The New 8300, Netgate’s First 100G Router Appliance, and 25G Firewall.
Cart 0

Netgate 4100 MAX pfSense+ Security Gateway

  • $69900
Shipping calculated at checkout.
Customers using Shop Pay Installments might experience a 1-2 day delay in order processing.

Find A Partner
Related Products
  • Accessories

 

THE NETGATE 4100 HAS REACHED END OF SALE. UPGRADE NOW TO THE NEW NETGATE 4200.

Netgate-4100-Description

The Netgate® 4100 with pfSense® Plus software is one of the most versatile security gateways in its class. It combines the power of a Dual-Core Intel® Atom® C3338R Core CPU with integrated QuickAssist & AES-NI, and 4 GB of memory for a snappy user experience, delivering over 8.15 Gbps of L3 routing across six independent - (2) 1 GbE and (4) 2.5 GbE - flexible WAN/LAN ports. 

Netgate-4100-Performance

Hardware Comparison Chart

The Netgate 4100 is ideal for pro-home, small/medium businesses, or edge deployments that require flexible port configurations to support 1 to 2.5 Gbps WAN capabilities across (2) RJ45 copper / SFP fiber Combo WAN ports and (4) discrete, unswitched 2.5 Gbps RJ-45 ethernet LAN ports - all in a silent desktop form factor.

L3 Forwarding

  • IPERF3 Traffic: 8.15 Gbps
  • IMIX Traffic: 3.24 Gbps

Firewall
(10k ACLs)

  • IPERF3 Traffic: 4.09 Gbps
  • IMIX Traffic: 1.40 Gbps

IPsec VPN
(AES-GCM-128 w/QAT)

  • IPERF3 Traffic: 960 Mbps
  • IMIX Traffic: 312 Mbps

Netgate 4100 performance tests conducted with pfSense Plus software version 22.01

Netgate-4100-Specifications

CPU: Intel® Atom® C3338R with QAT, 2-core @ 1.8 GHz. Delivers 8.15 Gbps routing for common iPerf3 traffic and over 4.09 Gbps of firewall throughput.

Network Ports: 6 Independent 1G and 2.5G Flexible WAN/LAN Configurations. Use a combination of 6 ports for maximum flexibility - with 1 and 2.5 Gbps WAN capabilities across RJ45 and SFP ports, as well as 4 discrete, unswitched 2.5 Gbps LAN ports

Storage: 128 GB NVMe M.2 SSD

Memory: 4 GB DDR4 RAM, DDR4 memory allows more stable, higher transfer rates for memory-intensive applications (e.g. IDS/IPS). 

Cooling: The passive cooling system and low power draw of the Netgate 4100 provides efficient thermal management and silent operation expected from smaller devices despite its significantly higher performance.

Netgate-5100-Software

pfSense Plus software provides the performance, flexibility, reliability and business assurance expected from leading secure networking applications:

  • Up to 10 Gbps performance
  • Flexible 3rd-party application options
  • Traditional management mechanisms
  • Proven reliability
  • Complete business assurance support

All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include load balancing, traffic shaping, captive portal, UTM device, DNS/DHCP Server, IDS/IPS, failover WAN, and much more.

 

HARDWARE SPECIFICATIONS:

CPU

Intel® Atom® C3338R with QAT, 2-core @ 1.8 GHz (Denverton family)

CPU Cores

Dual Core

Physical Network I/O ports

(2) Auto media detect 1 Gbps (RJ45 copper / SFP fiber) Combo WAN ports

(4) 2.5 Gbps RJ-45 "direct" (unswitched) ethernet  LAN ports

Storage

128 GB NVMe M.2 SSD

Memory

4 GB DDR4 w/o ECC, single channel

Physical Expansion Card Slots

1x m.2 (Key-B slot) NVMe (PCIe)

Console Port

1x auto-detect console port: "Cisco pinout" RJ45 + micro-USB (micro-USB cable included with each system)

USB Ports

2x USB 3.0 jacks (USB-A female) Located on left side rear when viewed from system front

LED

3x 4-color LEDs (RGB + amber) Software / bootloader controllable via Microchip MCU

Enclosure

Desktop - Aluminum, plastic, and steel enclosure.
10 x 7.88 x 1.88 inches
254 x 200 x 47.63 mm

Mounting

Optional wall or rack mount kit

Cooling

Passive

Power

External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5.0A (60W), threaded (locking) barrel connector
- AC Inlet: IEC320-C7 (2 PIN) -
- Power Cord: One US, UK, EU or ANZ power cord included depending on the regional system SKU on box.
- US Power Cord: NEMA 1-15-P to IEC320-C7
- UK Power Cord: BS 1363 to IEC320-C7
- EU Power Cord: CEE7/16 to IEC320-C7

Environmental

0°C (32°F) to 40°C (104°F) - ambient
Certifications CE, CB, FCC (Class B), RoHS, CCATS, UL, RCM, UKCA



Key features:

LOW TOTAL COST OF OWNERSHIP

  • No artificial limits or add-ons required to make your system fully functional.
  • No additional usage or feature-based pricing. Enjoy unlimited users, unlimited firewall rules, unlimited IPsec tunnels, dual WAN, etc.
  • Low power requirements to help save you money.
  • This system is designed for a long deployment lifetime.

GROWS WITH YOU

  • From firewall to Unified Threat Management, get all the security features you need to protect your home or business.
  • Flexible configuration and support for multi-WAN, high availability, VPN, load balancing, reporting and monitoring, etc.
  • Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring. 1 
  • Maximum Active Connections: 4,000,000

EASY GUI MANAGEMENT

  • Manage pfSense Plus software settings through our web-based GUI.
  • No fumbling with a command-line interface or typing arcane commands.

SECURE REMOTE ACCESS

  • Connect via encrypted Virtual Private Networks (VPN) between your offices, let mobile workers connect securely, or connect to the Cloud!
  • Use the built-in Amazon VPC Wizard to easily establish VPN connections with your Amazon EC2 cloud.

Best For:

  • Consumers
  • Remote Workers
  • Small to Medium-Sized Business Networks
  • Small to Medium-Sized Branch Office
  • Managed Service Provider / Managed Security Service Provider (MSP/MSSP) On-Premises Appliance
  • Enterprise
  • Everyone looking for great performance with no fan noise
  • Situations where a rack mount system is not an option
  • Anyone with High-Speed Gigabit Connections 
  • Many VPN Connections

 

Software Features

Router:

  • Policy-based routing
  • Multiple IP addresses per interface
  • Multiple WAN connections (with load balancing and failover)
  • Complex NAT mapping (outbound and inbound)
  • Concurrent IPv4 and IPv6 support
  • Optional multi-node High Availability (HA) clustering
  • Dynamic routing protocol support [w/pkg]

Firewall, Attack Prevention, & Content Filtering:

  • Extensive firewall rules
  • Stateful filtering & packet inspection
  • Per-interface configuration
  • Ethernet (layer 2) rule-based packet filtering
  • IP/DNS-based filtering and blacklisting [w/pkg]
  • IDS/IPS with Snort-based packet analyzer [w/pkg]
  • Layer 7 application detection and blocking [w/pkg]
  • Reverse proxy [w/pkg]
  • Geo/country blocking, IP block lists [w/pkg]

VPN:

  • Site-to-site and remote access VPNs
  • IPsec, OpenVPN, WireGuard®
  • Split tunneling
  • IPsec policy-based and route-based protocol support
  • OpenVPN Data Channel Offload (DCO)
  • Intel IPsec Multi-Buffer (IIMB) where available

User Authentication & System Security:

  • User and group-based privileges
  • LDAP authentication
  • Automatic lockout after repeated attempts
  • Optional key-based SSH access
  • Traffic and bandwidth shaping
  • Captive portal with user data transfer quotas
  • External RADIUS authentication [w/pkg]

Configuration:

  • Setup wizard for initial configuration
  • Encrypted automatic backup to Netgate server
  • Easy configuration backup/restore
  • Multi-language support

Monitoring & Reporting:

  • Customizable dashboard with widgets
  • Local monitoring graphs
  • Remote logging
  • Network usage monitoring [w/pkg]
  • Network diagnostics [w/pkg]

Learn more about the power of pfSense Plus software here.


ADDITIONAL INFORMATION:

  • Quick Start Guide and other Manuals
  • Ships with the latest version of pfSense Plus software
  • Not PoE Compatible
  • Ships with your choice of Australian, UK, EU or USA cords. Easily changed by purchasing compatible AC power cord with IEC320-C7 (2 PIN) plug (visual example)
  • Optional wall mount available
  • Note: This system uses the case as a heatsink. Please be aware it may feel warm when in use

Your purchase includes all of these super neat things, which will help you get started with pfSense Plus software:

  • Complimentary 24x7 zero-to-ping support from Netgate Global Support
  • Access to the continuously updated pfSense online documentation
  • ACB: Automatic Encrypted Configuration Backup Service

SUPPORT INFORMATION

  • Technical assistance is available from Netgate Global Support 24x7x365. 
  • TAC Lite is included with the purchase of your Netgate appliance.
  • TAC Pro and TAC Enterprise SLA descriptions and pricing are available here. 
  • Help is available on our community forum here.

WARRANTY INFORMATION

  • One-year manufacturer's hardware warranty information is here.
  • Extended warranties for US customers are available from Extend. More information on their offer and warranty policy can be viewed here.
  • Standard 30 day return policy. Netgate does not sell seconds or returns. An open box fee may apply.
  • All specifications subject to change without notice
  • Questions? We’d love to hear from you. Contact us at sales@netgate.com

1 Free packages.

2 pfSense Plus software distributions now have support for QuickAssist and AES-NI.