The New 8300, Netgate’s First 100G Router Appliance, and 25G Firewall.

Netgate 4100 BASE pfSense+ Security Gateway

  • $59900
Shipping calculated at checkout.

Customers using Shop Pay Installments might experience a 1-2 day delay in order processing.

Find A Partner
Related Products

THE NETGATE 4100 HAS REACHED END OF SALE. UPGRADE NOW TO THE NEW NETGATE 4200.


Netgate-4100-Description

The Netgate® 4100 with pfSense® Plus software is one of the most versatile security gateways in its class. It combines the power of a Dual-Core Intel® Atom® C3338R Core CPU with integrated QuickAssist & AES-NI, and 4 GB of memory for a snappy user experience, delivering over 8.15 Gbps of L3 routing across six independent - (2) 1 GbE and (4) 2.5 GbE - flexible WAN/LAN ports. 

Netgate-4100-Performance

Hardware Comparison Chart


The Netgate 4100 is ideal for pro-home, small/medium businesses, or edge deployments that require flexible port configurations to support 1 to 2.5 Gbps WAN capabilities across (2) RJ45 copper / SFP fiber Combo WAN ports and (4) discrete, unswitched 2.5 Gbps RJ-45 ethernet LAN ports - all in a silent desktop form factor.

L3 Forwarding

  • IPERF3 Traffic: 8.15 Gbps
  • IMIX Traffic: 3.24 Gbps

Firewall
(10k ACLs)

  • IPERF3 Traffic: 4.09 Gbps
  • IMIX Traffic: 1.40 Gbps

IPsec VPN
(AES-GCM-128 w/QAT)

  • IPERF3 Traffic: 960 Mbps
  • IMIX Traffic: 312 Mbps

Netgate 4100 performance tests conducted with pfSense Plus software version 22.01

Netgate-4100-Specifications

CPU: Intel® Atom® C3338R with QAT, 2-core @ 1.8 GHz. Delivers 8.15 Gbps routing for common iPerf3 traffic and over 4.09 Gbps of firewall throughput.

Network Ports: 6 Independent 1G and 2.5G Flexible WAN/LAN Configurations. Use a combination of 6 ports for maximum flexibility - with 1 and 2.5 Gbps WAN capabilities across RJ45 and SFP ports, as well as 4 discrete, unswitched 2.5 Gbps LAN ports

Storage: 16 GB eMMC (or optional 128 GB NVMe M.2 SSD with Netgate 4100 Max)

Memory: 4 GB DDR4 RAM, DDR4 memory allows more stable, higher transfer rates for memory-intensive applications (e.g. IDS/IPS). 

Cooling: The passive cooling system and low power draw of the Netgate 4100 provides efficient thermal management and silent operation expected from smaller devices despite its significantly higher performance.

Netgate-5100-Software

pfSense Plus software provides the performance, flexibility, reliability and business assurance expected from leading secure networking applications:

  • Up to 10 Gbps performance
  • Flexible 3rd-party application options
  • Traditional management mechanisms
  • Proven reliability
  • Complete business assurance support

All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include load balancing, traffic shaping, captive portal, UTM device, DNS/DHCP Server, IDS/IPS, failover WAN, and much more.

 

 

HARDWARE SPECIFICATIONS:

CPU

Intel® Atom® C3338R with QAT, 2-core @ 1.8 GHz (Denverton family)

CPU Cores

Dual Core

Physical Network I/O ports

(2) Auto media detect 1 Gbps (RJ45 copper / SFP fiber) Combo WAN ports

(4) 2.5 Gbps RJ-45 "direct" (unswitched) ethernet  LAN ports

Storage

16 GB eMMC (onboard - soldered)  upgradable to 128 GB NVMe M.2 SSD with 4100 Max

Memory

4 GB DDR4 w/o ECC, single channel

Physical Expansion Card Slots

1x m.2 (Key-B slot) NVMe (PCIe)

Console Port

1x auto-detect console port: "Cisco pinout" RJ45 + micro-USB (micro-USB cable included with each system)

USB Ports

2x USB 3.0 jacks (USB-A female) Located on left side rear when viewed from system front

LED

3x 4-color LEDs (RGB + amber) Software / bootloader controllable via Microchip MCU

Enclosure

Desktop - Aluminum, plastic, and steel enclosure.
10 x 7.88 x 1.88 inches
254 x 200 x 47.63 mm

Mounting

Optional wall or rack mount kit

Cooling

Passive

Power

External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5.0A (60W), threaded (locking) barrel connector
- AC Inlet: IEC320-C7 (2 PIN) -
- Power Cord: One US, UK, EU or ANZ power cord included depending on the regional system SKU on box.
- US Power Cord: NEMA 1-15-P to IEC320-C7
- UK Power Cord: BS 1363 to IEC320-C7
- EU Power Cord: CEE7/16 to IEC320-C7

Environmental

0°C (32°F) to 40°C (104°F) - ambient

Certifications CE, CB, FCC (Class B), RoHS, CCATS, UL, RCM, UKCA



Key features:

LOW TOTAL COST OF OWNERSHIP

  • No artificial limits or add-ons required to make your system fully functional.
  • No additional usage or feature-based pricing. Enjoy unlimited users, unlimited firewall rules, unlimited IPsec tunnels, dual WAN, etc.
  • Low power requirements to help save you money.
  • This system is designed for a long deployment lifetime.

GROWS WITH YOU

  • From firewall to Unified Threat Management, get all the security features you need to protect your home or business.
  • Flexible configuration and support for multi-WAN, high availability, VPN, load balancing, reporting and monitoring, etc.
  • Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring. 1 
  • Maximum Active Connections: 4,000,000

EASY GUI MANAGEMENT

  • Manage pfSense Plus software settings through our web-based GUI.
  • No fumbling with a command-line interface or typing arcane commands.

SECURE REMOTE ACCESS

  • Connect via encrypted Virtual Private Networks (VPN) between your offices, let mobile workers connect securely, or connect to the Cloud!
  • Use the built-in Amazon VPC Wizard to easily establish VPN connections with your Amazon EC2 cloud.

Best For:

  • Consumers
  • Remote Workers
  • Small to Medium-Sized Business Networks
  • Small to Medium-Sized Branch Office
  • Managed Service Provider / Managed Security Service Provider (MSP/MSSP) On-Premises Appliance
  • Enterprise
  • Everyone looking for great performance with no fan noise
  • Situations where a rack mount system is not an option
  • Anyone with High-Speed Gigabit Connections 
  • Many VPN Connections

 

Software Features

Router:

  • Policy-based routing
  • Multiple IP addresses per interface
  • Multiple WAN connections (with load balancing and failover)
  • Complex NAT mapping (outbound and inbound)
  • Concurrent IPv4 and IPv6 support
  • Optional multi-node High Availability (HA) clustering
  • Dynamic routing protocol support [w/pkg]

Firewall, Attack Prevention, & Content Filtering:

  • Extensive firewall rules
  • Stateful filtering & packet inspection
  • Per-interface configuration
  • Ethernet (layer 2) rule-based packet filtering
  • IP/DNS-based filtering and blacklisting [w/pkg]
  • IDS/IPS with Snort-based packet analyzer [w/pkg]
  • Layer 7 application detection and blocking [w/pkg]
  • Reverse proxy [w/pkg]
  • Geo/country blocking, IP block lists [w/pkg]

VPN:

  • Site-to-site and remote access VPNs
  • IPsec, OpenVPN, WireGuard®
  • Split tunneling
  • IPsec policy-based and route-based protocol support
  • OpenVPN Data Channel Offload (DCO)
  • Intel IPsec Multi-Buffer (IIMB) where available

User Authentication & System Security:

  • User and group-based privileges
  • LDAP authentication
  • Automatic lockout after repeated attempts
  • Optional key-based SSH access
  • Traffic and bandwidth shaping
  • Captive portal with user data transfer quotas
  • External RADIUS authentication [w/pkg]

Configuration:

  • Setup wizard for initial configuration
  • Encrypted automatic backup to Netgate server
  • Easy configuration backup/restore
  • Multi-language support

Monitoring & Reporting:

  • Customizable dashboard with widgets
  • Local monitoring graphs
  • Remote logging
  • Network usage monitoring [w/pkg]
  • Network diagnostics [w/pkg]

Learn more about the power of pfSense Plus software here.


ADDITIONAL INFORMATION:

  • Quick Start Guide and other Manuals
  • Ships with the latest version of pfSense Plus software
  • Not PoE Compatible
  • Ships with your choice of Australian, UK, EU or USA cords. Easily changed by purchasing compatible AC power cord with IEC320-C7 (2 PIN) plug (visual example)
  • Optional wall mount available
  • Note: This system uses the case as a heatsink. Please be aware it may feel warm when in use

Your purchase includes all of these super neat things, which will help you get started with pfSense Plus software:

  • Complimentary 24x7 zero-to-ping support from Netgate Global Support
  • Access to the continuously updated pfSense online documentation
  • ACB: Automatic Encrypted Configuration Backup Service

SUPPORT INFORMATION

  • Technical assistance is available from Netgate Global Support 24x7x365. 
  • TAC Lite is included with the purchase of your Netgate appliance.
  • TAC Pro and TAC Enterprise SLA descriptions and pricing are available here
  • Help is available on our community forum here.

WARRANTY INFORMATION

  • One-year manufacturer's hardware warranty information is here.
  • Extended warranties for US customers are available from Extend. More information on their offer and warranty policy can be viewed here.
  • Standard 30 day return policy. Netgate does not sell seconds or returns. An open box fee may apply.
  • All specifications subject to change without notice
  • Questions? We’d love to hear from you. Contact us at sales@netgate.com

1 Free packages.

2 pfSense Plus software distributions now have support for QuickAssist and AES-NI.



Customer Reviews

Based on 2 reviews
50%
(1)
50%
(1)
0%
(0)
0%
(0)
0%
(0)
K
Kurt

Great service…. Great product…. Fair price!

K
K.C.
Solid appliance with great specs and bandwidth to spare.

I'm in a rather unique position as a home user. I'm replacing a Cisco ASA 5550 I purchased used many years ago to handle up to 1G internet. It's getting very old and no more support or updates are available and it's Java GUI is harder and harder to keep going with TLS 1.0,1.1 being deprecated although it's been a "just works" part of my home network forever.

I landed on pfSense because of the lack of licensing/subscription costs and it would allow for S2S VPN, remote access VPN, traffic shaping and enough power to handle several streams at max bandwidth. I landed on Netgate because they made some nice and well reviewed pre-built and installed hardware to run it. So far the experience has been very positive. While the interface is lacking a bit from what I am used to the web interface is very nice overall and being able to access and use from any device browser is great. The 4100 hardware seems well matched to my performance needs (overkill really) and it's fanless design is a nice break for the ears. Overall the setup and installation were easy and the hardware seems very nice. Looking forward to many more years of something "just working".

My only negative comments are that the case plastic feels a bit "cheap" in comparison to the nice heat-sink on bottom. Also, I'd prefer that the ports were not pre-labeled as "WAN" / "LAN". This device is capable of much more complicated setups and having things pre-labeled offends my organizational OCD.