On Premises Firewall Appliances

A highly-configurable, robust feature set to meet all of your security requirements in a physical firewall appliance.

Find the Ideal Appliance for Your Needs

When hardware is a necessity, Netgate offers reliable, low power consumption options to fit your requirements. When bundled with Netgate Global Support, you have 24/7 assistance available.

Netgate Appliances with pfSense® Software

CPU Storage Memory Network Ports
NEEDS WHO iPerf3 Traffic [2] IMIX Traffic [3]

SG-1100

SG-1100

$179

 Dual Core Cortex-A53
ARM64 Soc @ 1.2GHz 		8 GB eMMC 1 GB DDR4 (3) switched ports:
(3) 1 Gbps Marvell switch
with 1 Gbps uplink

SG-2100

SG-2100

$299

 Dual Core Cortex-A53
ARM64 Soc @ 1.2GHz 		8 GB eMMC
(Upgradeable) 		4 GB DDR4 (1) GbE (RJ45/SFP) WAN port
(4) 1 GbE switched LAN ports
with 2.5 Gbps uplink

SG-3100

SG-3100

$399

 Dual Core Cortex-A9
ARM7 SoC @ 1.6GHz 		8 GB eMMC
(Upgradeable) 		2 GB DDR4 (6) independent and switched ports:
(2) 1 Gbps WAN/OPT ports
(4) 1 Gbps LAN Marvell switch
with 2.5 Gbps uplink

SG-5100

SG-5100

$699

 Quad Core Intel®
Atom™ C3558 @ 2.2GHz 		8 GB eMMC
(Upgradable) 		4 GB DDR4
(Upgradable to 16 GB) 		(6) independent ports:
(4) GbE RJ45 Intel SoC Integrated MAC
(2) GbE RJ45 Intel i210

XG-7100

XG-7100

$899

 Quad Core Intel Atom
C3558 @ 2.2G Hz 		32 GB eMMC
(Upgradable to 256 GB M.2 SSD)
 8 GB DDR4
(Expandable to 24 GB) 		Up to (14) independent and switched ports:
(2) 10 Gbps Intel x553 SFP+ ports
(8) 1 Gbps Marvell switch
with 2 x 2.5 Gbps uplink

XG-7100 1U

XG-7100 1U

$999

 Quad Core Intel Atom
C3558 @ 2.2G Hz 		32 GB eMMC
(Upgradable to 256 GB M.2 SSD)
(Expandable to 2x 256 GB SSD SATA RAID1) 		8 GB DDR4
(Expandable to 24 GB) 		Up to (14) independent and switched ports:
(2) 10 Gbps Intel x553 SFP+ ports
(8) 1 Gbps Marvell switch
with 2 x 2.5 Gbps uplink
(Expandable to 4-Port Intel 1 GbE)
(Expandable to 2- or 4-Port X710 Intel 10 GbE SFP+)

XG-1537 1U

XG-1537 1U

$1,949

 Eight Core Intel Xeon® 1.7 GHz 256 GB Micron M.2 SSD
(Expandable to 2x 256GB SSD SATA RAID1) 		8 GB DDR4 RDIMM
(Expandable to 32 GB ECC) 		Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10 GbE SFP+ LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2- or 4-Port X710 Intel 10 GbE SFP+)

XG-1541 1U

XG-1541 1U

$2,649

 Eight Core Intel Xeon 2.1 GHz 256 GB Micron M.2 SSD
(Expandable to 2x 256GB SSD SATA RAID1) 		16 GB DDR4 RDlMM
(Expandable to 32 GB ECC) 		Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10GBase-T LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2- or 4-Port X710 Intel 10 GbE SFP+)

SG-1100

SG-1100

$179

 Cost efficient / Low power
Sleek, compact
Silent operation (fanless)
Put on a desktop, shelf, or wall 		Consumer
Remote Worker
Business 		L3 Forwarding: 880 Mbps
Firewall: 656 Mbps
(10k ACLs)
IPsec VPN: 74.2 Mbps
(AES-128-CBC + SHA1) 		L3 Forwarding: 480 Mbps
Firewall: 190 Mbps
(10k ACLs)
IPsec VPN: 46 Mbps
(AES-128-CBC + SHA1)

SG-2100

SG-2100

$299

 Cost efficient / Low power
Sleek, compact
Silent operation (fanless)
Put on a desktop, shelf, or wall 		Consumer
Remote Worker
Business 		L3 Forwarding: 1.56 Gbps
Firewall: 881 Mbps
(10k ACLs)
IPsec VPN: 118 Mbps
(AES-128-CBC + SHA1) 		L3 Forwarding: 842 Mbps
Firewall: 314 Mbps
(10k ACLs)
IPsec VPN: 68 Mbps
(AES-128-CBC + SHA1)

SG-3100

SG-3100

$399

 Cost efficient / Low power
Sleek, compact
Silent operation (fanless)
Put on a desktop or shelf
 Consumer
Remote Worker
Business 		L3 Forwarding: 3.64 Gbps
Firewall: 2.44 Gbps
(10k ACLs)
IPsec VPN: 453 Mbps
(AES-128-CBC + SHA1) 		L3 Forwarding: 1.98 Gbps
Firewall: 1.04 Gbps
(10k ACLs)
IPsec VPN: 108 Mbps
(AES-128-CBC + SHA1)

SG-5100

SG-5100

$699

 Cost efficient / Low power
Silent operation (fanless)
Put on a desktop or shelf
QuickAssist & AES-NI
High Availability capability 		Consumer
Remote Worker
Business
Enterprise 		L3 Forwarding: 3.66 Gbps
Firewall: 3.65 Gbps
(10k ACLs)
IPsec VPN: 923 Mbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 3.78 Gbps
Firewall: 1.84 Gbps
(10k ACLs)
IPsec VPN: 380 Mbps
(AES-128-GCM / AES-NI)

XG-7100

XG-7100

$899

 Expandable memory
Upgradeable storage
10 gigabit capability
QuickAssist & AES-NI
High Availability capability 		Remote Worker
Business
Enterprise 		L3 Forwarding: 18.60 Gbps [4]
Firewall: 6.81 Gbps
(10k ACLs)
IPsec VPN: 1.28 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 6.18 Gbps
Firewall: 1.85 Gbps
(10k ACLs)
IPsec VPN: 385 Mbps
(AES-128-GCM / AES-NI)

XG-7100 1U

XG-7100 1U

$999

 Expandable memory
Upgradeable storage
Network expandable 1U rackmount
QuickAssist & AES-NI
High Availability option 		Remote Worker
Business
Enterprise 		L3 Forwarding: 18.60 Gbps
Firewall: 6.81 Gbps
(10k ACLs)
IPsec VPN: 1.28 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 6.18 Gbps
Firewall: 1.85 Gbps
(10k ACLs)
IPsec VPN: 385 Mbps
(AES-128-GCM / AES-NI)

XG-1537 1U

XG-1537 1U

$1,949

 Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability option 		Remote Worker
Business
Enterprise 		L3 Forwarding: 16.40 Gbps
Firewall: 14.48 Gbps
(10k ACLs)
IPsec VPN: 2.77 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 11.46 Gbps
Firewall: 5.00 Gbps
(10k ACLs)
IPsec VPN: 2.10 Gbps
(AES-128-GCM / AES-NI)

XG-1541 1U

XG-1541 1U

$2,649

 Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability option 		Remote Worker
Business
Enterprise 		L3 Forwarding: 17.40 Gbps
Firewall: 14.63 Gbps
(10k ACLs)
IPsec VPN: 2.82 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 15.41 Gbps
Firewall: 6.10 Gbps
(10k ACLs)
IPsec VPN: 2.81 Gbps
(AES-128-GCM / AES-NI)

Netgate Appliances with TNSR® Software

CPU Storage Memory Network Ports
pfSense iPerf3 Traffic [2] TNSR iPerf3 Traffic [2] pfSense IMIX Traffic [3] TNSR IMIX Traffic [3]
Needs Who iPerf3 Traffic [2] IMIX Traffic [3]

SG-5100

SG-5100

Buy Now

 Quad Core Intel®
Atom™ C3558 @ 2.2GHz 		8 GB eMMC
(Upgradable) 		4 GB DDR4
(Upgradable to 16 GB) 		(6) independent ports:
(4) GbE RJ45 Intel SoC Integrated MAC
(2) GbE RJ45 Intel i210

XG-1537 1U

XG-1537 1U

Buy Now

 Eight Core Intel Xeon® 1.7 GHz 256 GB Micron M.2 SSD
(Expandable to 512 GB) 		8 GB DDR4 RDIMM
(Expandable to 32 GB ECC) 		Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10 GbE SFP+ LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2-Port Chelsie 10 GbE SFP+)

XG-1541 1U

XG-1541 1U

Buy Now

 Eight Core Intel Xeon 2.1 GHz 256 GB Micron M.2 SSD
(Expandable to 512 GB) 		16 GB DDR4 RDlMM
(Expandable to 32 GB ECC) 		Up to (8) independent ports:
(2) 1 GbE LAN/WAN via Intel i350-AM2
(2) 10GBase-T LAN/WAN via SoC
(Expandable to 4-Port Intel GbE)
(Expandable to 2-Port Chelsie 10 GbE SFP+)

SG-5100

SG-5100

Buy Now

 L3 Forwarding: 3.66 Gbps
Firewall: 3.65 Gbps
(10k ACLs)
IPsec VPN: 923 Mbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 3.55 Gbps
Firewall: 3.54 Gbps
(10k ACLs)
IPsec VPN: 3.45 Gbps
(AES-128-GCM / QAT) 		L3 Forwarding: 3.78 Gbps
Firewall: 1.84 Gbps
(10k ACLs)
IPsec VPN: 380 Mbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 3.85 Gbps
Firewall: 3.85 Gbps
(10k ACLs)
IPsec VPN: 2.38 Gbps [5]
(AES-128-GCM / QAT)

XG-1537 1U

XG-1537 1U

Buy Now

 L3 Forwarding: 16.40 Gbps
Firewall: 14.48 Gbps
(10k ACLs)
IPsec VPN: 2.77 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 18.72 Gbps
Firewall: 18.72 Gbps
(10k ACLs)
IPsec VPN: 9.52 Gbps
(AES-128-GCM / QAT) 		L3 Forwarding: 11.46 Gbps
Firewall: 5.00 Gbps
(10k ACLs)
IPsec VPN: 2.10 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 18.95 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 6.59 Gbps [6]
(AES-128-GCM / QAT)

XG-1541 1U

XG-1541 1U

Buy Now

 L3 Forwarding: 17.40 Gbps
Firewall: 14.63 Gbps
(10k ACLs)
IPsec VPN: 2.82 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 18.73 Gbps
Firewall: 18.71 Gbps
(10k ACLs)
IPsec VPN: 11.42 Gbps
(AES-128-GCM / QAT) 		L3 Forwarding: 15.41 Gbps
Firewall: 6.10 Gbps
(10k ACLs)
IPsec VPN: 2.81 Gbps
(AES-128-GCM / AES-NI) 		L3 Forwarding: 18.73 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 8.04 Gbps [7]
(AES-128-GCM / QAT)

SG-5100

SG-5100

Buy Now

 Cost efficient / Low power
Silent operation (fanless)
Put on a desk or shelf
QuickAssist & AES-NI
High Availability capability 		Consumer
Business
Enterprise 		L3 Forwarding: 3.55 Gbps
Firewall: 3.54 Gbps
(10k ACLs)
IPsec VPN: 3.45 Gbps
(AES-128-GCM / QAT) 		L3 Forwarding: 3.85 Gbps
Firewall: 3.85 Gbps
(10k ACLs)
IPsec VPN: 2.38 Gbps [5]
(AES-128-GCM / QAT)

XG-1537 1U

XG-1537 1U

Buy Now

 Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability capability 		Business
Enterprise 		L3 Forwarding: 18.72 Gbps
Firewall: 18.72 Gbps
(10k ACLs)
IPsec VPN: 9.52 Gbps
(AES-128-GCM / QAT) 		L3 Forwarding: 18.95 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 6.59 Gbps [6]
(AES-128-GCM / QAT)

XG-1541 1U

XG-1541 1U

Buy Now

 Rack Mount
Expandable memory
Expandable storage
Network expandable
High Availability capability 		Business
Enterprise 		L3 Forwarding: 18.73 Gbps
Firewall: 18.71 Gbps
(10k ACLs)
IPsec VPN: 11.42 Gbps
(AES-128-GCM / QAT) 		L3 Forwarding: 18.73 Gbps
Firewall: 18.95 Gbps
(10k ACLs)
IPsec VPN: 8.04 Gbps [7]
(AES-128-GCM / QAT)
  1. All performance tests are based upon maximum memory configuration and base model port configuration (no port expansion). Throughput measurements are based upon maximum bidirectional traffic across all available ports.
  2. Basic Traffic (Primarily Data Download): iPerf3 traffic is TCP - 1460 byte payload and TCP framing.
  3. Complex Traffic (Voice, Data, Video): Simple IMIX traffic is sets of 7 (40) byte packets, (4) 576 byte packets, 1 (1500) byte packets, plus Ethernet framing overhead.
  4. XG-7100 performance number exceeds that of the XG-1537/41, as all tests were run by maximizing throughput across available base model physical ports (XG-7100 with 10 ports vs. XG-1537/41 with only 4 ports). The XG-1537/41 exceed the XG-7100 by per-port performance.
  5. SG-5100 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 and IMIX traffic for IPsec performance tests.
  6. XG-1537 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.
  7. XG-1541 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.

Want to talk about your requirements?

Contact us if you need more information. We're here to help.