Netgate 2100 MAX pfSense+ Security Gateway
RM 1.00
Enhanced performance model with MAX configuration. Features 128 GB M.2 SATA SSD storage for expanded capabilities. Pound-for-pound delivers unbeatable performance and flexibility in its class.
Configure Your Device
Included with Purchase:
- 1 Year Hardware Warranty
- TAC Lite Support (24x7 zero-to-ping)
- pfSense+ Software License
- Automatic Configuration Backup Service
- Console Cable (MiniUSB)
Product Overview
Pound-for-pound, the Netgate® 2100 MAX security gateway appliance with pfSense® Plus software delivers unbeatable performance and flexibility in its class. It is ideal for home, remote worker, and small business deployments that require more compute resources to support the use of multiple pfSense add-on packages and VPN performance to support multiple user- and site-to-site connections.
Featuring a Dual core ARM Cortex A53 1.2 GHz CPU, a dedicated 1 GbE WAN port (RJ45/SFP combo), (4) 1 GbE Marvell switch ports, 4GB of DDR4 RAM, and 128 GB M.2 SATA 2242 SSD storage. The 2100 has additional expansion slots available for DIY LTE, Wi-Fi or M.2 SSD expansion.
The Netgate 2100 MAX is a compact and powerful desktop device. Leveraging a Dual core ARM Cortex A53 processor @ 1.2GHz and 4GB of DDR4 RAM, the Netgate 2100 shines as a 2.20 Gbps router, 964 Mbps firewall, or 254 Mbps IPsec VPN solution.
Best For:
- Consumers & Home Users
- Remote Workers
- Small to Medium-Sized Business Networks
- Small to Medium-Sized Branch Office
- Managed Service Providers (MSP/MSSP) On-Premises Appliance
Product Features:
Low Total Cost of Ownership
- No artificial limits or add-ons required
- Unlimited users, firewall rules, IPsec tunnels
- Low power requirements
- Long deployment lifetime
Grows With You
- Multi-function security gateway
- Multi-WAN, HA, VPN support
- Load balancing & monitoring
- Maximum 1 million active connections
Easy GUI Management
- Web-based graphical interface
- No command line required
- Intuitive configuration
- Multi-language support
Secure Remote Access
- Encrypted VPN connections
- Site-to-site & remote access
- Amazon VPC Wizard
- Cloud connectivity
Key Highlights
- 2.20 Gbps Router Performance
- 964 Mbps Firewall Throughput
- 254 Mbps IPsec VPN
- 128 GB SSD Storage (MAX)
- 4 GB DDR4 RAM
- 5x GbE Ports
- Expansion Slots (LTE/WiFi)
- Passive Cooling
Expansion Options
- M.2 'B' key socket (SSD, LTE)
- miniPCIe slot (WiFi)
- microSIM slot
Technical Specifications
| CPU | Marvell Armada 3720 (88F3720) ARMv8-A 64-bit Cortex A53 @ 1.2GHz with NEON SIMD and FPU |
|---|---|
| CPU Cores | Dual Core |
| System Memory | 4 GB DDR4 RAM (not expandable) |
| Storage | 128 GB M.2 SATA 2242 SSD (not NVMe compatible) |
| Network Interfaces | One 1 Gigabit Ethernet WAN port (RJ45 / SFP Combo) Four 1 Gigabit Ethernet LAN ports (Marvell 88E6141 switch) LAN ports can be repurposed for additional WAN ports |
| Expansion | 1x M.2 'B' key sockets (SSD, LTE) 1x miniPCIe (WiFi) microSIM slot |
| Console Port | MiniUSB (console cable included) |
| USB Ports | 1x USB 2.0 port |
| LED | 3 full color RGB LEDs |
| Power | External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 2.0A, threaded barrel connector AC Inlet: IEC320-C7 (2 PIN) |
| Power Consumption | Low power design for efficient operation |
| Operating Temperature | 32°F (0°C) to 122°F (50°C) |
| Enclosure | Desktop 1.7" (42.2 mm) tall x 4.25" (108 mm) deep x 6.8" (172.7 mm) wide with integrated keyholes for wall mount |
| Cooling | Passive (fanless design) |
| Hardware Warranty | 1 year standard with purchase |
| Certifications | CE, FCC (Class B), RoHS, UL, RCM, VCCI, UKCA |
Performance Metrics
Netgate 2100 performance tests conducted with pfSense Plus software version 22.01
L3 Forwarding
Firewall (10k ACLs)
IPsec VPN
(AES-GCM-128 / AES-NI w/ SafeXcel)Performance Note
Maximum Active Connections: 1 million. The Dual core ARM v8 Cortex-A53 1.2 GHz delivers exceptional performance for common workloads. Performance may vary based on configuration, enabled features, and network conditions.
pfSense Plus Software Features
Router
- Policy-based routing
- Multiple IP addresses per interface
- Multiple WAN connections (with load balancing and failover)
- Complex NAT mapping (outbound and inbound)
- Concurrent IPv4 and IPv6 support
- Optional multi-node High Availability (HA) clustering
- Dynamic routing protocol support [w/pkg]
Firewall & Security
- Extensive firewall rules
- Stateful filtering & packet inspection
- Per-interface configuration
- Ethernet (layer 2) rule-based packet filtering
- IP/DNS-based filtering and blacklisting [w/pkg]
- IDS/IPS with Snort-based packet analyzer [w/pkg]
- Layer 7 application detection and blocking [w/pkg]
- Reverse proxy [w/pkg]
- Geo/country blocking, IP block lists [w/pkg]
VPN
- Site-to-site and remote access VPNs
- IPsec, OpenVPN, WireGuard®
- Split tunneling
- IPsec policy-based and route-based protocol support
- OpenVPN Data Channel Offload (DCO)
- Intel® IPsec Multi-Buffer (IIMB) where available
User Authentication
- User and group-based privileges
- LDAP authentication
- Automatic lockout after repeated attempts
- Optional key-based SSH access
- Traffic and bandwidth shaping
- Captive portal with user data transfer quotas
- External RADIUS authentication [w/pkg]
Configuration
- Setup wizard for initial configuration
- Encrypted automatic backup to Netgate server
- Easy configuration backup/restore
- Multi-language support
- Web-based GUI management
Monitoring & Reporting
- Customizable dashboard with widgets
- Local monitoring graphs
- Remote logging
- Network usage monitoring [w/pkg]
- Network diagnostics [w/pkg]
Support Information
- 24x7x365 Technical assistance from Netgate Global Support
- TAC Lite included with purchase
- TAC Pro and TAC Enterprise options available
- Community forum support
- Continuously updated pfSense documentation
Warranty Information
- One year manufacturer's hardware warranty
- Extended warranties available
- 30 day return policy
- Professional installation services available
- Contact: enquiry@kflegacyresources.com
