The Netgate® 4200 with pfSense® Plus software is the most versatile security gateway in its class. The 4200 utilizes the blazing fast performance of 4-core Intel® Atom® C1110 CPU to achieve benchmark results up to three times faster in routing, firewall forwarding and IPsec VPN than the previous generation of security gateways. The 4200 delivers over 9.2 Gbps of L3 routing across four independent 2.5 GbE flexible WAN/LAN ports.
The Netgate 4200 is ideal for pro-home, small/medium businesses, branch and edge deployments that require flexible port configurations to support 1 to 2.5 Gbps WAN capabilities across four discrete, unswitched 2.5 Gbps RJ-45 ethernet LAN ports - all in a silent desktop form factor.
CPU: Intel Atom C1110 with AVX2, 4-core @ 2.1 GHz. Delivers up to 3x on benchmarking results for routing, firewall and IPsec VPN versus the Netgate 4100. Network Ports: Four 2.5G independent and configurable RJ45 LAN ports for maximum flexibility. Configure it for single or dual WAN, or high-availability failover. Storage: 16 GB eMMC Memory: 4 GB LPDDR5 RAM. DDR5 memory allows more stable, higher transfer rates for memory-intensive applications (e.g. IDS/IPS). Cooling: The passive cooling system and low power draw of the Netgate 4200 provides efficient thermal management and silent operation expected from smaller devices despite its significantly higher performance.
Performance Tests
L3 Forwarding
IPERF3 Traffic: 8.75 Gbps
IMIX Traffic: 9.28 Gbps
Firewall
(10k ACLs)
IPERF3 Traffic: 8.61 Gbps
IMIX Traffic: 3.21 Gbps
IPsec VPN
(AES-GCM-128 w/QAT)
IPERF3 Traffic: 3.20 Gbps
IMIX Traffic: 1.05 Gbps
Netgate 4200 performance tests conducted with pfSense Plus software version 23.09.1
CPU
Intel Atom C1110 with AVX2, 4-core @ 2.1 GHz
CPU Cores
4-Core
Physical Network I/O ports
(4) 2.5 Gbps RJ-45 "direct" (unswitched) ethernet LAN ports
Storage
16 GB eMMC (onboard - soldered) upgradable to 128 GB NVMe M.2 SSD with 4200 Max
1x auto-detect console port: "Cisco pinout" RJ45 + micro-USB (micro-USB cable included with each system)
USB Ports
1x USB 3.0 jacks (USB-A female) Located on right side rear when viewed from system front
LED
3x 3-color LEDs (RGB) Software / bootloader controllable via GPIO
Enclosure
- Desktop - Aluminum, plastic, and steel enclosure.
- 8.66 x 7.1 x 2.3 inches
- 220 x 180 x 60 mm
Mounting
Optional wall mount kit (available soon)
Cooling
Passive - integrated aluminum chassis and heatsink
Power
External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5.0A (60W), threaded (locking) barrel connector
- AC Inlet: IEC320-C7 (2 PIN) -
- Power Cord: One US, UK, EU or ANZ power cord included.
- US Power Cord: NEMA 1-15-P to IEC320-C7
- UK Power Cord: BS 1363 to IEC320-C7
- EU Power Cord: CEE7/16 to IEC320-C7
- ANZ Power Cord: AS 3112 (ungrounded) to IEC320-C7
Environmental
0°C (32°F) to 40°C (104°F) - ambient
Certifications
CE, CB, FCC (Class B), RoHS, CCATS, UL, RCM, UKCA
LOW TOTAL COST OF OWNERSHIP
No additional software update cost for the life of the product.
No artificial limits or add-ons required to make your system fully functional.
No additional usage or feature-based pricing. Enjoy unlimited users, unlimited firewall rules, unlimited IPsec tunnels, dual WAN, etc.
Low power requirements to help save you money.
This system is designed for a long deployment lifetime.
GROWS WITH YOU
From firewall to Unified Threat Management, get all the security features you need to protect your home or business.
Flexible configuration and support for multi-WAN, high availability, VPN, load balancing, reporting and monitoring, etc.
Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring.
Maximum Active Connections: 4,000,000
EASY GUI MANAGEMENT
Manage pfSense Plus software settings through our web-based GUI.
No fumbling with a command-line interface or typing arcane commands.
SECURE REMOTE ACCESS
Connect via encrypted Virtual Private Networks (VPN) between your offices, let mobile workers connect securely, or connect to the Cloud!
Use the built-in Amazon VPC Wizard to easily establish VPN connections with your Amazon EC2 cloud.
BEST FOR:
Prosumers
Remote Workers
Small to Medium-Sized Business Networks
Small to Medium-Sized Branch Office
Managed Service Provider / Managed Security Service Provider (MSP/MSSP) On-Premises Appliance
Edge-to-Cloud
Everyone looking for great performance with no fan noise
Situations where a rack mount system is not an option
Anyone with High-Speed Gigabit Connections
Many VPN Connections
Router:
Policy-based routing
Multiple IP addresses per interface
Multiple WAN connections (with load balancing and failover)
Complex NAT mapping (outbound and inbound)
Concurrent IPv4 and IPv6 support
Optional multi-node High Availability (HA) clustering
Dynamic routing protocol support [w/pkg]
Firewall, Attack Prevention, & Content Filtering:
Extensive firewall rules
Stateful filtering & packet inspection
Per-interface configuration
Ethernet (layer 2) rule-based packet filtering
IP/DNS-based filtering and blacklisting [w/pkg]
IDS/IPS with Snort-based packet analyzer [w/pkg]
Layer 7 application detection and blocking [w/pkg]
Reverse proxy [w/pkg]
Geo/country blocking, IP block lists [w/pkg]
Configuration:
Setup wizard for initial configuration
Encrypted automatic backup to Netgate server
Easy configuration backup/restore
Multi-language support
VPN:
Site-to-site and remote access VPNs
IPsec, OpenVPN, WireGuard®
Split tunneling
IPsec policy-based and route-based protocol support
OpenVPN Data Channel Offload (DCO)
Intel IPsec Multi-Buffer (IIMB)
Intel QuickAssist Technology (QAT)
User Authentication & System Security:
User and group-based privileges
LDAP authentication
Automatic lockout after repeated attempts
Optional key-based SSH access
Traffic and bandwidth shaping
Captive portal with user data transfer quotas
External RADIUS authentication [w/pkg]
Monitoring & Reporting:
Customizable dashboard with widgets
Local monitoring graphs
Remote logging
Network usage monitoring [w/pkg]
Network diagnostics [w/pkg]
QAT and DCO are supported only on specific hardware models
Learn more about the power of pfSense Plus software here.
Manufacturer Warranty
Netgate appliances are covered by the manufacturer’s standard one-year "return to base" warranty. This means that products may need to be returned either to the manufacturer or to us for assessment, repair, or replacement.
Warranty Extensions
These warranty extension options and services are primarily intended for business customers. This focus reflects the needs of business-critical equipment, where minimal downtime and rapid product replacements are essential.
3 Year Warranty Enhance your peace of mind with our Extended Warranty, adding 2 extra years to the standard 1-year manufacturer’s warranty for a total of 3 years of coverage.
3 Year Advanced Replacement With Advanced Replacement Service, upon a valid warranty claim, ITG ships a replacement immediately, even before receiving the faulty unit, ensuring minimal business downtime. This option still extends the standard 1-year manufacturer’s warranty by 2 extra years, for a total of 3 years of coverage.
ITG Shop is a trading name of IT and General Limited, registered in England and Wales with registered number: 09291031 and registered office: 20-22 Wenlock Road, London, N1 7GU. | VAT Reg. No: GB223541733
