The Netgate 4100 MAX pfSense+ Security Gateway is a versatile security appliance featuring a Dual-Core Intel Atom C3338R CPU, 4 GB DDR4 RAM, and flexible WAN/LAN ports, delivering high-performance routing and firewall capabilities for pro-home, small/medium businesses and edge deployments. The Netgate® 4100 with pfSense® Plus software is one of the most versatile security gateways in its class. It combines the power of a Dual-Core Intel® Atom® C3338R Core CPU with integrated QuickAssist & AES-NI, and 4 GB of memory for a snappy user experience, delivering over 8.15 Gbps of L3 routing across six independent - (2) 1 GbE and (4) 2.5 GbE - flexible WAN/LAN ports. The Netgate 4100 is ideal for pro-home, small/medium businesses, or edge deployments that require flexible port configurations to support 1 to 2.5 Gbps WAN capabilities across (2) RJ45 copper / SFP fiber Combo WAN ports and (4) discrete, unswitched 2.5 Gbps RJ-45 ethernet LAN ports - all in a silent desktop form factor. pfSense Plus software provides the performance, flexibility, reliability and business assurance expected from leading secure networking applications: Up to 10 Gbps performance, Flexible 3rd-party application options, Traditional management mechanisms, Proven reliability, Complete business assurance support. All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include load balancing, traffic shaping, captive portal, UTM device, DNS/DHCP Server, IDS/IPS, failover WAN, and much more. This system is designed for a long deployment lifetime, offering a low total cost of ownership with no artificial limits or add-ons required for full functionality. Enjoy unlimited users, firewall rules, and IPsec tunnels, along with dual WAN support, all with low power requirements. The Netgate 4100 grows with your needs, providing comprehensive security features from firewall to Unified Threat Management. It supports flexible configurations for multi-WAN, high availability, VPN, load balancing, reporting, and monitoring, with optional packages like Snort or Suricata for IDS/IPS. Manage pfSense Plus software settings easily through its web-based GUI, eliminating the need for command-line interfaces. Secure remote access is facilitated via encrypted Virtual Private Networks (VPN) using IPsec, OpenVPN, and WireGuard, including an Amazon VPC Wizard for cloud connections. CPU: Intel® Atom® C3338R with QAT, 2-core @ 1.8 GHz (Denverton family) CPU Cores: Dual Core Physical Network I/O ports: (2) Auto media detect 1 Gbps (RJ45 copper / SFP fiber) Combo WAN ports Physical Network I/O ports: (4) 2.5 Gbps RJ-45 "direct" (unswitched) ethernet LAN ports Storage: 128 GB NVMe M.2 SSD Memory: 4 GB DDR4 RAM, w/o ECC, single channel Physical Expansion Card Slots: 1x m.2 (Key-B slot) NVMe (PCIe) Console Port: 1x auto-detect console port: "Cisco pinout" RJ45 + micro-USB (micro-USB cable included) USB Ports: 2x USB 3.0 jacks (USB-A female) LED: 3x 4-color LEDs (RGB + amber) Software / bootloader controllable via Microchip MCU Enclosure: Desktop - Aluminum, plastic, and steel enclosure Mounting: Optional wall or rack mount kit Cooling: Passive Power: External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5.0A (60W), threaded (locking) barrel connector AC Inlet: IEC320-C7 (2 PIN) Power Cord: One US, UK, EU or ANZ power cord included depending on the regional system SKU on box. Environmental: 0°C (32°F) to 40°C (104°F) - ambient Certifications: CE, CB, FCC (Class B), RoHS, CCATS, UL, RCM, UKCA L3 Forwarding (IPERF3 Traffic): 8.15 Gbps L3 Forwarding (IMIX Traffic): 3.24 Gbps Firewall (10k ACLs) (IPERF3 Traffic): 4.09 Gbps Firewall (10k ACLs) (IMIX Traffic): 1.40 Gbps IPsec VPN (AES-GCM-128 w/QAT) (IPERF3 Traffic): 960 Mbps IPsec VPN (AES-GCM-128 w/QAT) (IMIX Traffic): 312 Mbps Software: pfSense Plus software Software Performance: Up to 10 Gbps Max Active Connections: 4,000,000 Support: Complimentary 24x7 zero-to-ping support from Netgate Global Support Support: Access to continuously updated pfSense online documentation Support: Automatic Encrypted Configuration Backup Service (ACB) Router: Policy-based routing Router: Multiple IP addresses per interface Router: Multiple WAN connections (with load balancing and failover) Router: Complex NAT mapping (outbound and inbound) Router: Concurrent IPv4 and IPv6 support Router: Optional multi-node High Availability (HA) clustering Router: Dynamic routing protocol support [w/pkg] Firewall, Attack Prevention, & Content Filtering: Extensive firewall rules Firewall, Attack Prevention, & Content Filtering: Stateful filtering & packet inspection Firewall, Attack Prevention, & Content Filtering: Per-interface configuration Firewall, Attack Prevention, & Content Filtering: Ethernet (layer 2) rule-based packet filtering Firewall, Attack Prevention, & Content Filtering: IP/DNS-based filtering and blacklisting [w/pkg] Firewall, Attack Prevention, & Content Filtering: IDS/IPS with Snort-based packet analyzer [w/pkg] Firewall, Attack Prevention, & Content Filtering: Layer 7 application detection and blocking [w/pkg] Firewall, Attack Prevention, & Content Filtering: Reverse proxy [w/pkg] Firewall, Attack Prevention, & Content Filtering: Geo/country blocking, IP block lists [w/pkg] VPN: Site-to-site and remote access VPNs VPN: IPsec, OpenVPN, WireGuard® VPN: Split tunneling VPN: IPsec policy-based and route-based protocol support VPN: OpenVPN Data Channel Offload (DCO) VPN: Intel IPsec Multi-Buffer (IIMB) where available User Authentication & System Security: User and group-based privileges User Authentication & System Security: LDAP authentication User Authentication & System Security: Automatic lockout after repeated attempts User Authentication & System Security: Optional key-based SSH access User Authentication & System Security: Traffic and bandwidth shaping User Authentication & System Security: Captive portal with user data transfer quotas User Authentication & System Security: External RADIUS authentication [w/pkg] Configuration: Setup wizard for initial configuration Configuration: Encrypted automatic backup to Netgate server Configuration: Easy configuration backup/restore Configuration: Multi-language support Monitoring & Reporting: Customizable dashboard with widgets Monitoring & Reporting: Local monitoring graphs Monitoring & Reporting: Remote logging Monitoring & Reporting: Network usage monitoring [w/pkg] Monitoring & Reporting: Network diagnostics [w/pkg]
