Small Business solutions to Enterprise Solutions

The pfSense Store allows you to buy your hardware directly from the source behind the pfSense project! The hardware appliances in the pfSense store have been tested in large and small networked environments. By purchasing from the pfSense store you are not only supporting the project, but you are simplifying the process of selecting the right hardware for your needs. What's more, eligble hardware purchases from the store come bundled with one year of support for the pfSense software.

XG-1540 1U Rack Mountable

The pfSense XG-1540 delivers a high performance, high throughput front-line security architecture at an excellent price per gigabit. The multi-core processors and extra memory make it great for medium to large networks or for a small network that is expanding.

XG-1540
Case Standard 19" 1U rack mount
Cooling 200W Low-noise PS with PFC: Active CPU fan, 40mm chassis fan
Power 200W Internal Power Supply, 100~240V, 50-60Hz, 2.6 Amp Max
Dimensions 17.2" (437mm) x 1.7" (43mm) x 9.85" (250mm)
CPU Intel® "Xeon-DE" D-1540, FCBGA 1667 supported SoC
CPU Type 8 Cores
Operating Temperature Range 10°C (50°F) to 35°C (95°F)
Memory 16 GB DDR4 UDIMM
Max Active Connections 16,000,000
Hardware Warranty 1 year, with a three year extended limited warranty from the date of manufacture
Network Interfaces Dual LAN via Intel® i350-AM2 1 Gigabit Ethernet
Dual LAN via SoC 10GBase-T
Virtual Machine Device Queues reduce I/O overhead
Supports 10GBASE-T, 100BASE-TX, and 1000BASE-T, RJ45 output
1x Realtek RTL8201N PHY (dedicated IPMI)
Network Expansion 4x Intel 1GbE
2x Chelsio 10GbE
Integrated Wireless Option No
Certifications CE Emission, FCC Class A, RoHS, UL
Storage Options 120GB Intel 535 Series M.2 SSD
Operating Temperature Range 32°F (0°C) to 140°F (60°C)
Console Port VGA
Power Consumption 20W (idle)
USB Ports 2x 3.0 ports, 2x 2.0 ports

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

C2758 1U Rack Mountable

The pfSense C2758 delivers a high performance, high throughput front-line security architecture at an excellent price per gigabit. The multi-core processors and extra memory make it great for medium to large networks or for a small network that is expanding.

C2758
Case Standard 19" 1U rack mount
Cooling Whisper Quiet Fans
Power 200W Internal Power Supply, 100~240V, 50-60Hz, 2.6 Amp Max
Dimensions 17.2" (437mm) x 1.7" (43mm) x 9.85" (250mm)
CPU Intel® Rangeley Atom™ C2758 Socket FCBGA1283 CPU with Intel® QuickAssist
CPU Type 8 Cores
Operating Temperature Range 10°C (50°F) to 35°C (95°F)
Memory 8GB ECC DDR3 1066/1333 MHz
Max Active Connections 8,000,000
Hardware Warranty 1 year, with a three year extended limited warranty from the date of manufacture
Network Interfaces 4x Intel Gigabit Ethernet ports
Network Expansion 2 or 4x Intel 1GbE
2x Chelsio 10GbE
Integrated Wireless Option No
Certifications CE Emission, FCC Class A, RoHS, UL
Storage Options 80GB SATA-3 SSD
Operating Temperature Range 32°F (0°C) to 140°F (60°C)
Console Port Serial and VGA
Power Consumption 20W (idle)
USB Ports 2x 3.0 ports, 2x 2.0 ports

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

SG-8860-1U 1U Rack Mountable

The low power SG-8860-1U firewall appliance provides excellent perimeter protection for sophisticated internal network problem solving between internal LANs. This firewall/router will meet your medium to large business and remote location networks needs.

pfSense SG-8860 1U Appliance
Case 1.75" x 19" x 8.5" 1U rack mount with antenna cutouts
Cooling Integrated heat sink with fan, case fan
Power Internal AC/DC 100-240V, 50-60 Hz
AC Inlet: IEC320-C6 (3 PIN)
Power Cord: NEMA 5-15P to IEC320-CXX
Dimensions 17.2" (437mm) x 1.7" (43mm) x 8.5" (215mm)
CPU Intel "Rangeley" Atom C2758 2.4 Ghz with Intel QuickAssist
CPU Type 8 Cores
Operating Temperature Range 0°C (32°F) to 60°C (140°F)
Memory 8GB DDR3L
Max Active Connections 8,000,000
Hardware Warranty 12 Months
Network Interfaces 4x Gigabit Intel i350 Ethernet Ports (SoC Intel I354 Quad GbE on-die MACs)
2x Gigabit Intel i211 Ethernet Ports
Network Expansion
Integrated Wireless Option Yes
Certifications CE, FCC, RoHS, UL
Storage Options 64GB eMMC Flash on board
128GB mSATA SSD
Console Port Mini USB
Power Consumption 9W (idle)
USB Ports 2X 2.0

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

SG-4860-1U 1U Rack Mountable

The low power SG-4860-1U firewall appliance provides excellent perimeter protection for sophisticated internal network problem solving between internal LANs. This firewall/router will meet your medium to large business and remote location networks needs.

pfSense SG-4860-1U Appliance
Case 1.75" x 19" x 8.5" 1U rack mount with antenna cutouts
Cooling Integrated heat sink with fan, case fan
Power Internal AC/DC 100-240V, 50-60 Hz
AC Inlet: IEC320-C14 (3 PIN)
Power Cord: NEMA 5-15P to IEC320-C13
Dimensions 17.2" (437mm) x 1.7" (43mm) x 8.5" (216mm)
CPU Intel "Rangeley" Atom C2558 2.4 Ghz with Intel QuickAssist
CPU Type 4 Cores
Operating Temperature Range 0°C (32°F) to 40°C (104°F)
Memory 8GB DDR3L
Max Active Connections 8,000,000
Hardware Warranty 12 Months
Network Interfaces 4x Gigabit Intel i350 Ethernet Ports
2x Gigabit Intel i210 Ethernet Ports
SoC Intel I354 Quad GbE on-die MACs
Network Expansion
Integrated Wireless Option Yes
Certifications CE, FCC, RoHS, UL
Storage Options 4GB eMMC Flash on board
30GB Intel 525 mSATA SSD
128GB Micron M600 mSATA SSD
Console Port Mini USB
Power Consumption 7W (idle)
USB Ports 2X 2.0

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

SG-8860 Low Power Performance

The low power SG-8860 firewall appliance provides excellent perimeter protection for sophisticated internal network problem solving between internal LANs. This firewall/router will meet your medium to large business and remote location networks needs.

Case Desktop case with antenna cutouts
Cooling Integrated heat sink with fan
Power External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5A
AC Inlet: IEC320-C6 (3 PIN)
Power Cord: NEMA 5-15P to IEC320-CXX
Dimensions Standard mini-ITX 170mm x 170mm
CPU Intel "Rangeley" Atom C2758 2.4 Ghz with Intel QuickAssist
CPU Type 8 Cores
Operating Temperature Range 0°C (32°F) to 45°C (113°F)
Memory 8GB DDR3L
Max Active Connections 8,000,000
Hardware Warranty 12 Months
Network Interfaces 4x Gigabit Intel i350 Ethernet Ports (SoC Intel I354 Quad GbE on-die MACs)
2x Gigabit Intel i211 Ethernet Ports
Network Expansion
Integrated Wireless Option Yes
Certifications CE, FCC, RoHS, UL
Storage Options 64GB eMMC Flash on board
128GB mSATA SSD
Console Port Mini USB
Power Consumption 9W (idle)
USB Ports 2X 2.0

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

SG-4860 No Moving Parts

The low power SG-4860 firewall appliance provides excellent perimeter protection for sophisticated internal network problem solving between internal LANs. This firewall/router will meet your medium to large business and remote location networks needs.

Case Desktop case with antenna cutouts
Cooling Fanless / Passive
Power External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 4.16A
AC Inlet: IEC320-C14 (3 PIN)
Power Cord: NEMA 5-15P to IEC320-C13
Dimensions Standard mini-ITX 170mm x 170mm
CPU Intel "Rangeley" Atom C2558 2.4 Ghz with Intel QuickAssist
CPU Type 4 Cores
Operating Temperature Range 0°C (32°F) to 40°C (104°F)
Memory 8GB DDR3L
Max Active Connections 8,000,000
Hardware Warranty 12 Months
Network Interfaces 4x Gigabit Intel i350 Ethernet Ports
2x Gigabit Intel i210 Ethernet Ports
SoC Intel I354 Quad GbE on-die MACs
Network Expansion
Integrated Wireless Option Yes
Certifications CE, FCC, RoHS, UL
Storage Options 4GB eMMC Flash on board
30GB Intel 525 mSATA SSD
128GB Micron M600 mSATA SSD
Console Port Mini USB
Power Consumption 7W (idle)
USB Ports 2X 2.0

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

SG-2440 No Moving Parts

The low power SG-2440 firewall appliance provides excellent perimeter protection for sophisticated internal network problem solving between internal LANs. A great fit for your Small to Medium Business, and Remote Location networks.

SG-2440
Case Desktop case with antenna cutouts
Cooling Fanless / Passive
Power External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 4.16A
AC Inlet: IEC320-C14 (3 PIN)
Power Cord: NEMA 5-15P to IEC320-C13
Dimensions Standard mini-ITX 170mm x 170mm
CPU Intel "Rangeley" Atom C2358 1.7 Ghz with Intel QuickAssist
CPU Type 2 Cores
Operating Temperature Range 0°C (32°F) to 40°C (104°F)
Memory 4GB DDR3L
Max Active Connections 3,900,000
Hardware Warranty 12 Months
Network Interfaces 4x Gigabit Intel i350 Ethernet Ports
SoC Intel I354 Quad GbE on-die MACs
Network Expansion
Integrated Wireless Option Yes
Certifications CE, FCC, RoHS, UL
Storage Options 4GB eMMC Flash on board
30GB Intel 525 mSATA SSD
128GB Micron M600 mSATA SSD
Console Port Mini USB
Power Consumption 7W (idle)
USB Ports 2x 2.0 ports

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

SG-2220 No Moving Parts

The low power SG-2220 firewall appliance provides excellent perimeter protection for sophisticated internal network problem solving between internal LANs. This firewall/router will meet your medium to large business and remote location networks needs.

Case Desktop case with antenna cutouts
Cooling Fanless / Passive
Power External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 5A
AC Inlet: IEC320-C6 (3 PIN)
Power Cord: NEMA 5-15P to IEC320-CXX
Dimensions Compact nano-ITX 120mm x 120mm
CPU Intel "Rangeley" Atom C2338 1.7 Ghz
CPU Type 2 Cores
Operating Temperature Range 0°C (32°F) to 65°C (149°F)
Memory 2GB DDR3L
Max Active Connections --
Hardware Warranty 12 Months
Network Interfaces 2x Gigabit Intel Ethernet Ports
Network Expansion
Integrated Wireless Option Yes
Certifications CE, FCC, RoHS, UL
Storage Options 4GB eMMC Flash on board
Console Port Mini USB
Power Consumption 6W (idle)
USB Ports 1X 2.0

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution. Requires a managed switch.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.

Cloud AppliancesFor Your Virtual Needs

pfSense delivers cloud-based security for your enterprise IT environment with the same features and functionality you have come to rely on. Deploy quickly and cost-effectively while reducing operational expense and significant upfront capital investment.

Polygon Cloud
CPU Virtualized
Memory Virtualized
Interfaces Virtualized
Certifications VMware Certified
Storage Virtualized
Console Port Virtualized

High Availability

Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

Multi-WAN

Enables the use of multiple Internet connections, with load balancing and/or failover, for improved Internet availability and bandwidth usage distribution.

Server Load Balancing

Used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.

Dynamic DNS

A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.

Virtual Private Network (VPN)

Multiple options for VPN connectivity, including IPsec, OpenVPN, and PPTP.

PPPoE Server

The pfSense software offers a PPPoE server. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.

Reporting and Monitoring

RRD and real time graphs that include information on everything from CPU utilization to real time throughput for each interface.

Captive Portal

Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security.