Forcepoint NGFW 331 Appliance
High-availability Enterprise SD-WAN in a high-security firewall for remote sites and branch offices

Forcepoint NGFW 331 Appliance

Forcepoint Products

Forcepoint NGFW Appliances

Forcepoint NGFW 331 Appliance

#N331
Get a Quote!

Get a Quote

Click here to jump to more pricing!

Overview:

Forcepoint NGFW 300 Series appliances offer highperformance SD-WAN connectivity and security for connecting and protecting stores, branches, or home offices with true enterprise efficiency, availability, and security. With up to 16 Gigabit Ethernet ports and optional WLAN (on the NGFW 335), the 300 Series can be used in mixed clusters of as many as 16 devices to deliver unrivaled high availability and fast access for VPNs and SD-WAN.

Forcepoint NGFW provides multiple layers of security. It has built-in IPS with anti-evasion defenses, accelerated encrypted inspection, file scanning, exploit detection, mission-critical application proxies, and more. Forcepoints cloud-assisted Advanced Malware Detection (sandboxing) and dynamic URL Filtering can be enabled in moments. Forcepoints CASB, Web, Email, and DLP Security serve as ideal complements for the ultimate level of protection.

All Forcepoint NGFW systems are administered via the Forcepoint NGFW Security Management Center (SMC). It provides centralized provisioning, rapid configuration, and holistic monitoring of up to 2,000 devices in even the most distributed enterprise. SMC’s high-level “Smart Policies” map business processes into security controls faster and more accurately than low-level firewall rules and enable changes to be made throughout the network in minutes. Fully customizable, interactive visualizations give administrators continuous 360° visibility to quickly identify and resolve incidents.

Features and Benefits:

Benefits:

Compact desktop design - Small footprint and easy to deploy
Zero-touch configuration and updating - No need for an on-site technician
Gigabit Ethernet and WLAN option (NGFW 335W) - All-in-one convenience for smaller locations
Active-active, mixed clustering - High availability with higher performance and reuse of older devices
Multi-Link SD-WAN clustering of broadband and leased lines - Resilient, direct-to-internet connectivity for lower cost alternative to MPLS
Built-in VPN, IPS, NGFW, and encrypted traffic control - Strong and fast security that doesn’t require extra licenses or equipment
URL filtering and advanced malware detection options - Consolidated security that removes gaps and simplifies operations
Enhanced Web Security powered from the cloud - Policy-based traffic forwarding for advanced protection on the web
Remote, interactive visibility into remote locations - Faster, centralized investigations and incident response
Centralized management by enterprise or MSSP - Lower TCO and less IT staff burden
Robust hardware - High MTBF and Power Dual power feed minimize the risk of service outages at remote sites

Feature

Next Generation Firewall - Compact design, centrally managed
Enterprise SD-WAN - Multi-Link optimization of ISP connections and traffic
High Availability - Appliance and network clustering
Mobile VPN Clients - Unlimited, IPsec, and SSL
IPS - Full IPS capabilities with decryption
Usage Control - By application, user, URL
Encrypted Inspection - Accelerated, policycontrolled
Security Proxies - SSH/SFTP, HTTP, HTTPS, TCP, UDP, TFTP, FTP, DNS
Threat Intelligence - Forcepoint ThreatSeeker Intelligence
Anti-Bot - Command and Control channel multi-method detection
Anti-Virus - Reputation and local AV scan

Optional:

URL Filtering - More than 120 dynamic Web security and content categories
Advanced Malware Detection - Cloud-based and on-premises zero-day sandboxing

Specifications:

Hardware Specifications	NGFW 330	NGFW 331	NGFW 335	NGFW 335W
Processor
NGFW/NGIPS Throughput (HTTP 21 kB payload)	350 Mbps	700 Mbps	1000 Mbps	1000 Mbps
Maximum Firewall Throughput (UDP 1518 byte)	4 Gbps	5 Gbps	7 Gbps	7 Gbps
Maximum Inspection Throughput (UDP 1518 byte)	1 Gbps	1.8 Gbps	2.5 Gbps	2.5 Gbps
TLS (1.2) Inspection Performance (44kB payload)	200 Mbps	400 Mbps	550 Mbps	550 Mbps
IPsec VPN Throughput (AES-GCM-256)	1.4 Gbps	2 Gbps	3 Gbps	3 Gbps
Maximum Number of Concurrent Connections	2.9 Million	7 Million	7 Million	7 Million
Concurrent IPsec VPN Tunnels	10,000	20,000	20,000	20,000
Mobile VPN Clients	Unlimited	Unlimited	Unlimited	Unlimited
Concurrent Inspected TCP Connections	100,000	200,000	200,000	200,000
Maximum Number of Concurrent Inspected HTTP Connections	50,000	150,000	150,000	150,000
New TCP Connections/sec.	40,000	70,000	80,000	80,000
VLAN Tagging	Unlimited	Unlimited	Unlimited	Unlimited
Virtual Contexts (default/maximum	3/3	3/3	3/3	3/3
Network Interfaces
Fixed Ethernet Interfaces	8 x GE RJ45	8 x GE RJ45	8 x GE RJ45	8 x GE RJ45
Gigabit Ethernet — Copper Ports	8	8	8-16	8-16
WiFi Capability	–	–	–	IEEE802.11 ac/a/b/g/n
Network I/O Slots	–	–	2 mini modules	2 mini modules
Connectors	3 x USB, 1 x serial	3 x USB, 1 x serial	3 x USB, 1 x serial	3 x USB, 1 x serial, wireless
Physical
Form Factor	Desktop	Desktop	Desktop	Desktop
Dimensions (W x H x D)	305 x 44 x 196mm 12.01 x 1.73 x 7.72in		305 x 44 x 247mm 12.01 x 1.73 x 9.72in
Net Weight (Without Modules)	2.1 kg 4.63 lbs.	2.1 kg 4.63 lbs.	2.3 kg 5.07 lbs.	2.4 kg 5.29 lbs.
AC Power Supply	100–240 VAC 50–60 Hz, 65 W
Typical Power Consumption	25 W	27 W	30 W	35 W
Maximum Power Consumption	36 W	38 W	50 W	55 W
Maximum BTU/hr.	123	130	171	188
Dual Power Supply	Optional
MTBF	150,000 hours
Operating Temperature	0–+45°C +32–+113°F
Storage Temperature	-20–+70°C -4–+158°F
Relative Humidity	10%–90% Non-Condensing
Safety Certifications	CB, UL/EN60950
EMI Certifications	FCC part 15, CE, EN55022, EN55024