Experience unparalleled value and performance with the Netgate® 8300 Security Gateway powered by pfSense® Plus software. The Netgate 8300 is tailored for medium to large business, xSP, MSP/MSSP with high connectivity and stability requirements. This unit is enterprise-ready, featuring Netgate’s most expandable chassis and hot-swappable PSUs, ensuring mission critical reliability and ease of maintenance.
This security gateway boasts a formidable 2.0 GHz, 8-core, 16-thread Intel® Xeon® D-1733NT processor with Intel AVX-512 for exceptional Firewall and VPN performance. The Netgate 8300 harnesses the power of Intel AVX-512 to accelerate VPN operations, bolstering throughput and reducing overhead while optimizing core firewall functions for enhanced network security and performance. With quad 10G SFP+ ports, quad 1G SFP ports, and triple 2.5G RJ-45 ports, plus expandability to 25G and 100G ports via PCIe cards, the Netgate 8300 future-proofs your network infrastructure, scaling effortlessly with your business.
The Netgate 8300 maximizes your investment by delivering high-performance throughput at an incredibly competitive cost per gigabit. Compared to the 1541, it boasts a remarkable 47% firewall performance gain, 100% improvement in VPN and routing throughput, and a 175% increase in port density.
This compact 1U chassis optimizes space efficiency in server rooms and data centers, ideal for mission-critical deployments requiring robust high availability options and hotswap dual-power capability. Redefine your network standards by offering superior scalability, performance, and cost efficiency that exceeds industry expectations with Netgate’s 8300 Security Gateway.
L3 Forwarding
(Router)
- IPERF3 Traffic: 36.7 Gbps
Firewall
(10k ACLs)
- IPERF3 Traffic: 26.8 Gbps
IPsec VPN
(AES-GCM-128 w/AES-NI)
- IPERF3 Traffic: 14.6 Gbps
Netgate 8300 performance tests conducted with pfSense Plus software version 24.03
The Netgate 8300 is also available with TNSR software. TNSR is a high-performance software router capable of producing considerable VPN and Routing performance increases far beyond the limits of pfSense Plus software.
CPU: Eight Core 2.0 GHz Intel Xeon CPU. Delivers 36 Gbps routing for everyday iPerf3-bidirectional traffic and over 26 Gbps of firewall throughput
Network Ports: 11 Independent 1G, 2.5G, and 10G ports. Maximum port flexibility – with 1G, 2.5G, and 10G Ethernet configurable as WAN or LAN across the combination of 11 RJ45 and SFP ports
Expandability: 1 x PCIe 3.0 x8 port for half-length low profile cards and 1 xPCIe 4.0 x16 port for full-height three-quarters length cards
Storage: 512 GB NVMe 2280 M-Key M.2 SSD
Memory: 16 GB DDR4, ECC, 3200MHz via 2x 8 GB (expandable to 32 GB via 2x 16 GB UDIMM)
Power: Dual hot-swappable PSU bays. 1 x Internal 500W PSU (hot-swappable) included, 110V/240V AC input
Cooling: Active – 7x chassis fans at the rear of the enclosure
pfSense Plus software provides the performance, flexibility, reliability, and business assurance expected from leading secure networking applications:
- Exceptional performance
- Flexible 3rd-party application options
- Traditional management mechanisms
- Proven reliability
- Complete business assurance support
All at a fraction of the cost of proprietary alternatives, pfSense Plus software is the perfect answer. Popular pfSense Plus use cases include firewall, VPN, routing, load balancing, traffic shaping, captive portal, DNS/DHCP Server, IDS/IPS, failover WAN, and more.
HARDWARE SPECIFICATIONS:
| CPU | Intel Xeon D-1733NT, 8-core @ 2.0 GHz (Ice Lake Family) |
| CPU Cores | 8-core |
| Physical Network I/O ports | (4) 10GbE SFP+ cage ports (4) 1GbE SFP cage ports (3) 2.5GbE RJ-45 “direct” (unswitched) Intel i226 ethernet ports |
| Storage | 512 GB NVMe 2280 M-Key M.2 SSD |
| Memory | 32 GB DDR4, ECC, 3200MHz via 2x 8 GB 1G x 72-Bit UDIMM (expandable to 32 GB via 2x 16 GB UDIMM) |
| Physical Expansion Card Slots | 2x m.2 M-Key slots for NVMe SSD storage via custom vertical PCIe riser card
1x PCIe 3.0 x8 slot 1x PCIe 4.0 x16 slot |
| Console Port | 1x RJ45 auto-detect console port Cisco pinout USB-A to RJ45 console cable included |
| Management Port | 1x IPMI management port via dedicated RJ45 |
| USB Ports | 2 x USB 3.2 jacks (USB-A female) |
| RTC (battery) | CR2032 (20mm) lithium coin cell onboard, 3VDC |
| LED | 3x RGB LEDs – software/firmware controllable via Aspeed AST2620 BMC |
| Power Buttons / Switches | 1x illuminated push button (front) – software controlled
1x mechanical toggle switch (rear) |
| Enclosure | Sheet steel enclosure, powder-coated finish 16.92 x 13 x 1.72 inches* 430 x 330 x 43.8 mm 13.33 lbs. / 6.05 kg.*excluding rack ears, handles, and hot-swap PSU protrusions |
| Mounting | 1U rackmount – chassis is compatible with industry standard sliding rails |
| Cooling | Active – internal chassis cooling fans at the rear of the enclosure
*airflow direction is front-to-back |
| Power | Dual power hot-swappable PSU bays.
1 x Internal 500W PSU 100V/240V AC input (hot-swappable) included 1 x NEMA 5-15P to IEC320-C15 US power cord included |
| Environmental | Ambient temperature range of 0°C (32°F) to 40°C (104°F) |
| Certifications | CE, CB, FCC (Class A), ISED (Class A), RoHS, UL, ACMA, UKCA |
KEY FEATURES
LOW TOTAL COST OF OWNERSHIP
- pfSense+ software updates and security patches are provided free of charge for the life of the product
- No artificial limits or add-ons are needed for full functionality
- Enjoy unlimited users, firewall rules, IPsec tunnels, dual WAN, and more without additional usage or feature-based pricing
- Low power requirements to save money
- Designed for an extended deployment lifetime
GROWS WITH YOU
- Get all the security features you need to protect your business
- Flexible configuration and support for multi-WAN, High Availability, VPN, load balancing, reporting and monitoring, etc
- Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring. 1
EASY GUI MANAGEMENT
- Intuitive web-based GUI includes :
- Configure advanced routing, firewall rules, VPNs, multi-WAN, and traffic shaping
- Dashboard with real-time traffic graphs
- Detailed diagnostics and reporting tools
SECURE REMOTE ACCESS
- Highly flexible, suitable for remote access and site-to-site connections, supporting a wide range of VPN types, including IPsec, OpenVPN, and WireGuard,
- Simplified multi-vendor supported VPN creation and management
- Secure connectivity for mobile and remote workers to the cloud
- Use the Amazon VPC Wizard to easily set up VPN connections with your Amazon EC2 cloud.
Best For:
- Medium-to-large sized organizations and businesses
- Enterprise
- Co-location, high availability use cases
- Service Providers and Managed Service Providers
Software Features
Router:
- Policy-based routing
- Multiple IP addresses per interface
- Multiple WAN connections (with load balancing and failover)
- Complex NAT mapping (outbound and inbound)
- Concurrent IPv4 and IPv6 support
- Optional multi-node High Availability (HA) clustering
- Dynamic routing protocol support [w/pkg]
Firewall, Attack Prevention, & Content Filtering:
- Extensive firewall rules
- Stateful filtering & packet inspection
- Per-interface configuration
- Ethernet (layer 2) rule-based packet filtering
- IP/DNS-based filtering and blacklisting [w/pkg]
- IDS/IPS with Snort-based packet analyzer [w/pkg]
- Layer 7 application detection and blocking [w/pkg]
- Reverse proxy [w/pkg]
- Geo/country blocking, IP block lists [w/pkg]
VPN:
- Site-to-site and remote access VPNs
- IPsec, OpenVPN, WireGuard®
- Split tunneling
- IPsec policy-based and route-based protocol support
- OpenVPN Data Channel Offload (DCO)
- Intel IPsec Multi-Buffer (IIMB)
- Intel QuickAssist Technology (QAT)
User Authentication & System Security:
- User and group-based privileges
- LDAP authentication
- Automatic lockout after repeated attempts
- Optional key-based SSH access
- Traffic and bandwidth shaping
- Captive portal with user data transfer quotas
- External RADIUS authentication [w/pkg]
Configuration:
- Setup wizard for initial configuration
- Encrypted automatic backup to Netgate server
- Easy configuration backup/restore
- Multi-language support
Monitoring & Reporting:
- Customizable dashboard with widgets
- Local monitoring graphs
- Remote logging
- Network usage monitoring [w/pkg]
- Network diagnostics [w/pkg]
Learn more about the power of pfSense Plus software here.
ADDITIONAL INFORMATION
- Quick Start Guide and other Manuals
- Ships with the latest version of pfSense Plus software
- Not PoE Compatible
- Ships with a USA power cord. Easily changed to non-US style by purchasing a IEC320-C15 (3 PIN) compatible power cord (visual example).
Your purchase includes many free services and free technical support, which will help you get started with pfSense Plus software:
- Complimentary pfSense firewall software updates for the life of the product
- Complimentary 24×7 zero-to-ping support from Netgate Global Support
- Access to the continuously updated pfSense online documentation
- ACB: Automatic Encrypted Configuration Backup Service
SUPPORT INFORMATION
- Technical assistance is available from Netgate Global Support 24x7x365.
- TAC Lite is included with the purchase of your Netgate appliance.
- TAC Pro and TAC Enterprise SLA descriptions and pricing are available here.
- Help is available on our community forum here.
WARRANTY INFORMATION
- One-year manufacturer’s hardware warranty information is here.
- Extended warranties for US customers are available from Extend. More information on their offer and warranty policy can be viewed here.
- Standard 30 day return policy. Netgate does not sell seconds or returns. An open-box fee may apply.
- All specifications subject to change without notice
