NETGATE 8300 MAX PFSENSE+ SECURITY GATEWAY

Experience unparalleled value and performance with the Netgate® 8300 Security Gateway powered by pfSense® Plus software. The Netgate 8300 is tailored for medium to large business, xSP, MSP/MSSP with high connectivity and stability requirements. This unit is enterprise-ready, featuring Netgate's most expandable chassis and hot-swappable PSUs, ensuring mission critical reliability and ease of maintenance.

This security gateway boasts a formidable 2.0 GHz, 8-core, 16-thread Intel® Xeon® D-1733NT processor with Intel AVX-512 for exceptional Firewall and VPN performance. The Netgate 8300 harnesses the power of Intel AVX-512 to accelerate VPN operations, bolstering throughput and reducing overhead while optimizing core firewall functions for enhanced network security and performance. With quad 10G SFP+ ports, quad 1G SFP ports, and triple 2.5G RJ-45 ports, plus expandability to 25G and 100G ports via PCIe cards, the Netgate 8300 future-proofs your network infrastructure, scaling effortlessly with your business. 

The Netgate 8300 maximizes your investment by delivering high-performance throughput at an incredibly competitive cost per gigabit. Compared to the 1541, it boasts a remarkable 47% firewall performance gain, 100% improvement in VPN and routing throughput, and a 175% increase in port density.

This compact 1U chassis optimizes space efficiency in server rooms and data centers, ideal for mission-critical deployments requiring robust high availability options and hotswap dual-power capability. Redefine your network standards by offering superior scalability, performance, and cost efficiency that exceeds industry expectations with Netgate's 8300 Security Gateway.

Hardware Comparison Chart

L3 Forwarding
(Router)

• IPERF3 Traffic: 36.7 Gbps

Firewall
(10k ACLs)

• IPERF3 Traffic: 26.8 Gbps

IPsec VPN
(AES-GCM-128 w/AES-NI)

• IPERF3 Traffic: 14.6 Gbps

Netgate 8300 performance tests conducted with pfSense Plus software version 24.03

The Netgate 8300 is also available with TNSR software. TNSR is a high-performance software router capable of producing considerable VPN and Routing performance increases far beyond the limits of pfSense Plus software.

CPU: Eight Core 2.0 GHz Intel Xeon CPU. Delivers 36 Gbps routing for everyday iPerf3-bidirectional traffic and over 26 Gbps of firewall throughput

Network Ports: 11 Independent 1G, 2.5G, and 10G ports. Maximum port flexibility - with 1G, 2.5G, and 10G Ethernet configurable as WAN or LAN across the combination of 11 RJ45 and SFP ports

Expandability: 1 x PCIe 3.0 x8 port for half-length low profile cards and 1 xPCIe 4.0 x16 port for full-height three-quarters length cards

Storage: 512 GB NVMe 2280 M-Key M.2 SSD

Memory: MAX: 32 GB DDR4, ECC, 2400MHz via 2x 16 GB UDIMM

Power: Dual hot-swappable PSU bays
Base: 1 x Internal 500W PSU (hot-swappable) included, 110V/240V AC input
MAX: 2 x Internal 500W PSU (hot-swappable) included, 110V/240V AC input

Cooling: Active - 7x chassis fans at the rear of the enclosure

pfSense Plus software provides the performance, flexibility, reliability, and business assurance expected from leading secure networking applications:

• Exceptional performance
• Flexible 3rd-party application options
• Traditional management mechanisms
• Proven reliability
• Complete business assurance support

All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include firewall, VPN, routing, load balancing, traffic shaping, captive portal, DNS/DHCP Server, IDS/IPS, failover WAN, and more.

LOW TOTAL COST OF OWNERSHIP

• pfSense+ software updates and security patches are provided free of charge for the life of the product
• No artificial limits or add-ons are needed for full functionality
• Enjoy unlimited users, firewall rules, IPsec tunnels, dual WAN, and more without additional usage or feature-based pricing
• Low power requirements to save money
• Designed for an extended deployment lifetime

GROWS WITH YOU

• Get all the security features you need to protect your business
• Flexible configuration and support for multi-WAN, High Availability, VPN, load balancing, reporting and monitoring, etc
• Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring. 1    

EASY GUI MANAGEMENT

• Intuitive web-based GUI includes :  
  • Configure advanced routing, firewall rules, VPNs, multi-WAN, and traffic shaping
  • Dashboard with real-time traffic graphs
  • Detailed diagnostics and reporting tools

SECURE REMOTE ACCESS

• Highly flexible, suitable for remote access and site-to-site connections, supporting a wide range of VPN types, including IPsec, OpenVPN, and WireGuard,
• Simplified multi-vendor supported VPN creation and management
• Secure connectivity for mobile and remote workers to the cloud
• Use the Amazon VPC Wizard to easily set up VPN connections with your Amazon EC2 cloud.

ROUTER:

• Policy-based routing
• Multiple IP addresses per interface
• Multiple WAN connections (with load balancing and failover)
• Complex NAT mapping (outbound and inbound)
• Concurrent IPv4 and IPv6 support
• Optional multi-node High Availability (HA) clustering
• Dynamic routing protocol support [w/pkg]

FIREWALL, ATTACK PREVENTION, & CONTENT FILTERING:

• Extensive firewall rules
• Stateful filtering & packet inspection
• Per-interface configuration
• Ethernet (layer 2) rule-based packet filtering
• IP/DNS-based filtering and blacklisting [w/pkg]
• IDS/IPS with Snort-based packet analyzer [w/pkg]
• Layer 7 application detection and blocking [w/pkg]
• Reverse proxy [w/pkg]
• Geo/country blocking, IP block lists [w/pkg]

VPN:

• Site-to-site and remote access VPNs
• IPsec, OpenVPN, WireGuard®
• Split tunneling
• IPsec policy-based and route-based protocol support
• OpenVPN Data Channel Offload (DCO)
• Intel IPsec Multi-Buffer (IIMB)
• Intel QuickAssist Technology (QAT)

USER AUTHENTICATION & SYSTEM SECURITY:

• User and group-based privileges
• LDAP authentication
• Automatic lockout after repeated attempts
• Optional key-based SSH access
• Traffic and bandwidth shaping
• Captive portal with user data transfer quotas
• External RADIUS authentication [w/pkg]

CONFIGURATION:

• Setup wizard for initial configuration
• Encrypted automatic backup to Netgate server
• Easy configuration backup/restore
• Multi-language support

MONITORING & REPORTING:

• Customizable dashboard with widgets
• Local monitoring graphs
• Remote logging
• Network usage monitoring [w/pkg]
• Network diagnostics [w/pkg]