Netgate 4200 MAX pfSense+ Security Gateway
RM 1.00
The most versatile security gateway in its class. Utilizes Intel® Atom® C3558 4-core CPU achieving benchmark results up to 3x faster in routing, firewall forwarding and IPsec VPN. Delivers over 9.2 Gbps routing across four independent 2.5 GbE ports.
Configure Your Device
Included with Purchase:
- 1 Year Hardware Warranty
- TAC Lite Support (24x7 zero-to-ping)
- pfSense+ Software License
- Complimentary Software Updates (Lifetime)
- Automatic Configuration Backup Service
Product Overview
The Netgate® 4200 with pfSense® Plus software is the most versatile security gateway in its class. The 4200 utilizes the blazing fast performance of 4-core Intel® Atom® C3558 CPU to achieve benchmark results up to three times faster in routing, firewall forwarding and IPsec VPN than the previous generation of security gateways.
The 4200 delivers over 9.2 Gbps of L3 routing across four independent 2.5 GbE flexible WAN/LAN ports. The Netgate 4200 is ideal for pro-home, small/medium businesses, branch and edge deployments that require flexible port configurations to handle 1 to 2.5 Gbps WAN capabilities across four discrete, unswitched 2.5 Gbps RJ-45 ethernet LAN ports - all in a silent desktop form factor.
Best For:
- Prosumers
- Remote Workers
- Small to Medium-Sized Business Networks
- Small to Medium-Sized Branch Office
- Managed Service Providers (MSP/MSSP) On-Premises Appliance
- Edge-to-Cloud deployments
- Anyone with High-Speed Gigabit Connections
- Situations requiring no fan noise
Product Features:
Low Total Cost of Ownership
- No artificial limits or add-ons required
- Unlimited users, firewall rules, IPsec tunnels
- Low power requirements
- Long deployment lifetime
Grows With You
- Multi-function security gateway
- Multi-WAN, HA, VPN support
- IDS/IPS with Snort/Suricata packages
- Maximum 4 million active connections
Easy GUI Management
- Web-based graphical interface
- No command line required
- Intuitive configuration
- Multi-language support
Secure Remote Access
- Encrypted VPN connections
- Site-to-site & remote access
- Amazon VPC Wizard
- Cloud connectivity
Key Highlights
- 8.75 Gbps Router Performance
- 8.61 Gbps Firewall Throughput
- 3.2 Gbps IPsec VPN
- Intel Atom 4-core @ 2.1GHz
- 4 GB LPDDR5 RAM
- 128 GB NVMe SSD
- 4x 2.5 GbE Ports
- Passive Cooling / Fanless
- Silent Operation
Important Note
This system uses the case as a heatsink. Please be aware it may feel warm when in use. This is normal operation for passive cooling systems.
Technical Specifications
| CPU | Intel Atom C3558 with AVX2, 4-core @ 2.1 GHz |
|---|---|
| System Memory | 4 GB LPDDR5 RAM (not expandable) |
| Storage | 128 GB NVMe M.2 SSD |
| Network Interfaces | Four 2.5 Gigabit Ethernet independent and configurable RJ45 ports Configure for single or dual WAN, or high-availability failover |
| Console Port | RJ45 Serial Console |
| USB Ports | 2x USB 3.0 Type-A ports |
| LED | Status LEDs for power and network activity |
| Power | External Power Supply 12V DC AC Inlet: IEC320-C7 (2 PIN) One US, UK, EU or ANZ power cord included |
| Power Consumption | Low power design with passive cooling |
| Operating Temperature | 32°F (0°C) to 122°F (50°C) |
| Enclosure | Desktop form factor with wall mount capability (optional kit) |
| Cooling | Passive (fanless - silent operation) |
| Dimensions | Compact desktop unit |
| Hardware Warranty | 1 year standard with purchase |
| Certifications | CE, FCC, RoHS |
Performance Metrics
Netgate 4200 performance tests conducted with pfSense Plus software version 23.09.1
Up to 3x Performance Improvement
The Netgate 4200 delivers benchmark results up to three times faster in routing, firewall forwarding and IPsec VPN compared to the previous Netgate 4100 generation.
L3 Forwarding (Router)
Firewall (10k ACLs)
IPsec VPN
(AES-GCM-128 w/AES-NI)Performance Note
Maximum Active Connections: 4,000,000. Intel Atom C3558 4-core @ 2.1 GHz with AVX2 delivers exceptional performance. Performance may vary based on configuration, enabled features, and network conditions.
pfSense Plus Software Features
Router
- Policy-based routing
- Multiple IP addresses per interface
- Multiple WAN connections (with load balancing and failover)
- Complex NAT mapping (outbound and inbound)
- Concurrent IPv4 and IPv6 support
- Optional multi-node High Availability (HA) clustering
- Dynamic routing protocol support [w/pkg]
Firewall & Security
- Extensive firewall rules
- Stateful filtering & packet inspection
- Per-interface configuration
- Ethernet (layer 2) rule-based packet filtering
- IP/DNS-based filtering and blacklisting [w/pkg]
- IDS/IPS with Snort-based packet analyzer [w/pkg]
- Layer 7 application detection and blocking [w/pkg]
- Reverse proxy [w/pkg]
- Geo/country blocking, IP block lists [w/pkg]
VPN
- Site-to-site and remote access VPNs
- IPsec, OpenVPN, WireGuard®
- Split tunneling
- IPsec policy-based and route-based protocol support
- OpenVPN Data Channel Offload (DCO)
- Intel IPsec Multi-Buffer (IIMB) where available
User Authentication
- User and group-based privileges
- LDAP authentication
- Automatic lockout after repeated attempts
- Optional key-based SSH access
- Traffic and bandwidth shaping
- Captive portal with user data transfer quotas
- External RADIUS authentication [w/pkg]
Configuration
- Setup wizard for initial configuration
- Encrypted automatic backup to Netgate server
- Easy configuration backup/restore
- Multi-language support
- Web-based GUI management
Monitoring & Reporting
- Customizable dashboard with widgets
- Local monitoring graphs
- Remote logging
- Network usage monitoring [w/pkg]
- Network diagnostics [w/pkg]
Support Information
- 24x7x365 Technical assistance from Netgate Global Support
- TAC Lite included with purchase
- TAC Pro and TAC Enterprise options available
- Community forum support
- Continuously updated pfSense documentation
- Complimentary Software Updates (Lifetime)
Warranty Information
- One year manufacturer's hardware warranty
- Extended warranties available
- 30 day return policy
- Professional installation services available
- Contact: enquiry@kflegacyresources.com
