On Premises Firewall Appliances

A highly-configurable, robust feature set to meet all of your security requirements in a physical firewall appliance.

Find the Ideal Appliance for Your Needs

When hardware is a necessity, Netgate offers reliable, low power consumption options to fit your requirements. When bundled with Netgate Global Support, you have 24/7 assistance available.

Negate Appliances with pfSense® Software

CPU Storage Memory Network Ports
NEEDS WHO iPerf3 Traffic [2] IMIX Traffic [3]

SG-1100

SG-1100

$179

Dual Core Cortex-A53
ARM64 Soc @ 1.2GHz
8 GB eMMC 1 GB DDR4 (3) switched ports:
(3) 1 Gbps Marvell switch
with 1 Gbps uplink

SG-2100

SG-2100

$299

Dual Core Cortex-A53
ARM64 Soc @ 1.2GHz
8 GB eMMC
(Upgradeable)
4 GB DDR4 (1) GbE (RJ45/SFP) WAN port
(4) 1 GbE switched LAN ports
with 2.5 Gbps uplink

SG-3100

SG-3100

$399

Dual Core Cortex-A9
ARM7 SoC @ 1.6GHz
8 GB eMMC
(Upgradeable)
2 GB DDR4 (6) independent and switched ports:
(2) 1 Gbps WAN/OPT ports
(4) 1 Gbps LAN Marvell switch
with 2.5 Gbps uplink

SG-5100

SG-5100

$699

Quad Core Intel®
Atom C3558 @ 2.2GHz
8 GB eMMC
(Upgradable)
4 GB DDR4
(Upgradable to 16 GB)
(6) independent ports:
(4) GbE RJ45 Intel SoC Integrated MAC
(2) GbE RJ45 Intel i210

XG-7100

XG-7100

$899

Quad Core Intel Atom
C3558 @ 2.2G Hz
32 GB eMMC
(Upgradable to 256 GB M.2 SSD)
8 GB DDR4
(Expandable to 24 GB)
Up to (14) independent and switched ports:
(2) 10 Gbps Intel x553 SFP+ ports
(8) 1 Gbps Marvell switch
with 2 x 2.5 Gbps uplink

XG-7100 1U

XG-7100 1U

$999

Quad Core Intel Atom
C3558 @ 2.2G Hz
32 GB eMMC
(Upgradable to 256 GB M.2 SSD)
(Expandable to 2x 256 GB SSD SATA RAID1)
8 GB DDR4
(Expandable to 24 GB)
Up to (14) independent and switched ports:
(2) 10 Gbps Intel x553 SFP+ ports
(8) 1 Gbps Marvell switch
with 2 x 2.5 Gbps uplink
(Expandable to 4-Port Intel 1 GbE)
(Expandable to 2- or 4-Port X710 Intel 10 GbE SFP+)

XG-1537 1U

XG-1537 1U

$1,949

Eight Core Intel Xeon® 1.7 GHz 256 GB Micron M.2 SSD
(Expandable to 2x 256GB SSD SATA RAID1)
8 GB DDR4 RDIMM
(Expandable to 32 GB ECC)
Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10 GbE SFP+ LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2- or 4-Port X710 Intel 10 GbE SFP+)

XG-1541 1U

XG-1541 1U

$2,649

Eight Core Intel Xeon 2.1 GHz 256 GB Micron M.2 SSD
(Expandable to 2x 256GB SSD SATA RAID1)
16 GB DDR4 RDlMM
(Expandable to 32 GB ECC)
Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10GBase-T LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2- or 4-Port X710 Intel 10 GbE SFP+)

SG-1100

SG-1100

$179

Cost efficient / Low power
Sleek, compact
Silent operation (fanless)
Put on a desktop, shelf, or wall
Consumer
Remote Worker
Business
L3 Forwarding: 880 Mbps
Firewall: 656 Mbps
(10k ACLs)
IPsec VPN: 74.2 Mbps
(AES-128-CBC + SHA1)
L3 Forwarding: 480 Mbps
Firewall: 190 Mbps
(10k ACLs)
IPsec VPN: 46 Mbps
(AES-128-CBC + SHA1)

SG-2100

SG-2100

$299

Cost efficient / Low power
Sleek, compact
Silent operation (fanless)
Put on a desktop, shelf, or wall
Consumer
Remote Worker
Business
L3 Forwarding: 1.56 Gbps
Firewall: 881 Mbps
(10k ACLs)
IPsec VPN: 118 Mbps
(AES-128-CBC + SHA1)
L3 Forwarding: 842 Mbps
Firewall: 314 Mbps
(10k ACLs)
IPsec VPN: 68 Mbps
(AES-128-CBC + SHA1)

SG-3100

SG-3100

$399

Cost efficient / Low power
Sleek, compact
Silent operation (fanless)
Put on a desktop or shelf
Consumer
Remote Worker
Business
L3 Forwarding: 3.64 Gbps
Firewall: 2.44 Gbps
(10k ACLs)
IPsec VPN: 453 Mbps
(AES-128-CBC + SHA1)
L3 Forwarding: 1.98 Gbps
Firewall: 1.04 Gbps
(10k ACLs)
IPsec VPN: 108 Mbps
(AES-128-CBC + SHA1)

SG-5100

SG-5100

$699

Cost efficient / Low power
Silent operation (fanless)
Put on a desktop or shelf
QuickAssist & AES-NI
High Availability capability
Consumer
Remote Worker
Business
Enterprise
L3 Forwarding: 3.66 Gbps
Firewall: 3.65 Gbps
(10k ACLs)
IPsec VPN: 923 Mbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 3.78 Gbps
Firewall: 1.84 Gbps
(10k ACLs)
IPsec VPN: 380 Mbps
(AES-128-GCM / AES-NI)

XG-7100

XG-7100

$899

Expandable memory
Upgradeable storage
10 gigabit capability
QuickAssist & AES-NI
High Availability capability
Remote Worker
Business
Enterprise
L3 Forwarding: 18.60 Gbps [4]
Firewall: 6.81 Gbps
(10k ACLs)
IPsec VPN: 1.28 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 6.18 Gbps
Firewall: 1.85 Gbps
(10k ACLs)
IPsec VPN: 385 Mbps
(AES-128-GCM / AES-NI)

XG-7100 1U

XG-7100 1U

$999

Expandable memory
Upgradeable storage
Network expandable 1U rackmount
QuickAssist & AES-NI
High Availability option
Remote Worker
Business
Enterprise
L3 Forwarding: 18.60 Gbps
Firewall: 6.81 Gbps
(10k ACLs)
IPsec VPN: 1.28 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 6.18 Gbps
Firewall: 1.85 Gbps
(10k ACLs)
IPsec VPN: 385 Mbps
(AES-128-GCM / AES-NI)

XG-1537 1U

XG-1537 1U

$1,949

Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability option
Remote Worker
Business
Enterprise
L3 Forwarding: 16.40 Gbps
Firewall: 14.48 Gbps
(10k ACLs)
IPsec VPN: 2.77 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 11.46 Gbps
Firewall: 5.00 Gbps
(10k ACLs)
IPsec VPN: 2.10 Gbps
(AES-128-GCM / AES-NI)

XG-1541 1U

XG-1541 1U

$2,649

Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability option
Remote Worker
Business
Enterprise
L3 Forwarding: 17.40 Gbps
Firewall: 14.63 Gbps
(10k ACLs)
IPsec VPN: 2.82 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 15.41 Gbps
Firewall: 6.10 Gbps
(10k ACLs)
IPsec VPN: 2.81 Gbps
(AES-128-GCM / AES-NI)

Negate Appliances with TNSR® Software

CPU Storage Memory Network Ports
pfSense iPerf3 Traffic [2] TNSR iPerf3 Traffic [2] pfSense IMIX Traffic [3] TNSR IMIX Traffic [3]
Needs Who iPerf3 Traffic [2] IMIX Traffic [3]

SG-5100

SG-5100

Buy Now

Quad Core Intel®
Atom C3558 @ 2.2GHz
8 GB eMMC
(Upgradable)
4 GB DDR4
(Upgradable to 16 GB)
(6) independent ports:
(4) GbE RJ45 Intel SoC Integrated MAC
(2) GbE RJ45 Intel i210

XG-1537 1U

XG-1537 1U

Buy Now

Eight Core Intel Xeon® 1.7 GHz 256 GB Micron M.2 SSD
(Expandable to 512 GB)
8 GB DDR4 RDIMM
(Expandable to 32 GB ECC)
Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10 GbE SFP+ LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2-Port Chelsie 10 GbE SFP+)

XG-1541 1U

XG-1541 1U

Buy Now

Eight Core Intel Xeon 2.1 GHz 256 GB Micron M.2 SSD
(Expandable to 512 GB)
16 GB DDR4 RDlMM
(Expandable to 32 GB ECC)
Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10GBase-T LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2-Port Chelsie 10 GbE SFP+)

SG-5100

SG-5100

Buy Now

L3 Forwarding: 3.66 Gbps
Firewall: 3.65 Gbps
(10k ACLs)
IPsec VPN: 923 Mbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 3.55 Gbps
Firewall: 3.54 Gbps
(10k ACLs)
IPsec VPN: 3.45 Gbps
(AES-128-GCM / QAT)
L3 Forwarding: 3.78 Gbps
Firewall: 1.84 Gbps
(10k ACLs)
IPsec VPN: 380 Mbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 3.85 Gbps
Firewall: 3.85 Gbps
(10k ACLs)
IPsec VPN: 2.38 Gbps [5]
(AES-128-GCM / QAT)

XG-1537 1U

XG-1537 1U

Buy Now

L3 Forwarding: 16.40 Gbps
Firewall: 14.48 Gbps
(10k ACLs)
IPsec VPN: 2.77 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 18.72 Gbps
Firewall: 18.72 Gbps
(10k ACLs)
IPsec VPN: 9.52 Gbps
(AES-128-GCM / QAT)
L3 Forwarding: 11.46 Gbps
Firewall: 5.00 Gbps
(10k ACLs)
IPsec VPN: 2.10 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 18.95 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 6.59 Gbps [6]
(AES-128-GCM / QAT)

XG-1541 1U

XG-1541 1U

Buy Now

L3 Forwarding: 17.40 Gbps
Firewall: 14.63 Gbps
(10k ACLs)
IPsec VPN: 2.82 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 18.73 Gbps
Firewall: 18.71 Gbps
(10k ACLs)
IPsec VPN: 11.42 Gbps
(AES-128-GCM / QAT)
L3 Forwarding: 15.41 Gbps
Firewall: 6.10 Gbps
(10k ACLs)
IPsec VPN: 2.81 Gbps
(AES-128-GCM / AES-NI)
L3 Forwarding: 18.73 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 8.04 Gbps [7]
(AES-128-GCM / QAT)

SG-5100

SG-5100

Buy Now

Cost efficient / Low power
Silent operation (fanless)
Put on a desk or shelf
QuickAssist & AES-NI
High Availability capability
Consumer
Business
Enterprise
L3 Forwarding: 3.55 Gbps
Firewall: 3.54 Gbps
(10k ACLs)
IPsec VPN: 3.45 Gbps
(AES-128-GCM / QAT)
L3 Forwarding: 3.85 Gbps
Firewall: 3.85 Gbps
(10k ACLs)
IPsec VPN: 2.38 Gbps [5]
(AES-128-GCM / QAT)

XG-1537 1U

XG-1537 1U

Buy Now

Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability capability
Business
Enterprise
L3 Forwarding: 18.72 Gbps
Firewall: 18.72 Gbps
(10k ACLs)
IPsec VPN: 9.52 Gbps
(AES-128-GCM / QAT)
L3 Forwarding: 18.95 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 6.59 Gbps [6]
(AES-128-GCM / QAT)

XG-1541 1U

XG-1541 1U

Buy Now

Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability capability
Business
Enterprise
L3 Forwarding: 18.73 Gbps
Firewall: 18.71 Gbps
(10k ACLs)
IPsec VPN: 11.42 Gbps
(AES-128-GCM / QAT)
L3 Forwarding: 18.73 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 8.04 Gbps [7]
(AES-128-GCM / QAT)
  1. All performance tests are based upon maximum memory configuration and base model port configuration (no port expansion). Throughput measurements are based upon maximum bidirectional traffic across all available ports.
  2. Basic Traffic (Primarily Data Download): iPerf3 traffic is TCP - 1460 byte payload and TCP framing.
  3. Complex Traffic (Voice, Data, Video): Simple IMIX traffic is sets of 7 (40) byte packets, (4) 576 byte packets, 1 (1500) byte packets, plus Ethernet framing overhead.
  4. XG-7100 performance number exceeds that of the XG-1537/41, as all tests were run by maximizing throughput across available base model physical ports (XG-7100 with 10 ports vs. XG-1537/41 with only 4 ports). The XG-1537/41 exceed the XG-7100 by per-port performance.
  5. SG-5100 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 and IMIX traffic for IPsec performance tests.
  6. XG-1537 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.
  7. XG-1541 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.

Want to talk about your requirements?

Contact us if you need more information. We're here to help.