Forcepoint NGFW 3301 Appliance
Versatile, modular connectivity and high security for data centers and campus networks

Forcepoint NGFW 3301 Appliance

Click here to jump to more pricing!


Forcepoint NGFW 3300 Series appliances offer versatile, modular connectivity and protection with the performance and scalability needed for data centers and large campus networks. With up to 16 10-Gigabit Ethernet ports and up to nine 40-Gigabit Ethernet ports, the 3300 Series can be used in mixed clusters of as many as 16 devices to deliver unrivaled high availability and fast access for VPNs.

Forcepoint NGFW provides multiple layers of security. It has built-in IPS with anti-evasion defenses, accelerated encrypted inspection, file scanning, exploit detection, mission-critical application proxies and more. Forcepoint’s cloud-assisted Advanced Malware Detection (sandboxing) and dynamic URL Filtering can be enabled in moments. Forcepoint’s CASB, Web, Email and DLP Security serve as ideal complements for the ultimate level of protection.

All Forcepoint NGFW systems are administered via the Forcepoint NGFW Security Management Center (SMC). It provides centralized provisioning, rapid configuration and holistic monitoring of up to 2,000 devices in even the most distributed enterprise. SMC’s high-level “Smart Policies” map business processes into security controls faster and more accurately than low-level firewall rules and enable changes to be made throughout the network in minutes. Fully customizable, interactive visualizations give administrators continuous 360° visibility to quickly identify and resolve incidents.

Features and Benefits:


  • Modular, 1U rack-mounted design - Efficient use of space and power
  • Gigabit Ethernet and modular interfaces - High performance connectivity that adapts to network changes
  • Active-active, mixed clustering - High availability with higher performance and reuse of older devices
  • Multi-Link SD-WAN clustering of broadband and leased lines - Resilient connectivity and lower cost
  • Built-in VPN, IPS, NGFW, and encrypted traffic control - Strong and fast security that doesn’t require extra licenses or equipment
  • Sidewinder mission-critical application proxies - High-assurance security for sensitive applications and networks
  • URL Filtering and Advanced Malware Detection options - Consolidated security that removes gaps and simplifies operations
  • Enhanced Web Security powered from the cloud - Policy-based traffic forwarding for advanced protection on the web
  • Centralized management by enterprise or MSSP - Low TCO and less IT staff burden


  • Next Generation Firewall - 1U, high-speed modular interfaces
  • Enterprise SD-WAN - Multi-Link optimization
  • High Availability - Appliance and network clustering
  • Mobile VPN Clients - Unlimited, IPsec, and SSL
  • IPS - Full IPS capabilities with decryption
  • Usage Control - By application, user, URL
  • Encrypted Inspection - Accelerated, policy-controlled
  • Security Proxies - SSH/SFTP, HTTP, HTTPS, TCP, UDP, TFTP, FTP, DNS
  • Anti-Bot - Command and Control channel multi-method detection
  • Anti-Virus - Reputation and local AV scan


  • URL Filtering - More than 120 dynamic Web security and content categories
  • Advanced Malware Detection - Cloud-based and on-premises zero-day sandboxing


Hardware Specifications NGFW 2101 NGFW 2105
NGFW/NGIPS Throughput
(HTTP 21 kB payload)
5 Gbps 7.5 Gbps
Maximum Firewall Throughput
(UDP 1518 byte)
60 Gbps 80 Gbps
Maximum Inspection Throughput
(UDP 1518 byte)
12 Gbps 15 Gbps
TLS (1.2) Inspection Performance
(44kB payload)
3 Gbps 4 Gbps
IPsec VPN Throughput
13 Gbps 16 Gbps
Concurrent IPsec VPN Tunnels 30,000 40,000
Mobile VPN Clients Unlimited Unlimited
Concurrent Inspected TCP Connections 3 Million 6 Million
Maximum Number of Concurrent Inspected HTTP Connections 500,000 1.1 Million
Maximum Number of Concurrent Connections 18 Million 20 Million
New TCP Connections/sec. 300,000 400,000
VLAN Tagging Unlimited Unlimited
Virtual Contexts
5/25 10/100
Network Interfaces
Fixed Ethernet Interfaces 12 x GE RJ45, 2 x 10Gbps SFP + 12 x GE RJ45, 2 x 10Gbps SFP +
Gigabit Ethernet — Copper Ports 12-28 12-28
10 Gigabit Ethernet ports 2-10 2-10
40 Gigabit Ethernet ports 0-4 0-4
Network I/O Slots 2 2
Connectors 3 x USB, 1 x serial, VGA, IPMI Ethernet 3 x USB, 1 x serial, VGA, IPMI Ethernet
Form Factor 1RU 1RU
Dimensions (W x H x D) 426 x 44 x 450mm
16.7 x 1.73 x 17.72in
Net Weight (Without Modules) 8.6 kg
19 lbs.
8.6 kg
19 lbs.
AC Power Supply 100–240 VAC 50–60 Hz, 300W + 300W
DC Power Supply Option -72 – -36 VDC, 300W + 300W
Redundant Power Supply Option Yes
Typical Power Consumption 130 W 130 W
Maximum Power Consumption 285 W 320 W
Maximum BTU/hr. 972 1092
MTBF 100,000 hours
Operating Temperature 0–+40°C +41–+104°F
Storage Temperature -20–+70°C -4–+158°F
Relative Humidity 10%–95% Non-Condensing
Safety Certifications CB, UL/EN60950, NOM, BSMI
EMI Certifications FCC part 15, CE, EN55022, EN55024


Download the Forcepoint NGFW 3300 Series Appliance Datasheet (.PDF)

Pricing Notes: