Emergency VPN link over 4G
...
30 March, 2020 / No comment
Instant Quote – 5 mins. or less
🛒 Shop
UK's Best Prices
| NEEDS | WHO | iPerf3 Traffic [2] | IMIX Traffic [3] | |
|---|---|---|---|---|
 Netgate 1100 | Cost efficient / Low power Sleek, compact Silent operation (fanless) Put on a desktop, shelf, or wall | Consumer Remote Worker Business | L3 Forwarding: 880 Mbps Firewall: 656 Mbps (10k ACLs) IPsec VPN: 74.2 Mbps (AES-128-CBC + SHA1) | L3 Forwarding: 480 Mbps Firewall: 190 Mbps (10k ACLs) IPsec VPN: 46 Mbps (AES-128-CBC + SHA1) |
 Netgate 2100 | Cost efficient / Low power Sleek, compact Silent operation (fanless) Put on a desktop, shelf, or wall | Consumer Remote Worker Business | L3 Forwarding: 1.56 Gbps Firewall: 881 Mbps (10k ACLs) IPsec VPN: 118 Mbps (AES-128-CBC + SHA1) | L3 Forwarding: 842 Mbps Firewall: 314 Mbps (10k ACLs) IPsec VPN: 68 Mbps (AES-128-CBC + SHA1) |
 Netgate 4100 | Desktop form factor only Put on a desktop, wall, or rack Silent operation (fanless) Upgradeable storage (M.2 slots) Handles demanding IDS/IPS needs QuickAssist & AES-NI High Availability 1, 2.5, and 10 GbE Network Interfaces | Home Pro Branch/Small Business Medium Business | L3 Forwarding: 8.15 Gbps Firewall: 4.09 Gbps (10k ACLs) IPsec VPN: 960 Mbps (AES-GCM-128 w/QAT) | L3 Forwarding: 3.24 Gbps Firewall: 1.40 Gbps (10k ACLs) IPsec VPN: 312 Mbps (AES-GCM-128 w/QAT) |
 Netgate 6100 | Desktop form factor only Put on a desktop, wall, or rack Silent operation (fanless) Upgradeable storage (M.2 slots) Run demanding IDS/IPS QuickAssist & AES-NI High Availability 1, 2.5, and 10 GbE Network Interfaces | Consumer Branch/Small Business Business Enterprise | L3 Forwarding: 18.76 Gbps Firewall: 10.07 Gbps (10k ACLs) IPsec VPN: 2.07 Gbps (AES-GCM-128 w/QAT) | L3 Forwarding: 6.62 Gbps Firewall: 2.67 Gbps (10k ACLs) IPsec VPN: 545 Mbps (AES-GCM-128 w/QAT) |
 Netgate 7100 1U | Expandable memory Upgradeable storage Network expandable 1U rackmount QuickAssist & AES-NI High Availability option | Remote Worker Business Enterprise | L3 Forwarding: 18.60 Gbps Firewall: 6.81 Gbps (10k ACLs) IPsec VPN: 1.28 Gbps (AES-128-GCM / AES-NI) | L3 Forwarding: 6.18 Gbps Firewall: 1.85 Gbps (10k ACLs) IPsec VPN: 385 Mbps (AES-128-GCM / AES-NI) |
 Netgate 1537 1U | Rack Mount Expandable memory Expandable storage Network expandable High Availability option | Remote Worker Business Enterprise | L3 Forwarding: 16.40 Gbps Firewall: 14.48 Gbps (10k ACLs) IPsec VPN: 2.77 Gbps (AES-128-GCM / AES-NI) | L3 Forwarding: 11.46 Gbps Firewall: 5.00 Gbps (10k ACLs) IPsec VPN: 2.10 Gbps (AES-128-GCM / AES-NI) |
 Netgate 1541 1U | Rack Mount Expandable memory Expandable storage Network expandable High Availability option | Remote Worker Business Enterprise | L3 Forwarding: 17.40 Gbps Firewall: 14.63 Gbps (10k ACLs) IPsec VPN: 2.82 Gbps (AES-128-GCM / AES-NI) | L3 Forwarding: 15.41 Gbps Firewall: 6.10 Gbps (10k ACLs) IPsec VPN: 2.81 Gbps (AES-128-GCM / AES-NI) |
| CPU | Storage | Memory | Network Ports | |
|---|---|---|---|---|
| Netgate 1100 | Dual Core Cortex-A53 ARM64 Soc @ 1.2GHz | 8 GB eMMC | 1 GB DDR4 | 3 x switched ports: 3 x 1Gbps Marvell switch with 1Gbps uplink |
 Netgate 2100 | Dual Core Cortex-A53 ARM64 Soc @ 1.2GHz | 8 GB eMMC (Upgradeable) | 4 GB DDR4 | 1 x GbE (RJ45/SFP) WAN port 4 x 1GbE switched LAN ports with 2.5Gbps uplink |
| Netgate 4100 | 2-core Intel Atom C3338R @ 1.8G Hz | 16 GB eMMC (Upgradable to 128 GB) | 4 GB DDR4 | 2 x 1 GbE Combo Ports (RJ45/SFP) Intel SoC Integrated MAC 4 x 2.5 Gbps RJ-45 "direct" (unswitched) |
| Netgate 6100 | Quad Core Intel Atom C3558 @ 2.2G Hz | 16 GB eMMC (Upgradable to 128 GB) | 8 GB DDR4 | 2 x 1 GbE Combo Ports (RJ45/SFP) Intel SoC Integrated MAC 2 x 10 GbE SFP+ 4 x 2.5 GbE Intel® i225 |
| Netgate 7100 1U | Quad Core Intel Atom C3558 @ 2.2G Hz | 32 GB eMMC (Upgradable to 256 GB M.2 SSD) (Expandable to 2 x 256 GB SSD SATA RAID1) | 8 GB DDR4 (Expandable to 24 GB) | Up to 14 independent and switched ports: 2 x 10Gbps Intel x553 SFP+ ports 8 x 1Gbps Marvell switch with 2 x 2.5 Gbps uplink (Expandable to 4 Port Intel 1GbE) (Expandable to 2 or 4 Port X710 Intel 10GbE SFP+) |
| Netgate 1537 1U | Eight Core Intel Xeon® 1.7 GHz | 256 GB Micron M.2 SSD (Expandable to 2x 256GB SSD SATA RAID1) | 8 GB DDR4 RDIMM (Expandable to 32 GB ECC) | Up to 8 independent ports: 2 x 1GbE LAN/WAN via Intel i350-AM2 2 x 10GbE SFP+ LAN/WAN via SoC (Expandable to 4 Port Intel GbE) (Expandable to 2 or 4 Port X710 Intel 10GbE SFP+) |
| Netgate 1541 1U | Eight Core Intel Xeon 2.1 GHz | 256 GB Micron M.2 SSD (Expandable to 2x 256GB SSD SATA RAID1) | 16 GB DDR4 RDlMM (Expandable to 32 GB ECC) | Up to 8 independent ports: 2 x 1GbE LAN/WAN via Intel i350-AM2 2 x 10GBase-T LAN/WAN via SoC (Expandable to 4 Port Intel GbE) (Expandable to 2 or 4 Port X710 Intel 10GbE SFP+) |
| MAX | BASE | |
|---|---|---|
| Netgate 1100 | Storage: 8 GB EMMC RAM: 1 GB DDR4 | |
| Netgate 2100 | Storage: 32 GB M.2 SATA SSD RAM: 4 GB DDR4 | Storage: 8 GB eMMC Flash RAM: 4 GB DDR4 |
| Netgate 4100 | Storage: 128GB NVMe M.2 SSD RAM: 4 GB DDR4 w/o ECC | Storage: 16GB eMMC RAM: 4 GB DDR4 w/o ECC |
| Netgate 6100 | Storage: 128GB NVMe M.2 SSD RAM: 8 GB DDR4 w/o ECC | Storage: 16GB eMMC RAM: 8 GB DDR4 w/o ECC |
| Netgate 7100 1U | Storage: 256 GB M.2 SATA SSD RAM: 24 GB via SODIMM | Storage: 32 GB eMMC Flash RAM: 8 GB DDR4 |
| Netgate 1537 1U | Storage: 500 GB M.2 SSD RAM: 32 GB ECC DDR4 RDIMM | Storage: 500 GB M.2 SSD RAM: 8 GB ECC DDR4 RDIMM |
| Netgate 1541 1U | Storage: 500 GB M.2 SSD RAM: 32 GB ECC DDR4 RDIMM | Storage: 500 GB M.2 SSD RAM: 16 GB ECC DDR4 RDIMM |
- All performance tests are based upon maximum memory configuration and base model port configuration (no port expansion). Throughput measurements are based upon maximum bidirectional traffic across all available ports.
- Basic Traffic (Primarily Data Download): iPerf3 traffic is TCP – 1460 byte payload and TCP framing.
- Complex Traffic (Voice, Data, Video): Simple IMIX traffic is sets of 7 (40) byte packets, (4) 576 byte packets, 1 (1500) byte packets, plus Ethernet framing overhead.
- 7100 performance number exceeds that of the 1537/41, as all tests were run by maximizing throughput across available base model physical ports (7100 with 10 ports vs. 1537/41 with only 4 ports). The 1537/41 exceed the 7100 by per-port performance.
- 1537 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.
- 1541 with TNSR software (v20.02), configured with 1 CPU worker for iperf3 traffic and 2 CPU workers for IMIX traffic for IPsec performance tests.
pfSense UK
We are one of the only Authorised Netgate Partner in the UK offering access to the full range of Netgate products as well as expert support and solutions. We are your first and last stop for pfSense Hardware and Services in the UK.
pfSense Services
pfSense Projects and Support
Our pfSense certified staff would be excited to work together with you on your pfSense project and to help you support your pfSense setup. We use pfSense and Netgate hardware in all our projects and we have extensive experience in project works of all kind. We offer pre-paid block of hours that can be used for project and support tasks. Get in touch for further info.
Netgate pfSense® Certified
pfSense Monitoring
pfSense Monitoring is our service offering to ensure uptime, performance, and functionality of your pfSense is as expected. It enable an early detection of potential issues before they become critical problems. Our monitoring agent keeps track of system resources such as CPU and memory usage. It also monitors network interfaces throughput and security parameters. Our standard “ITG monitoring” service checks on 100 metrics of your pfSense appliance or server. This is typically enough to monitor any Netgate appliance. Additional and custom monitoring can be developed upon request. Get in touch for further info.
About pfSense
What is pfSense?
pfSense is the world’s most trusted open source firewall. It brings together the most advanced technology available to make protecting a network easier and addresses a wide range of security and networking needs. pfSense is open source and you can download the Community Edition of pfSense here: https://www.pfsense.org/download/.
pfSense Community Edition can be installed on a physical computer or a virtual machine to make a dedicated pfSense firewall and/or pfSense router for a network. It is thoroughly documented ( pfSense documentation) and instructions are continuously updated on how to best operate pfSense software.
pfSense Plus is the version of pfSense that comes pre-installed on Netgate appliances which we sell in the UK at competitive prices.
FEATURES
Load Balancing
UTM Device
Traffic Shaping
Captive Portal
DNS / DHCP Server
IDS / IPS
OpenVPN / IPSec
Web Content Filter
Features
Firewall and Router
- Stateful Packet Inspection (SPI)
- GeoIP blocking
- Anti-Spoofing
- Time based rules
- Connection limits
- Dynamic DNS
- Reverse proxy
- Captive portal guest network
- Supports concurrent IPv4 and IPv6
- NAT mapping (inbound/outbound)
- VLAN support (802.1q)
- Configurable static routing
- IPv6 network prefix translation
- IPv6 router advertisements
- Multiple IP addresses per interface
- DHCP server
- DNS forwarding
- Wake-on-LAN
- PPPoE Server
VPN
- IPsec, OpenVPN and WireGuard
- Site-to-site and remote access VPN support
- SSL encryption
- VPN client for multiple operating systems
- L2TP/IPsec for mobile devices
- Multi-WAN for failover
- IPv6 support
- Split tunneling
- Multiple tunnels
- VPN tunnel failover
- NAT support
- Automatic or custom routing
- Local user authentication or RADIUS/LDAP
Intrusion Prevention
- Snort-based packet analyzer
- Layer 7 application detection
- Multiple rules sources and categories
- Emerging threats database
- IP blacklist database
- Pre-set rule profiles
- Per-interface configuration
- Suppressing false positive alerts
- Deep Packet Inspection (DPI)
- Optional open-source packages for application blocking
Enterprise Reliability
- Optional multi-node High Availability Clustering
- Multi-WAN load balancing
- Automatic connection failover
- Bandwidth throttling
- Traffic shaping wizard
- Reserve or restrict bandwidth based on traffic priority
- Fair sharing bandwidth
- User data transfer quotas
User Authentication
- Local user and group database
- User and group-based privileges
- Optional automatic account expiration
- External RADIUS authentication
- Automatic lockout after repeated attempts
Proxy and Content Filtering
- HTTP and HTTPS proxy
- Non Transparent or Transparent caching proxy
- Domain/URL filtering
- Anti-virus filtering
- SafeSearch for search engines
- HTTPS URL and content screening
- Website access reporting
- Domain Name blacklisting (DNSBL)
- Usage reporting for daily, monthly, etc.
Administration
Configuration
- Web-based configuration
- Setup wizard for initial configuration
- Remote web-based administration
- Customizable dashboard
- Easy configuration backup/restore
- Configuration export/import
- Encrypted automatic backup to Netgate server
- Variable level administrative rights
- Multi-language support
- Simple updates
- Forward-compatible configuration
- Serial console for shell access and recovery options
System Security
- Web interface security protection
- CSRF protection
- HTTP Referer enforcement
- DNS Rebinding protection
- HTTP Strict Transport Security
- Frame protection
- Optional key-based SSH access
Reporting & Monitoring
- Dashboard with configurable widgets
- Local logging
- Remote logging
- Local monitoring graphs
- Real-time interface traffic graphs
- SNMP monitoring
- Notifications via web interface, SMTP, or Growl
- Hardware monitoring
- Networking diagnostic tools
Who uses pfSense?
Thousands of businesses, educational institutions, government agencies and non-profits – on all seven continents, and for years – have come to rely upon pfSense® software for their secure networking needs.
Why Buy a Netgate pfSense Appliance?
Netgate appliances are the official pfSense hardware running pfSense plus natively. In other words, Netgate devices are developed, designed and tested to run pfSense plus reliably. With Negate pfSense plus appliances business users can access commercial support directly from the team that host and develop the pfSense project.
Some of our Jobs with pfSense
pfSense News and Articles
pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.