JavaScript seems to be disabled in your browser. For the best experience on our site, be sure to turn on Javascript in your browser.

Account

Skip to the beginning of the images gallery

Netgate 4200 MAX pfSense+ Security Gateway

£504.00

In stock

SKU

NP-4200-pf+MAX_M4S128

Software Support

Warranty

Qty

The Netgate® 4200 with pfSense® Plus software is the most versatile security gateway in its class. The 4200 utilizes the blazing fast performance of 4-core Intel® Atom® C1110 CPU to achieve benchmark results up to three times faster in routing, firewall forwarding and IPsec VPN than the previous generation of security gateways. The 4200 delivers over 9.2 Gbps of L3 routing across four independent 2.5 GbE flexible WAN/LAN ports.

The Netgate 4200 is ideal for pro-home, small/medium businesses, branch and edge deployments that require flexible port configurations to support 1 to 2.5 Gbps WAN capabilities across four discrete, unswitched 2.5 Gbps RJ-45 ethernet LAN ports - all in a silent desktop form factor.

CPU: Intel Atom C1110 with AVX2, 4-core @ 2.1 GHz. Delivers up to 3x on benchmarking results for routing, firewall and IPsec VPN versus the Netgate 4100. Network Ports: Four 2.5G independent and configurable RJ45 LAN ports for maximum flexibility. Configure it for single or dual WAN, or high-availability failover. Storage: 128 GB NVMe M.2 SSD Memory: 4 GB LPDDR5 RAM. DDR5 memory allows more stable, higher transfer rates for memory-intensive applications (e.g. IDS/IPS). Cooling: The passive cooling system and low power draw of the Netgate 4200 provides efficient thermal management and silent operation expected from smaller devices despite its significantly higher performance.

Performance Tests

L3 Forwarding

IPERF3 Traffic: 8.75 Gbps
IMIX Traffic: 9.28 Gbps

Firewall (10k ACLs)

IPERF3 Traffic: 8.61 Gbps
IMIX Traffic: 3.21 Gbps

IPsec VPN (AES-GCM-128 w/QAT)

IPERF3 Traffic: 3.20 Gbps
IMIX Traffic: 1.05 Gbps

Netgate 4200 performance tests conducted with pfSense Plus software version 23.09.1

CPU	Intel Atom C1110 with AVX2, 4-core @ 2.1 GHz
CPU Cores	4-Core
Physical Network I/O ports	(4) 2.5 Gbps RJ-45 "direct" (unswitched) ethernet LAN ports
Storage	128 GB NVMe M.2 SSD
Memory	4 GB LPDDR5
Physical Expansion Card Slots	- 1x M.2 (B-key slot) USB - 1x M.2 (B-key slot) x1 PCIe 3.0, USB - 1x M.2 (M-key slot) x4 PCIe 4.0
Console Port	1x auto-detect console port: "Cisco pinout" RJ45 + micro-USB (micro-USB cable included with each system)
USB Ports	1x USB 3.0 jacks (USB-A female) Located on right side rear when viewed from system front
LED	3x 3-color LEDs (RGB) Software / bootloader controllable via GPIO
Enclosure	- Desktop - Aluminum, plastic, and steel enclosure. - 8.66 x 7.1 x 2.3 inches - 220 x 180 x 60 mm
Mounting	Optional wall mount kit (available soon)
Cooling	Passive - integrated aluminum chassis and heatsink
Power	External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5.0A (60W), threaded (locking) barrel connector - AC Inlet: IEC320-C7 (2 PIN) - - Power Cord: One US, UK, EU or ANZ power cord included. - US Power Cord: NEMA 1-15-P to IEC320-C7 - UK Power Cord: BS 1363 to IEC320-C7 - EU Power Cord: CEE7/16 to IEC320-C7 - ANZ Power Cord: AS 3112 (ungrounded) to IEC320-C7
Environmental	0°C (32°F) to 40°C (104°F) - ambient
Certifications	CE, CB, FCC (Class B), RoHS, CCATS, UL, RCM, UKCA

LOW TOTAL COST OF OWNERSHIP

No additional software update cost for the life of the product.
No artificial limits or add-ons required to make your system fully functional.
No additional usage or feature-based pricing. Enjoy unlimited users, unlimited firewall rules, unlimited IPsec tunnels, dual WAN, etc.
Low power requirements to help save you money.
This system is designed for a long deployment lifetime.

GROWS WITH YOU

From firewall to Unified Threat Management, get all the security features you need to protect your home or business.
Flexible configuration and support for multi-WAN, high availability, VPN, load balancing, reporting and monitoring, etc.
Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring.
Maximum Active Connections: 4,000,000

EASY GUI MANAGEMENT

Manage pfSense Plus software settings through our web-based GUI.
No fumbling with a command-line interface or typing arcane commands.

SECURE REMOTE ACCESS

Connect via encrypted Virtual Private Networks (VPN) between your offices, let mobile workers connect securely, or connect to the Cloud!
Use the built-in Amazon VPC Wizard to easily establish VPN connections with your Amazon EC2 cloud.

BEST FOR:

Prosumers
Remote Workers
Small to Medium-Sized Business Networks
Small to Medium-Sized Branch Office
Managed Service Provider / Managed Security Service Provider (MSP/MSSP) On-Premises Appliance
Edge-to-Cloud
Everyone looking for great performance with no fan noise
Situations where a rack mount system is not an option
Anyone with High-Speed Gigabit Connections
Many VPN Connections

Router:

Policy-based routing
Multiple IP addresses per interface
Multiple WAN connections (with load balancing and failover)
Complex NAT mapping (outbound and inbound)
Concurrent IPv4 and IPv6 support
Optional multi-node High Availability (HA) clustering
Dynamic routing protocol support [w/pkg]

Firewall, Attack Prevention, & Content Filtering:

Extensive firewall rules
Stateful filtering & packet inspection
Per-interface configuration
Ethernet (layer 2) rule-based packet filtering
IP/DNS-based filtering and blacklisting [w/pkg]
IDS/IPS with Snort-based packet analyzer [w/pkg]
Layer 7 application detection and blocking [w/pkg]
Reverse proxy [w/pkg]
Geo/country blocking, IP block lists [w/pkg]

Configuration:

Setup wizard for initial configuration
Encrypted automatic backup to Netgate server
Easy configuration backup/restore
Multi-language support

VPN:

Site-to-site and remote access VPNs
IPsec, OpenVPN, WireGuard®
Split tunneling
IPsec policy-based and route-based protocol support
OpenVPN Data Channel Offload (DCO)
Intel IPsec Multi-Buffer (IIMB)
Intel QuickAssist Technology (QAT)

User Authentication & System Security:

User and group-based privileges
LDAP authentication
Automatic lockout after repeated attempts
Optional key-based SSH access
Traffic and bandwidth shaping
Captive portal with user data transfer quotas
External RADIUS authentication [w/pkg]

Monitoring & Reporting:

Customizable dashboard with widgets
Local monitoring graphs
Remote logging
Network usage monitoring [w/pkg]
Network diagnostics [w/pkg]

QAT and DCO are supported only on specific hardware models

Learn more about the power of pfSense Plus software here.

Manufacturer Warranty

Netgate appliances are covered by the manufacturer’s standard one-year "return to base" warranty. This means that products may need to be returned either to the manufacturer or to us for assessment, repair, or replacement.

Warranty Extensions

These warranty extension options and services are primarily intended for business customers. This focus reflects the needs of business-critical equipment, where minimal downtime and rapid product replacements are essential.

3 Year Warranty
Enhance your peace of mind with our Extended Warranty, adding 2 extra years to the standard 1-year manufacturer’s warranty for a total of 3 years of coverage.

3 Year Advanced Replacement
With Advanced Replacement Service, upon a valid warranty claim, ITG ships a replacement immediately, even before receiving the faulty unit, ensuring minimal business downtime. This option still extends the standard 1-year manufacturer’s warranty by 2 extra years, for a total of 3 years of coverage.

For more details about warranty and extension options, please refer to our General Conditions of Sale.

ITG Shop is a trading name of IT and General Limited, registered in England and Wales with registered number: 09291031 and registered office: 20-22 Wenlock Road, London, N1 7GU. | VAT Reg. No: GB223541733