Netgate 8300 MAX pfSense+ Security Gateway
- Cables
- Transceivers
- Expansion Cards
THE NETGATE 8300 MAX IS TEMPORARILY OUT OF STOCK UNTIL MID SEPTEMBER
THE 2-PORT 25GBE AND 2-PORT 100 GBE CARDS ARE TEMPORARILY OUT OF STOCK
![Netgate-8300-Description](https://cdn.shopify.com/s/files/1/0065/9531/3779/files/8300_MAX_pfsense.png?v=1719849592)
Experience unparalleled value and performance with the Netgate® 8300 Security Gateway powered by pfSense® Plus software. The Netgate 8300 is tailored for medium to large business, xSP, MSP/MSSP with high connectivity and stability requirements. This unit is enterprise-ready, featuring Netgate's most expandable chassis and hot-swappable PSUs, ensuring mission critical reliability and ease of maintenance.
This security gateway boasts a formidable 2.0 GHz, 8-core, 16-thread Intel® Xeon® D-1733NT processor with Intel AVX-512 for exceptional Firewall and VPN performance. With quad 10G SFP+ ports, quad 1G SFP ports, and triple 2.5G RJ-45 ports, plus expandability with 10G, 25G and 100G ports via PCIe cards, the Netgate 8300 future-proofs your network infrastructure, scaling effortlessly with your business.
The Netgate 8300 maximizes your investment by delivering high-performance throughput at an incredibly competitive cost per gigabit. Compared to the 1541, it boasts a remarkable 47% firewall performance gain, 100% improvement in VPN and routing throughput, and a 175% increase in port density.
This compact 1U chassis optimizes space efficiency in server rooms and data centers, ideal for mission-critical deployments requiring robust high availability options and hotswap dual-power capability. Redefine your network standards by offering superior scalability, performance, and cost efficiency that exceeds industry expectations with Netgate's 8300 Security Gateway.
.
L3 Forwarding
(Router)
- IPERF3 Traffic: 36.7 Gbps
Firewall
(10k ACLs)
- IPERF3 Traffic: 26.8 Gbps
IPsec VPN
(AES-GCM-128 w/AES-NI)
- IPERF3 Traffic: 14.6 Gbps
Netgate 8300 performance tests conducted with pfSense Plus software version 24.03
The Netgate 8300 is also available with TNSR software. TNSR is a high-performance software router capable of producing considerable VPN and Routing performance increases far beyond the limits of pfSense Plus software.
![Netgate-8300-Specifications](https://cdn.shopify.com/s/files/1/0065/9531/3779/files/8300_MAX_SPECS.png?v=1719849751)
CPU: Eight Core 2.0 GHz Intel Xeon CPU.
Delivers 36 Gbps routing for everyday iPerf3-bidirectional traffic and over 26 Gbps of firewall throughput
Network Ports: 11 Independent 1G, 2.5G, and 10G ports.
Maximum port flexibility - with 1G, 2.5G, and 10G Ethernet configurable as WAN or LAN across the combination of 11 RJ45 and SFP ports
Expandability: 1 x PCIe 3.0 x8 for half-length low profile cards and 1 xPCIe 4.0 x16 for full-height three-quarters length cards
Storage: 512 GB NVMe 2280 M-Key M.2 SSD
Memory:
BASE: 16 GB DDR4, ECC, 2400MHz via 2x 8 GB 1G x 72-Bit UDIMM
(expandable to 32 GB via 2x 16 GB UDIMM)
MAX: 32 GB DDR4, ECC, 2400MHz via 2x 16 GB UDIMM
Power:
Dual hot-swappable PSU bays
Base: 1 x Internal 500W PSU (hot-swappable) included, 110V/240V AC input
MAX: 2 x Internal 500W PSU (hot-swappable) included, 110V/240V AC input
Cooling: Active - 7x chassis fans at the rear of the enclosure
![Netgate-5100-Software](https://cdn.shopify.com/s/files/1/0065/9531/3779/files/1M-pfsense.jpg?v=1702912187)
pfSense Plus software provides the performance, flexibility, reliability, and business assurance expected from leading secure networking applications:
- Exceptional performance
- Flexible 3rd-party application options
- Traditional management mechanisms
- Proven reliability
- Complete business assurance support
All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include firewall, VPN, routing, load balancing, traffic shaping, captive portal, DNS/DHCP Server, IDS/IPS, failover WAN, and more.
HARDWARE SPECIFICATIONS:
CPU |
Intel Xeon D-1733NT, 8-core @ 2.0 GHz (Ice Lake Family) |
CPU Cores |
8-core |
Physical Network I/O ports |
(4) 10GbE SFP+ cage ports |
Storage |
512 GB NVMe 2280 M-Key M.2 SSD |
Memory |
BASE: 16 GB DDR4, ECC, 2400MHz via 2x 8 GB 1G x 72-Bit UDIMM |
Physical Expansion Card Slots |
2x m.2 M-Key slots for NVMe SSD storage via custom vertical PCIe riser card |
Console Port |
1x RJ45 auto-detect console port |
Management Port |
1x IPMI management port via dedicated RJ45 |
USB Ports |
2 x USB 3.2 jacks (USB-A female) |
RTC (battery) |
CR2032 (20mm) lithium coin cell onboard, 3VDC |
LED |
3x RGB LEDs – software/firmware controllable via Aspeed AST2620 BMC |
Power Buttons / Switches |
1x illuminated push button (front) - software controlled 1x mechanical toggle switch (rear) |
Enclosure |
Sheet steel enclosure, powder-coated finish *excluding rack ears, handles, and hot-swap PSU protrusions |
Mounting |
1U rackmount - chassis is compatible with industry standard sliding rails |
Cooling |
Active - internal chassis cooling fans at the rear of the enclosure *airflow direction is front-to-back |
Power |
Dual hot-swappable PSU bays. BASE: 1 x NEMA 5-15P to IEC320-C15 US power cord included MAX: 2 x NEMA 5-15P to IEC320-C15 US power cord included |
Environmental |
Ambient temperature range of 0°C (32°F) to 40°C (104°F) |
Certifications | CE, CB, FCC (Class A), ISED (Class A), RoHS, UL, ACMA, UKCA, TAA (MAX only) |
KEY FEATURES
LOW TOTAL COST OF OWNERSHIP
- pfSense+ software updates and security patches are provided free of charge for the life of the product
- No artificial limits or add-ons are needed for full functionality
- Enjoy unlimited users, firewall rules, IPsec tunnels, dual WAN, and more without additional usage or feature-based pricing
- Low power requirements to save money
- Designed for an extended deployment lifetime
GROWS WITH YOU
- Get all the security features you need to protect your business
- Flexible configuration and support for multi-WAN, High Availability, VPN, load balancing, reporting and monitoring, etc
- Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring. 1
EASY GUI MANAGEMENT
- Intuitive web-based GUI includes :
- Configure advanced routing, firewall rules, VPNs, multi-WAN, and traffic shaping
- Dashboard with real-time traffic graphs
- Detailed diagnostics and reporting tools
SECURE REMOTE ACCESS
- Highly flexible, suitable for remote access and site-to-site connections, supporting a wide range of VPN types, including IPsec, OpenVPN, and WireGuard,
- Simplified multi-vendor supported VPN creation and management
- Secure connectivity for mobile and remote workers to the cloud
- Use the Amazon VPC Wizard to easily set up VPN connections with your Amazon EC2 cloud.
Best For:
- Medium-to-large sized organizations and businesses
- Enterprise
- Co-location, high availability use cases
- Service Providers and Managed Service Providers
Software Features
Router:
- Policy-based routing
- Multiple IP addresses per interface
- Multiple WAN connections (with load balancing and failover)
- Complex NAT mapping (outbound and inbound)
- Concurrent IPv4 and IPv6 support
- Optional multi-node High Availability (HA) clustering
- Dynamic routing protocol support [w/pkg]
Firewall, Attack Prevention, & Content Filtering:
- Extensive firewall rules
- Stateful filtering & packet inspection
- Per-interface configuration
- Ethernet (layer 2) rule-based packet filtering
- IP/DNS-based filtering and blacklisting [w/pkg]
- IDS/IPS with Snort-based packet analyzer [w/pkg]
- Layer 7 application detection and blocking [w/pkg]
- Reverse proxy [w/pkg]
- Geo/country blocking, IP block lists [w/pkg]
VPN:
- Site-to-site and remote access VPNs
- IPsec, OpenVPN, WireGuard®
- Split tunneling
- IPsec policy-based and route-based protocol support
- OpenVPN Data Channel Offload (DCO)
- Intel IPsec Multi-Buffer (IIMB)
- IPsec acceleration with Intel QuickAssist Technology (QAT) (QAT)
User Authentication & System Security:
- User and group-based privileges
- LDAP authentication
- Automatic lockout after repeated attempts
- Optional key-based SSH access
- Traffic and bandwidth shaping
- Captive portal with user data transfer quotas
- External RADIUS authentication [w/pkg]
Configuration:
- Setup wizard for initial configuration
- Encrypted automatic backup to Netgate server
- Easy configuration backup/restore
- Multi-language support
Monitoring & Reporting:
- Customizable dashboard with widgets
- Local monitoring graphs
- Remote logging
- Network usage monitoring [w/pkg]
- Network diagnostics [w/pkg]
Learn more about the power of pfSense Plus software here.
ADDITIONAL INFORMATION
- Quick Start Guide and other Manuals
- Ships with the latest version of pfSense Plus software
- Not PoE Compatible
- Ships with a USA power cord. Easily changed to non-US style by purchasing a IEC320-C15 (3 PIN) compatible power cord (visual example).
Your purchase includes many free services and free technical support, which will help you get started with pfSense Plus software:
- Complimentary pfSense firewall software updates for the life of the product
- Complimentary 24x7 zero-to-ping support from Netgate Global Support
- Access to the continuously updated pfSense online documentation
- ACB: Automatic Encrypted Configuration Backup Service
SUPPORT INFORMATION
- Technical assistance is available from Netgate Global Support 24x7x365.
- TAC Lite is included with the purchase of your Netgate appliance.
- TAC Pro and TAC Enterprise SLA descriptions and pricing are available here.
- Help is available on our community forum here.
WARRANTY INFORMATION
- One-year manufacturer's hardware warranty information is here.
- Extended warranties for US customers are available from Extend. More information on their offer and warranty policy can be viewed here.
- Standard 30 day return policy. Netgate does not sell seconds or returns. An open-box fee may apply.
- All specifications subject to change without notice
YOU WILL ALSO NEED
- Mounting hardware specific to your racking system. Due to the wide variety of rack mount fasteners, cage nuts, rack screws, and similar mounting hardware are not included. Please select fasteners that are suitable for your rack installation. Consult a qualified tradesperson if you are unsure.
PRO TIP
- Take a photo of the label on the bottom of your Netgate 8300 before installation. It is always a good idea to make a note of serial numbers and additional information from the label on the bottom of your system before installing in a server rack. The labeling may be difficult to read while the system is mounted in the rack. Please take a picture of the information or write it down for future reference.
Questions? We’d love to hear from you. Contact us at sales@netgate.com
1 Free packages.