mount 7.8 lbs. / 3.54 kg. |
| Form Factor | 1U 1.7"x17.2"x9.8" |
| Cooling | 200W Low-noise PS with PFC: Active CPU fan, 40mm chassis fan *airflow direction is front-to-back |
| Power |
1x SATA DOM power connector 100-240V, 50-60Hz, 2.6 Amp MAX |
| Environmental | 10°C to 35°C Operating Temp 8% to 90% Operating Relative Humidity (non-condensing) |
| Power Consumption | 20 W (idle) |
| Certifications | FCC, CE, RoHS, UL, UKCA |
Key features:
LOW TOTAL COST OF OWNERSHIP
- No artificial limits or add-ons required to make your system fully functional.
- No additional usage or feature based pricing. Enjoy unlimited users, unlimited firewall rules, unlimited IPsec tunnels, dual WAN, etc.
- Standard configuration with 16GB of RAM and 256GB Micron M.2 SSD*.
- Low power requirements to help save you money.
- This system is designed for a long deployment lifetime.
GROWS WITH YOU
- From firewall to Unified Threat Management, get all the security features you need to protect your home or business.
- Flexible configuration and support for multi-WAN, high availability, VPN, load balancing, reporting and monitoring, etc.
- Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring. 1
- Maximum Active Connections: 16,000,000 (32,000,000 with 32 GB RAM)
EASY GUI MANAGEMENT
- Manage pfSense Plus software settings through our web-based GUI.
- No fumbling with a command line interface or typing arcane commands.
SECURE REMOTE ACCESS
- Connect via encrypted Virtual Private Networks (VPN) between your offices, let mobile workers connect security, or connect to the Cloud!
-
Use the built-in Amazon VPC Wizard to easily establish VPN connections with your Amazon EC2 cloud.
Best For:
- Medium to Large Sized Networks with 1U rack mount cabinets
- Medium to Large Sized Branch Office with heavy loads
- Managed Service Providers (MSP) / Managed Security Service Provider (MSSP) On Premises Appliance
- Enterprise
- Anyone with High-Speed 10 Gigabit and/or 1 Gigabit Connections
- Anyone with many VPN Connections
- Anyone with high speed connections who wish to configure IDS/IPS features
Software Features
Router:
- Policy-based routing
- Multiple IP addresses per interface
- Multiple WAN connections (with load balancing and failover)
- Complex NAT mapping (outbound and inbound)
- Concurrent IPv4 and IPv6 support
- Optional multi-node High Availability (HA) clustering
- Dynamic routing protocol support [w/pkg]
Firewall, Attack Prevention, & Content Filtering:
- Extensive firewall rules
- Stateful filtering & packet inspection
- Per-interface configuration
- Ethernet (layer 2) rule-based packet filtering
- IP/DNS-based filtering and blacklisting [w/pkg]
- IDS/IPS with Snort-based packet analyzer [w/pkg]
- Layer 7 application detection and blocking [w/pkg]
- Reverse proxy [w/pkg]
- Geo/country blocking, IP block lists [w/pkg]
VPN:
- Site-to-site and remote access VPNs
- IPsec, OpenVPN, WireGuard®
- Split tunneling
- IPsec policy-based and route-based protocol support
- OpenVPN Data Channel Offload (DCO)
- Intel IPsec Multi-Buffer (IIMB) where available
User Authentication & System Security:
- User and group-based privileges
- LDAP authentication
- Automatic lockout after repeated attempts
- Optional key-based SSH access
- Traffic and bandwidth shaping
- Captive portal with user data transfer quotas
- External RADIUS authentication [w/pkg]
Configuration:
- Setup wizard for initial configuration
- Encrypted automatic backup to Netgate server
- Easy configuration backup/restore
- Multi-language support
Monitoring & Reporting:
- Customizable dashboard with widgets
- Local monitoring graphs
- Remote logging
- Network usage monitoring [w/pkg]
- Network diagnostics [w/pkg]
Learn more about the power of pfSense Plus software here.
ADDITIONAL INFORMATION:
- Quick Start Guide and other Manuals
- Not PoE Compatible
- Ships with US style 3 prong power cord. Easily changed to non-US style by purchasing a IEC320-C13 (3 PIN) compatible power cord (visual example).
Your purchase includes all of these super neat things, which will help you get started with pfSense Plus software:
- Complimentary 24x7 zero-to-ping support from Netgate Global Support
- Access to the continuously updated pfSense online documentation
-
ACB: Automatic Encrypted Configuration Backup Service
SUPPORT INFORMATION
- Technical assistance is available from Netgate Global Support 24x7x365.
- TAC Lite is included with the purchase of your Netgate appliance.
- TAC Pro and TAC Enterprise SLA descriptions and pricing are available here.
- Help is available on our community forum here.
WARRANTY INFORMATION
- One-year manufacturer's hardware warranty information is here.
- Extended warranties for US customers are available from Extend. More information on their offer and warranty policy can be viewed here.
- Standard 30 day return policy. Netgate does not sell seconds or returns. An open box fee may apply.
- All specifications subject to change without notice
- Questions? We’d love to hear from you. Contact us at sales@netgate.com
1 Free packages.