The Netgate® 5200 with pfSense® Plus software is a powerful, next-generation security gateway designed to deliver exceptional performance, flexibility, and reliability for modern business networks. Powered by a 4-core Intel® Atom® X7405C processor with speeds of up to 3.4 GHz, the 5200 delivers high-performance routing, firewall protection, and secure VPN connectivity. Equipped with four independent 2.5 GbE flexible WAN/LAN ports, an additional Gigabit Ethernet port, 8GB of LPDDR5 memory, and a 128GB NVMe SSD, the Netgate 5200 provides a versatile and scalable network security solution for demanding environments.
Professional Services
Unlock your pfSense's full potential with our expert assistance, tailored project support, 24/7 remote monitoring, and custom maintenance packages.
Switching from SonicWall, DrayTek, WatchGuard, FortiGate or Cisco to Netgate pfSense Plus?
Moving to Netgate pfSense Plus doesn’t have to mean starting from scratch. We’ll review your existing firewall, rebuild your rules and VPNs, test everything in advance, and pre-configure your new appliance so it arrives ready to plug in and go, helping you minimise disruption and achieve a seamless cutover with zero downtime.
1x auto-detect combo console port: "Cisco pinout" RJ45 or Micro-B (6 ft RJ45 to USB-A console cable included)
USB Ports
1x Type-A USB 3.2 (up to 5 Gbps)
1x Type-A USB 2.0 (up to 480 Mbps)
RTC (battery)
CR2032 (20mm) lithium coin cell onboard, 3VDC
LED
3x RGB + Amber LEDs
Power Buttons / Switches
1x pushbutton (front) - software controlled
Enclosure
Desktop - Sheet steel enclosure, powder coat finish
8.50 x 10.24 x 1.73 inches
216 x 260 x 44 mm
5.9 lbs / 2.7 kg
Mounting
Desktop
Optional wall mount kit
Optional single rack mount kit
Optional dual rack mount kit
Cooling
Active - internal chassis cooling fans at the rear of the enclosure (airflow direction is front-to-back)
Power
External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5.0A (60W), threaded (locking) DC barrel connector
AC Inlet: IEC320-C14 (3 PIN)
Power Cord: One US, UK, EU or ANZ power cord included
pfSense Plus software updates and security patches are provided free of charge for the life of the product.
No artificial limits or add-ons required to make your system fully functional.
No additional usage or feature-based pricing. Enjoy unlimited users, unlimited firewall rules, unlimited IPsec tunnels, dual WAN, etc.
Low power requirements to help save you money.
This system is designed for a long deployment lifetime.
GROWS WITH YOU
Get all the security features you need to protect your business, from firewall to inline Threat Detection and Prevention.
Flexible configuration and support for multi-WAN, high availability, VPN, load balancing, reporting and monitoring, etc.
Integrated Threatgate DNS filtering with optional Zero-Trust Egress helps protect against online threats, data exfiltration and remote-control attacks.
Add optional packages such as Snort version 3 or Suricata for Threat Detection and Prevention and network security monitoring.
8GB of LPDDR5 memory gives ample headroom to run multiple security packages simultaneously.
EASY MANAGEMENT
Fully configurable through the pfSense Plus web-based GUI, the Netgate Nexus GUI, or the full-featured REST API.
Netgate Nexus Multi-Instance Management ready.
Dashboard with real-time traffic graphs, plus detailed diagnostics and reporting tools.
SECURE REMOTE ACCESS
Site-to-site and remote access VPNs with IPsec, OpenVPN and WireGuard, connecting your offices, mobile workers and the Cloud.
Use the built-in Amazon VPC Wizard to easily establish VPN connections with your Amazon EC2 cloud.
BEST FOR:
Small to Medium-Sized Business Networks
Branch Office and Edge Deployments
High Availability Use Cases
Multi-Gigabit Internet Connections (up to 2.5 Gbps per interface)
Managed Service Provider / Managed Security Service Provider (MSP/MSSP) On-Premises Appliance
Anyone needing more performance and memory in a quiet, desktop-friendly footprint without stepping up to a rack-mount system
Router:
Policy-based routing
Multiple IP addresses per interface
Multiple WAN connections (with load balancing and failover)
Complex NAT mapping (outbound and inbound)
Concurrent IPv4 and IPv6 support
Optional multi-node High Availability (HA) clustering
Dynamic routing protocol support [w/pkg]
Firewall, Attack Prevention, & Content Filtering:
Extensive firewall rules
Stateful filtering & packet inspection
Per-interface configuration
Ethernet (layer 2) rule-based packet filtering
Threatgate DNS filtering (with Zero-Trust Egress)
IP/DNS-based filtering and blacklisting [w/pkg]
Threat Detection and Prevention with Snort version 3-based packet analyser [w/pkg]
Layer 7 application detection and blocking [w/pkg]
Reverse proxy [w/pkg]
Geo/country blocking, IP block lists [w/pkg]
Configuration:
Setup wizard for initial configuration
Intuitive WebGUI and Netgate Nexus GUI
Full-featured REST API
Encrypted automatic backup to Netgate server
Easy configuration backup/restore
Multi-language support
VPN:
Site-to-site and remote access VPNs
IPsec, OpenVPN, WireGuard®
Split tunnelling
IPsec policy-based and route-based protocol support
OpenVPN Data Channel Offload (DCO)
Intel IPsec Multi-Buffer (IIMB)
Intel QuickAssist Technology (QAT)
User Authentication & System Security:
User and group-based privileges
LDAP authentication
Automatic lockout after repeated attempts
Optional key-based SSH access
Traffic and bandwidth shaping
Captive portal with user data transfer quotas
External RADIUS authentication [w/pkg]
Monitoring & Reporting:
Customisable dashboard with widgets
Local monitoring graphs
Remote logging
Network usage monitoring [w/pkg]
Network diagnostics [w/pkg]
QAT, DCO and IIMB are supported only on specific hardware models. Feature availability may vary by appliance and pfSense Plus software version.
Learn more about the power of pfSense Plus software here.
Manufacturer Warranty
Netgate appliances are covered by the manufacturer’s standard one-year "return to base" warranty. This means that products may need to be returned either to the manufacturer or to us for assessment, repair, or replacement.
Warranty Extensions
These warranty extension options and services are primarily intended for business customers. This focus reflects the needs of business-critical equipment, where minimal downtime and rapid product replacements are essential.
3 Year Warranty Enhance your peace of mind with our Extended Warranty, adding 2 extra years to the standard 1-year manufacturer’s warranty for a total of 3 years of coverage.
3 Year Advanced Replacement With Advanced Replacement Service, upon a valid warranty claim, ITG ships a replacement immediately, even before receiving the faulty unit, ensuring minimal business downtime. This option still extends the standard 1-year manufacturer’s warranty by 2 extra years, for a total of 3 years of coverage.
ITG Shop is a trading name of IT and General Limited, registered in England and Wales with registered number: 09291031 and registered office: 20-22 Wenlock Road, London, N1 7GU. | VAT Reg. No: GB223541733