Experience unparalleled value and performance with the Netgate® 8300 Security Gateway powered by pfSense® Plus software. The Netgate 8300 is tailored for medium to large business, xSP, MSP/MSSP with high connectivity and stability requirements. This unit is enterprise-ready, featuring Netgate’s most expandable chassis and hot-swappable PSUs, ensuring mission critical reliability and ease of maintenance.

This security gateway boasts a formidable 2.0 GHz, 8-core, 16-thread Intel® Xeon® D-1733NT processor with Intel AVX-512 for exceptional Firewall and VPN performance. The Netgate 8300 harnesses the power of Intel AVX-512 to accelerate VPN operations, bolstering throughput and reducing overhead while optimizing core firewall functions for enhanced network security and performance. With quad 10G SFP+ ports, quad 1G SFP ports, and triple 2.5G RJ-45 ports, plus expandability to 25G and 100G ports via PCIe cards, the Netgate 8300 future-proofs your network infrastructure, scaling effortlessly with your business.

The Netgate 8300 maximizes your investment by delivering high-performance throughput at an incredibly competitive cost per gigabit. Compared to the 1541, it boasts a remarkable 47% firewall performance gain, 100% improvement in VPN and routing throughput, and a 175% increase in port density.

This compact 1U chassis optimizes space efficiency in server rooms and data centers, ideal for mission-critical deployments requiring robust high availability options and hotswap dual-power capability. Redefine your network standards by offering superior scalability, performance, and cost efficiency that exceeds industry expectations with Netgate’s 8300 Security Gateway.

Netgate-8300-Performance

Hardware Comparison Chart

L3 Forwarding

(Router)

IPERF3 Traffic: 36.7 Gbps

Firewall

(10k ACLs)

IPERF3 Traffic: 26.8 Gbps

IPsec VPN

(AES-GCM-128 w/AES-NI)

IPERF3 Traffic: 14.6 Gbps

Netgate 8300 performance tests conducted with pfSense Plus software version 24.03

The Netgate 8300 is also available with TNSR software. TNSR is a high-performance software router capable of producing considerable VPN and Routing performance increases far beyond the limits of pfSense Plus software.

CPU: Eight Core 2.0 GHz Intel Xeon CPU. Delivers 36 Gbps routing for everyday iPerf3-bidirectional traffic and over 26 Gbps of firewall throughput

Network Ports: 11 Independent 1G, 2.5G, and 10G ports. Maximum port flexibility – with 1G, 2.5G, and 10G Ethernet configurable as WAN or LAN across the combination of 11 RJ45 and SFP ports

Expandability: 1 x PCIe 3.0 x8 port for half-length low profile cards and 1 xPCIe 4.0 x16 port for full-height three-quarters length cards

Storage: 512 GB NVMe 2280 M-Key M.2 SSD

Memory: 32 GB DDR4, ECC, 3200MHz via 2x 16 GB UDIMM

Power: Dual hot-swappable PSU bays. 1 x Internal 500W PSU (hot-swappable) included, 110V/240V AC input

Cooling: Active – 7x chassis fans at the rear of the enclosure

Netgate-5100-Software

pfSense Plus software provides the performance, flexibility, reliability, and business assurance expected from leading secure networking applications:

Exceptional performance

Flexible 3rd-party application options

Traditional management mechanisms

Proven reliability

Complete business assurance support

All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include firewall, VPN, routing, load balancing, traffic shaping, captive portal, DNS/DHCP Server, IDS/IPS, failover WAN, and more.

CPU: Intel Xeon D-1733NT, 8-core @ 2.0 GHz (Ice Lake Family)

CPU Cores: 8-core

Physical Network I/O ports: (4) 10GbE SFP+ cage ports

                                                (4) 1GbE SFP cage ports

                                                (3) 2.5GbE RJ-45 “direct” (unswitched) Intel i226 ethernet ports

Storage: 512 GB NVMe 2280 M-Key M.2 SSD

Memory: 32 GB DDR4, ECC, 3200MHz via 2x 16 GB UDIMM

Physical Expansion Card Slots: 2x m.2 M-Key slots for NVMe SSD storage via custom vertical PCIe riser card

1x PCIe 3.0 x8 slot: Supports half-length low profile cards and “up-plugging” of x16 cards (limited to x8 speeds)

1x PCIe 4.0 x16 slot Supports full-height three-quarter-length cards

1x RJ45 auto-detect console port

Cisco pinout USB-A to RJ45 console cable included

USB Ports: 2 x USB 3.2 jacks (USB-A female)

RTC (battery): CR2032 (20mm) lithium coin cell onboard, 3VDC

LED: 3x RGB LEDs – software/firmware controllable via Aspeed AST2620 BMC

Power Buttons / Switches 1x illuminated push button (front) – software controlled

                                          1x mechanical toggle switch (rear)

Enclosure: Sheet steel enclosure, powder-coated finish 16.92 x 13 x 1.72 inches* 430 x 330 x 43.8 mm 13.33 lbs. / 6.05 kg.

                   *excluding rack ears, handles, and hot-swap PSU protrusions

Mounting: 1U rackmount – chassis is compatible with industry standard sliding rails

Cooling: Active – internal chassis cooling fans at the rear of the enclosure (airflow direction is front-to-back)

Power

BASE: 2x Hot-swappable PSU bays

           1 x Internal 500W PSU 100V/240V AC input (hot-swappable) included

           AC Inlet: IEC320-C16 (3-pin)

           1 x NEMA 5-15P to IEC320-C15 US power cord included

Note: All 8300 systems have dual hot-swappable PSU bays.  BASE systems come with 1 PSU only.  If you need 2 PSUs, choose a MAX or TAA systems with dual PSUs pre-installed.

Ambient temperature range of 0°C (32°F) to 40°C (104°F)

Certifications CE, CB, FCC (Class A), ISED (Class A), RoHS, UL, ACMA, UKCA

LOW TOTAL COST OF OWNERSHIP

pfSense+ software updates and security patches are provided free of charge for the life of the product

No artificial limits or add-ons are needed for full functionality

Enjoy unlimited users, firewall rules, IPsec tunnels, dual WAN, and more without additional usage or feature-based pricing

Low power requirements to save money

Designed for an extended deployment lifetime

GROWS WITH YOU

Get all the security features you need to protect your business

Flexible configuration and support for multi-WAN, High Availability, VPN, load balancing, reporting and monitoring, etc

Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring. 1

EASY GUI MANAGEMENT

Intuitive web-based GUI includes :

Configure advanced routing, firewall rules, VPNs, multi-WAN, and traffic shaping

Dashboard with real-time traffic graphs

Detailed diagnostics and reporting tools

SECURE REMOTE ACCESS

Highly flexible, suitable for remote access and site-to-site connections, supporting a wide range of VPN types, including IPsec, OpenVPN, and WireGuard,

Simplified multi-vendor supported VPN creation and management

Secure connectivity for mobile and remote workers to the cloud

Use the Amazon VPC Wizard to easily set up VPN connections with your Amazon EC2 cloud.

Best For:

Medium-to-large sized organizations and businesses

Enterprise

Co-location, high availability use cases

Service Providers and Managed Service Providers

Software Features

Policy-based routing

Multiple IP addresses per interface

Multiple WAN connections (with load balancing and failover)

Complex NAT mapping (outbound and inbound)

Concurrent IPv4 and IPv6 support

Optional multi-node High Availability (HA) clustering

Dynamic routing protocol support [w/pkg]

Extensive firewall rules

Stateful filtering & packet inspection

Per-interface configuration

Ethernet (layer 2) rule-based packet filtering

IP/DNS-based filtering and blacklisting [w/pkg]

IDS/IPS with Snort-based packet analyzer [w/pkg]

Layer 7 application detection and blocking [w/pkg]

Reverse proxy [w/pkg]

Geo/country blocking, IP block lists [w/pkg]

Site-to-site and remote access VPNs

IPsec, OpenVPN, WireGuard®

Split tunneling

IPsec policy-based and route-based protocol support

OpenVPN Data Channel Offload (DCO)

Intel IPsec Multi-Buffer (IIMB)

Intel QuickAssist Technology (QAT)

User and group-based privileges

LDAP authentication

Automatic lockout after repeated attempts

Optional key-based SSH access

Traffic and bandwidth shaping

Captive portal with user data transfer quotas

External RADIUS authentication [w/pkg]

Setup wizard for initial configuration

Encrypted automatic backup to Netgate server

Easy configuration backup/restore

Multi-language support

Customizable dashboard with widgets

Local monitoring graphs

Remote logging

Network usage monitoring [w/pkg]

Network diagnostics [w/pkg]

Learn more about the power of pfSense Plus software here.

Quick Start Guide and other Manuals

Ships with the latest version of pfSense Plus software

Not PoE Compatible

Ships with a USA power cord. Easily changed to non-US style by purchasing a IEC320-C15 (3 PIN) compatible power cord (visual example).

Your purchase includes many free services and free technical support, which will help you get started with pfSense Plus software:

Complimentary pfSense firewall software updates for the life of the product

Complimentary 24×7 zero-to-ping support from Netgate Global Support

Access to the continuously updated pfSense online documentation

ACB: Automatic Encrypted Configuration Backup Service

SUPPORT INFORMATION

Technical assistance is available from Netgate Global Support 24x7x365.

TAC Lite is included with the purchase of your Netgate appliance.

TAC Pro and TAC Enterprise SLA descriptions and pricing are available here.

Help is available on our community forum here.

One-year manufacturer’s hardware warranty information is here.

Extended warranties for US customers are available from Extend. More information on their offer and warranty policy can be viewed here.

Standard 30 day return policy. Netgate does not sell seconds or returns. An open-box fee may apply.

All specifications subject to change without notice

Mounting hardware specific to your racking system. Due to the wide variety of rack mount fasteners, cage nuts, rack screws, and similar mounting hardware are not included. Please select fasteners that are suitable for your rack installation. Consult a qualified tradesperson if you are unsure.

PRO TIP

Take a photo of the label on the bottom of your Netgate 8300 before installation. It is always a good idea to make a note of serial numbers and additional information from the label on the bottom of your system before installing in a server rack. The labeling may be difficult to read while the system is mounted in the rack. Please take a picture of the information or write it down for future reference.

Questions? We’d love to hear from you. Contact us at sales@netgate.com