The New 8300, Netgate’s First 100G Router Appliance, and 25G Firewall.

Netgate 4200 BASE pfSense+ Security Gateway

  • $54900
Shipping calculated at checkout.

Customers using Shop Pay Installments might experience a 1-2 day delay in order processing.

Find A Partner


The Netgate® 4200 with pfSense® Plus software is the most versatile security gateway in its class. The 4200 utilizes the blazing fast performance of 4-core Intel® Atom® C1110 CPU to achieve benchmark results up to three times faster in routing, firewall forwarding and IPsec VPN than the previous generation of security gateways. The 4200 delivers over 9.2 Gbps of L3 routing across four independent 2.5 GbE flexible WAN/LAN ports. 


Hardware Comparison Chart

The Netgate 4200 is ideal for pro-home, small/medium businesses, branch and edge deployments that require flexible port configurations to support 1 to 2.5 Gbps WAN capabilities across four discrete, unswitched 2.5 Gbps RJ-45 ethernet LAN ports - all in a silent desktop form factor.

L3 Forwarding

  • IPERF3 Traffic: 8.75 Gbps
  • IMIX Traffic: 9.28 Gbps

(10k ACLs)

  • IPERF3 Traffic: 8.61 Gbps
  • IMIX Traffic: 3.21 Gbps

(AES-GCM-128 w/AES-NI)

  • IPERF3 Traffic: 3.2 Gbps
  • IMIX Traffic: 1.05 Gbps

Netgate 4200 performance tests conducted with pfSense Plus software version 23.09.1


CPU: Intel Atom C1110 with AVX2, 4-core @ 2.1 GHz. Delivers up to 3x on benchmarking results for routing, firewall and IPsec VPN versus the Netgate 4100.

Network Ports: Four 2.5G independent and configurable RJ45 LAN ports for maximum flexibility. Configure it for single or dual WAN, or high-availability failover. 

Storage: 16 GB eMMC 

Memory: 4 GB LPDDR5 RAM. DDR5 memory allows more stable, higher transfer rates for memory-intensive applications (e.g. IDS/IPS). 

Cooling: The passive cooling system and low power draw of the Netgate 4200 provides efficient thermal management and silent operation expected from smaller devices despite its significantly higher performance.


pfSense Plus software provides the performance, flexibility, reliability and business assurance expected from leading secure networking applications:

  • Up to 10 Gbps performance
  • Flexible 3rd-party application options
  • Traditional management mechanisms
  • Proven reliability
  • Complete business assurance support

All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include load balancing, traffic shaping, captive portal, UTM device, DNS/DHCP Server, IDS/IPS, failover WAN, and much more.





Intel Atom C1110 with AVX2, 4-core @ 2.1 GHz 

CPU Cores


Physical Network I/O ports

(4) 2.5 Gbps RJ-45 "direct" (unswitched) ethernet  LAN ports


16 GB eMMC (onboard - soldered) 



Physical Expansion Card Slots

1x M.2 (B-key slot) USB
1x M.2 (B-key slot) x1 PCIe 3.0, USB
1x M.2 (M-key slot) x4 PCIe 4.0

Console Port

1x auto-detect console port: "Cisco pinout" RJ45 + micro-USB (micro-USB cable included with each system)

USB Ports

1x USB 3.0 jacks (USB-A female) Located on right side rear when viewed from system front


3x 3-color LEDs (RGB) Software / bootloader controllable via GPIO


Desktop - Aluminum, plastic, and steel enclosure.
8.66 x 7.1 x 2.3 inches
220 x 180 x 60 mm


Optional wall mount kit


Passive - integrated aluminum chassis and heatsink


External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5.0A (60W), threaded (locking) barrel connector
- AC Inlet: IEC320-C7 (2 PIN) -
- Power Cord: One US, UK, EU or ANZ power cord included.
- US Power Cord: NEMA 1-15-P to IEC320-C7
- UK Power Cord: BS 1363 to IEC320-C7
- EU Power Cord: CEE7/16 to IEC320-C7
- ANZ Power Cord: AS 3112 (ungrounded) to IEC320-C7


0°C (32°F) to 40°C (104°F) - ambient

Certifications CE, CB, FCC (Class B), RoHS, CCATS, UL, RCM, UKCA



  • No additional software update cost for the life of the product.
  • No artificial limits or add-ons required to make your system fully functional.
  • No additional usage or feature-based pricing. Enjoy unlimited users, unlimited firewall rules, unlimited IPsec tunnels, dual WAN, etc.
  • Low power requirements to help save you money.
  • This system is designed for a long deployment lifetime.


  • Get all the security features you need to protect your home or business.
  • Flexible configuration and support for multi-WAN, high availability, VPN, load balancing, reporting and monitoring, etc.
  • Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring.  
  • Maximum Active Connections: 4,000,000


  • Manage pfSense Plus software settings through our web-based GUI.
  • No fumbling with a command-line interface or typing arcane commands.


  • Connect via encrypted Virtual Private Networks (VPN) between your offices, let mobile workers connect securely, or connect to the Cloud!
  • Use the built-in Amazon VPC Wizard to easily establish VPN connections with your Amazon EC2 cloud.

Best For:

  • Prosumers
  • Remote Workers
  • Small to Medium-Sized Business Networks
  • Small to Medium-Sized Branch Office
  • Managed Service Provider / Managed Security Service Provider (MSP/MSSP) On-Premises Appliance
  • Edge-to-Cloud
  • Everyone looking for great performance with no fan noise
  • Situations where a rack mount system is not an option
  • Anyone with High-Speed Gigabit Connections 
  • Many VPN Connections

Software Features


  • Policy-based routing
  • Multiple IP addresses per interface
  • Multiple WAN connections (with load balancing and failover)
  • Complex NAT mapping (outbound and inbound)
  • Concurrent IPv4 and IPv6 support
  • Optional multi-node High Availability (HA) clustering
  • Dynamic routing protocol support [w/pkg]

Firewall, Attack Prevention, & Content Filtering:

  • Extensive firewall rules
  • Stateful filtering & packet inspection
  • Per-interface configuration
  • Ethernet (layer 2) rule-based packet filtering
  • IP/DNS-based filtering and blacklisting [w/pkg]
  • IDS/IPS with Snort-based packet analyzer [w/pkg]
  • Layer 7 application detection and blocking [w/pkg]
  • Reverse proxy [w/pkg]
  • Geo/country blocking, IP block lists [w/pkg]


  • Site-to-site and remote access VPNs
  • IPsec, OpenVPN, WireGuard®
  • Split tunneling
  • IPsec policy-based and route-based protocol support
  • OpenVPN Data Channel Offload (DCO)
  • Intel IPsec Multi-Buffer (IIMB) where available

User Authentication & System Security:

  • User and group-based privileges
  • LDAP authentication
  • Automatic lockout after repeated attempts
  • Optional key-based SSH access
  • Traffic and bandwidth shaping
  • Captive portal with user data transfer quotas
  • External RADIUS authentication [w/pkg]


  • Setup wizard for initial configuration
  • Encrypted automatic backup to Netgate server
  • Easy configuration backup/restore
  • Multi-language support

Monitoring & Reporting:

  • Customizable dashboard with widgets
  • Local monitoring graphs
  • Remote logging
  • Network usage monitoring [w/pkg]
  • Network diagnostics [w/pkg]

Learn more about the power of pfSense Plus software here.


  • Quick Start Guide and other Manuals
  • Ships with the latest version of pfSense Plus software
  • Not PoE Compatible
  • Ships with your choice of Australian, UK, EU or USA cords. Easily changed by purchasing compatible AC power cord with IEC320-C7 (2 PIN) plug (visual example)
  • Note: This system uses the case as a heatsink. Please be aware it may feel warm when in use

Your purchase includes many free services and free technical support, which will help you get started with pfSense Plus software:

  • Complimentary software updates for the life of the product
  • Complimentary 24x7 zero-to-ping support from Netgate Global Support
  • Access to the continuously updated pfSense online documentation
  • ACB: Automatic Encrypted Configuration Backup Service


  • Technical assistance is available from Netgate Global Support 24x7x365. 
  • TAC Lite is included with the purchase of your Netgate appliance.
  • TAC Pro and TAC Enterprise SLA descriptions and pricing are available here
  • Help is available on our community forum here.


  • One-year manufacturer's hardware warranty information is here.
  • Extended warranties for US customers are available from Extend. More information on their offer and warranty policy can be viewed here.
  • Standard 30 day return policy. Netgate does not sell seconds or returns. An open box fee may apply.
  • All specifications subject to change without notice
  • Questions? We’d love to hear from you. Contact us at

Customer Reviews

Based on 4 reviews
Satisfaction Level:
Very Unhappy
Very Happy
4200 - A Very Capable Device

Shipping was quick and it arrived on a weekend! Purchasing it was a pain free experience.
The 4200 replaced an SG-2200 and was quite the upgrade! Support performed a conversion from the old device backup to a 4200 compatible configuration that saved me a lot of typing. It worked perfectly as long as I had the WAN port connected so it could install the necessary packages. Everything performs better and being able to exploit the 2.5 Gb ports is a real plus at this price point. I did add an NVMe card and am using that as the primary file system.
The only head scratcher is the numbering of the four ports. Numbers on the case are 1 to 4 (left to right). In PFSense+ they are identified as igc0 to igc3 (right to left). When using port labeled 1 on the case is actually igc3 in software. This feature does not affect the device in any way other than needing to know about it.
Really nice device. I hope it has the longevity of the SG-2200 but only time will tell. It’s only been in service for a couple of week.

Ilya Naumov
Satisfaction Level:
Very Unhappy
Very Happy
Great product

Outstanding product and a nice upgrade for my long-time preference, Ubiquiti EdgeMax routers. Very flexible and easily configurable, lots of tools available out of the box, great web UI, awesome extension capabilities thanks to third-party packages.

I would prefer to see at least one 10Gbps Ethernet and/or 10Gbps SFP+ interface(s). Also, it would be nice to have an SSD drive instead of eMMC. Still, I'm very happy with my purchase.

Paul Mavrovic
Satisfaction Level:
Very Unhappy
Very Happy
Great Choice for Home Pro / Small Business!

The Netgate SG-4200 is the perfect fit for the budding Home Pro and Small Business. It has the processing power to add a few 3rd party plugins to enhance the already great features that come default. Price point and features set hit the sweet spot for most customer needs.


Another good product from Netgate