Emergency VPN link over 4G
...
30 March, 2020 / No comment
We are one of the only Authorised Netgate Partner in the UK offering access to the Netgate range of products as well as expert support and solutions for complex requirements.
pfSense® UK
Netgate Appliances
Netgate appliances are the official pfSense® hardware running pfSense® plus natively. In other words, Netgate devices are developed, designed and tested to run pfSense® plus at its best. With Negate appliances you can access commercial support directly from the team that host and develop the pfSense® project.
FEATURES
Load Balancing
UTM Device
Traffic Shaping
Captive Portal
DNS / DHCP Server
IDS / IPS
OpenVPN / IPSec
Web Content Filter
Features
Firewall and Router
- Stateful Packet Inspection (SPI)
- GeoIP blocking
- Anti-Spoofing
- Time based rules
- Connection limits
- Dynamic DNS
- Reverse proxy
- Captive portal guest network
- Supports concurrent IPv4 and IPv6
- NAT mapping (inbound/outbound)
- VLAN support (802.1q)
- Configurable static routing
- IPv6 network prefix translation
- IPv6 router advertisements
- Multiple IP addresses per interface
- DHCP server
- DNS forwarding
- Wake-on-LAN
- PPPoE Server
VPN
- IPsec, OpenVPN and WireGuard
- Site-to-site and remote access VPN support
- SSL encryption
- VPN client for multiple operating systems
- L2TP/IPsec for mobile devices
- Multi-WAN for failover
- IPv6 support
- Split tunneling
- Multiple tunnels
- VPN tunnel failover
- NAT support
- Automatic or custom routing
- Local user authentication or RADIUS/LDAP
Intrusion Prevention
- Snort-based packet analyzer
- Layer 7 application detection
- Multiple rules sources and categories
- Emerging threats database
- IP blacklist database
- Pre-set rule profiles
- Per-interface configuration
- Suppressing false positive alerts
- Deep Packet Inspection (DPI)
- Optional open-source packages for application blocking
Enterprise Reliability
- Optional multi-node High Availability Clustering
- Multi-WAN load balancing
- Automatic connection failover
- Bandwidth throttling
- Traffic shaping wizard
- Reserve or restrict bandwidth based on traffic priority
- Fair sharing bandwidth
- User data transfer quotas
User Authentication
- Local user and group database
- User and group-based privileges
- Optional automatic account expiration
- External RADIUS authentication
- Automatic lockout after repeated attempts
Proxy and Content Filtering
- HTTP and HTTPS proxy
- Non Transparent or Transparent caching proxy
- Domain/URL filtering
- Anti-virus filtering
- SafeSearch for search engines
- HTTPS URL and content screening
- Website access reporting
- Domain Name blacklisting (DNSBL)
- Usage reporting for daily, monthly, etc.
Administration
Configuration
- Web-based configuration
- Setup wizard for initial configuration
- Remote web-based administration
- Customizable dashboard
- Easy configuration backup/restore
- Configuration export/import
- Encrypted automatic backup to Netgate server
- Variable level administrative rights
- Multi-language support
- Simple updates
- Forward-compatible configuration
- Serial console for shell access and recovery options
System Security
- Web interface security protection
- CSRF protection
- HTTP Referer enforcement
- DNS Rebinding protection
- HTTP Strict Transport Security
- Frame protection
- Optional key-based SSH access
Reporting & Monitoring
- Dashboard with configurable widgets
- Local logging
- Remote logging
- Local monitoring graphs
- Real-time interface traffic graphs
- SNMP monitoring
- Notifications via web interface, SMTP, or Growl
- Hardware monitoring
- Networking diagnostic tools
Shop
UK Best Prices on Netgate VPN Routers and Security Gateways
Quotes in 5 Mins. or Less
| NEEDS | WHO | iPerf3 Traffic [2] | IMIX Traffic [3] | |
|---|---|---|---|---|
 SG-1100 | Cost efficient / Low power Sleek, compact Silent operation (fanless) Put on a desktop, shelf, or wall | Consumer Remote Worker Business | L3 Forwarding: 880 Mbps Firewall: 656 Mbps (10k ACLs) IPsec VPN: 74.2 Mbps (AES-128-CBC + SHA1) | L3 Forwarding: 480 Mbps Firewall: 190 Mbps (10k ACLs) IPsec VPN: 46 Mbps (AES-128-CBC + SHA1) |
 SG-2100 | Cost efficient / Low power Sleek, compact Silent operation (fanless) Put on a desktop, shelf, or wall | Consumer Remote Worker Business | L3 Forwarding: 1.56 Gbps Firewall: 881 Mbps (10k ACLs) IPsec VPN: 118 Mbps (AES-128-CBC + SHA1) | L3 Forwarding: 842 Mbps Firewall: 314 Mbps (10k ACLs) IPsec VPN: 68 Mbps (AES-128-CBC + SHA1) |
 SG-3100 | Cost efficient / Low power Sleek, compact Silent operation (fanless) Put on a desktop or shelf | Consumer Remote Worker Business | L3 Forwarding: 3.64 Gbps Firewall: 2.44 Gbps (10k ACLs) IPsec VPN: 453 Mbps (AES-128-CBC + SHA1) | L3 Forwarding: 1.98 Gbps Firewall: 1.04 Gbps (10k ACLs) IPsec VPN: 108 Mbps (AES-128-CBC + SHA1) |
 SG-5100 | Cost efficient / Low power Silent operation (fanless) Put on a desktop or shelf QuickAssist & AES-NI High Availability capability | Consumer Remote Worker Business Enterprise | L3 Forwarding: 3.66 Gbps Firewall: 3.65 Gbps (10k ACLs) IPsec VPN: 923 Mbps (AES-128-GCM / AES-NI) | L3 Forwarding: 3.78 Gbps Firewall: 1.84 Gbps (10k ACLs) IPsec VPN: 380 Mbps (AES-128-GCM / AES-NI) |
 XG-7100 | Expandable memory Upgradeable storage 10 gigabit capability QuickAssist & AES-NI High Availability capability | Remote Worker Business Enterprise | L3 Forwarding: 18.60 Gbps [4] Firewall: 6.81 Gbps (10k ACLs) IPsec VPN: 1.28 Gbps (AES-128-GCM / AES-NI) | L3 Forwarding: 6.18 Gbps Firewall: 1.85 Gbps (10k ACLs) IPsec VPN: 385 Mbps (AES-128-GCM / AES-NI) |
 XG-7100 1U | Expandable memory Upgradeable storage Network expandable 1U rackmount QuickAssist & AES-NI High Availability option | Remote Worker Business Enterprise | L3 Forwarding: 18.60 Gbps Firewall: 6.81 Gbps (10k ACLs) IPsec VPN: 1.28 Gbps (AES-128-GCM / AES-NI) | L3 Forwarding: 6.18 Gbps Firewall: 1.85 Gbps (10k ACLs) IPsec VPN: 385 Mbps (AES-128-GCM / AES-NI) |
 XG-1537 1U | Rack Mount Expandable memory Expandable storage Network expandable High Availability option | Remote Worker Business Enterprise | L3 Forwarding: 16.40 Gbps Firewall: 14.48 Gbps (10k ACLs) IPsec VPN: 2.77 Gbps (AES-128-GCM / AES-NI) | L3 Forwarding: 11.46 Gbps Firewall: 5.00 Gbps (10k ACLs) IPsec VPN: 2.10 Gbps (AES-128-GCM / AES-NI) |
 XG-1541 1U | Rack Mount Expandable memory Expandable storage Network expandable High Availability option | Remote Worker Business Enterprise | L3 Forwarding: 17.40 Gbps Firewall: 14.63 Gbps (10k ACLs) IPsec VPN: 2.82 Gbps (AES-128-GCM / AES-NI) | L3 Forwarding: 15.41 Gbps Firewall: 6.10 Gbps (10k ACLs) IPsec VPN: 2.81 Gbps (AES-128-GCM / AES-NI) |
| CPU | Storage | Memory | Network Ports | |
|---|---|---|---|---|
| SG-1100 | Dual Core Cortex-A53 ARM64 Soc @ 1.2GHz | 8 GB eMMC | 1 GB DDR4 | 3 x switched ports: 3 x 1Gbps Marvell switch with 1Gbps uplink |
| SG-2100 | Dual Core Cortex-A53 ARM64 Soc @ 1.2GHz | 8 GB eMMC (Upgradeable) | 4 GB DDR4 | 1 x GbE (RJ45/SFP) WAN port 4 x 1GbE switched LAN ports with 2.5Gbps uplink |
| SG-3100 | Dual Core Cortex-A9 ARM7 SoC @ 1.6GHz | 8 GB eMMC (Upgradeable) | 2 GB DDR4 | 6 x independent and switched ports: 2 x 1Gbps WAN/OPT ports 4 x 1Gbps LAN Marvell switch with 2.5Gbps uplink |
| SG-5100 | Quad Core Intel® Atom™ C3558 @ 2.2GHz | 8 GB eMMC (Upgradable) | 4 GB DDR4 (Upgradable to 16 GB) | 6 x independent ports: 4 x GbE RJ45 Intel SoC Integrated MAC 2 x GbE RJ45 Intel i210 |
| XG-7100 | Quad Core Intel Atom C3558 @ 2.2G Hz | 32 GB eMMC (Upgradable to 256 GB M.2 SSD) | 8 GB DDR4 (Expandable to 24 GB) | Up to 14 independent and switched ports: 2 x 10Gbps Intel x553 SFP+ ports 8 x 1Gbps Marvell switch with 2 x 2.5Gbps uplink |
| XG-7100 1U | Quad Core Intel Atom C3558 @ 2.2G Hz | 32 GB eMMC (Upgradable to 256 GB M.2 SSD) (Expandable to 2 x 256 GB SSD SATA RAID1) | 8 GB DDR4 (Expandable to 24 GB) | Up to 14 independent and switched ports: 2 x 10Gbps Intel x553 SFP+ ports 8 x 1Gbps Marvell switch with 2 x 2.5 Gbps uplink (Expandable to 4 Port Intel 1GbE) (Expandable to 2 or 4 Port X710 Intel 10GbE SFP+) |
| XG-1537 1U | Eight Core Intel Xeon® 1.7 GHz | 256 GB Micron M.2 SSD (Expandable to 2x 256GB SSD SATA RAID1) | 8 GB DDR4 RDIMM (Expandable to 32 GB ECC) | Up to 8 independent ports: 2 x 1GbE LAN/WAN via Intel i350-AM2 2 x 10GbE SFP+ LAN/WAN via SoC (Expandable to 4 Port Intel GbE) (Expandable to 2 or 4 Port X710 Intel 10GbE SFP+) |
| XG-1541 1U | Eight Core Intel Xeon 2.1 GHz | 256 GB Micron M.2 SSD (Expandable to 2x 256GB SSD SATA RAID1) | 16 GB DDR4 RDlMM (Expandable to 32 GB ECC) | Up to 8 independent ports: 2 x 1GbE LAN/WAN via Intel i350-AM2 2 x 10GBase-T LAN/WAN via SoC (Expandable to 4 Port Intel GbE) (Expandable to 2 or 4 Port X710 Intel 10GbE SFP+) |
- All performance tests are based upon maximum memory configuration and base model port configuration (no port expansion). Throughput measurements are based upon maximum bidirectional traffic across all available ports.
- Basic Traffic (Primarily Data Download): iPerf3 traffic is TCP – 1460 byte payload and TCP framing.
- Complex Traffic (Voice, Data, Video): Simple IMIX traffic is sets of 7 (40) byte packets, (4) 576 byte packets, 1 (1500) byte packets, plus Ethernet framing overhead.
- XG-7100 performance number exceeds that of the XG-1537/41, as all tests were run by maximizing throughput across available base model physical ports (XG-7100 with 10 ports vs. XG-1537/41 with only 4 ports). The XG-1537/41 exceed the XG-7100 by per-port performance.
- SG-5100 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 and IMIX traffic for IPsec performance tests.
- XG-1537 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.
- XG-1541 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.
pfSense® Projects and Support
We sell Netgate appliances because they run pfSense® that we love and trust. It is reliable and tested specifically on Netgate appliances. We use pfSense® in all our projects and we would be excited to work together on your pfSense® project and support your pfSense® setup.
pfSense® Monitoring
The ITG Monitoring service for pfSense® keeps track of system resources, such as CPU and memory usage. It also monitors network interfaces throughput, OS metrics and security parameters. This service allow for an early detection of potential issues before they become critical problems. Our standard “ITG monitoring” checks on up to 100 metrics of your pfSense® appliance or server. This is typically enough to monitor any Netgate appliance. Additional and custom monitoring can be developed upon request.
About pfSense®
What is pfSense®?
pfSense® is the world’s most trusted open source firewall. It bring together the most advanced technology available to make protecting a network easier. It addresses a wide range of security and networking needs. It is open source and you can download the Community Edition of pfSense® here: https://www.pfsense.org/download/.
pfSense® Community Edition can be installed on a physical computer or a virtual machine to make a dedicated firewall/router for a network. It is thoroughly documented ( pfSense® documentation) and instructions are continuously updated on how to best operate pfSense® software.
pfSense® Plus is the version of pfSense® that comes pre-installed on Netgate appliances which we sell in the UK at competitive prices.
Who uses pfSense®?
Thousands of businesses, educational institutions, government agencies and non-profits – on all seven continents, and for years – have come to rely upon pfSense® software for their secure networking needs.
Some of our Jobs with pfSense®
pfSense® Posts
pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.