Datasheet

Forcepoint NGFW
300 Series
HIGH-AVAILABILITY, HIGH-SECURITY FIREWALL FOR REMOTE SITES AND BRANCH OFFICES

Forcepoint NFGW 300 Series appliances offer high-performance All Forcepoint NGFWs are administered via the Forcepoint NGFW
networking and security for connecting and protecting branch or Security Management Center (SMC), offering centralized provisioning,
home offices with true enterprise efficiency, availability and security. rapid configuration and holistic monitoring of up to 2,000 devices
With up to 13 Gigabit Ethernet ports and optional WLAN (on the in even the most distributed enterprise. SMC’s high-level Smart
NGFW 325), the 300 series can be used in mixed clusters of as many Policies map business processes into security controls faster and
as 16 devices to deliver unrivaled high availability and fast access for more accurately than low-level firewall rules and enable changes
IPsec VPNs. to be made throughout the network in minutes. Fully customizable,
interactive visualizations give administrators continuous 360°
Forcepoint NGFWs provide multiple layers of security. They have built- visibility, enabling incidents to be quickly identified and resolved.
in IPS with anti-evasion defenses, accelerated encrypted inspection,
file scanning, exploit detection, mission-critical application proxies
and more. Forcepoint’s cloud-assisted advanced malware detection
KEY BENEFITS
(sandboxing) and dynamic URL filtering can be enabled in moments,
Compact, desktop design
and Forcepoint’s CASB, Web, Email and DLP Security serve as ideal
Easy to deploy in branches or remote office
complements for the ultimate level of protection.
Zero-touch installation, configuration and updating
No need for on-site technician

Gigabit Ethernet and WLAN option (on NGFW 325)

High performance connectivity
FEATURES 321 & 325
Next Generation Firewall Compact design, centrally managed √
Active-active, mixed clustering
High availability with higher performance and reuse of older devices
High Availability Application and network clustering √

Mobile VPN Clients Unlimited, IPsec and SSL √

Multi-Link network clustering of broadband & leased lines
High availability with higher performance and lower costs
IPS Full IPS capabilities with decryption √

Usage Control By application, user, URL √ Built-in VPN, IPS, NGFW and encrypted traffic control
Strong, fast security that doesn’t require extra licenses or consoles
Encrypted Inspection Accelerated, policy-controlled √

Security Proxies SSH/SFTP, HTTP, TCP, UDP √ URL filtering and advanced malware detection options
Consolidated security powered from the cloud
Command and Control channel
Anti-Bot √
multi-method detection Centralized management by enterprise or MSP
Anti-Virus Reputation and local AV scan √ Low TCO and less IT staff burden

More than 120 dynamic Web security Remote, interactive visibility into branch networks
URL Filtering Optional
and content categories Faster investigations and incident response
Advanced Malware Detection Cloud-based zero-day sandboxing Optional

www.forcepoint.com 1
 Forcepoint NGFW 300 Series | Datasheet

NGFW 321 NGFW 325

SPECIFICATIONS
PERFORMANCE* 321 & 325 NETWORK INTERFACES 321 325
NGFW Throughput (HTTP 21 kB payload) 200 Mbps Fixed Ethernet Interfaces 5 x GE RJ45

Maximum Firewall Throughput (UDP 1518 byte) 4 Gbps Gigabit Ethernet — Copper Ports 5 5-13

Maximum Inspection Throughput (UDP 1518 byte) 700 Mbps WiFi Capability 0 IEEE802.11a/b/g/n

SSL Inspection (AES-256) 150 Mbps Network I/O Slots 0 2 mini modules
Connectors 2 x USB, 1 x serial
Inspected Concurrent Connections 100,000

IPsec VPN Throughput (AES-128-GCM) 1 Gbps

IPsec VPN Tunnels 6000 ORDERING PART #

Mobile VPN Clients Unlimited Forcepoint NGFW 321 Appliance N321
Maximum SSL VPN Portal Users 500 Forcepoint NGFW 325 Appliance N325
Concurrent Connections (No Inspection) 2 million OPTIONAL SUBSCRIPTIONS
New TCP Connections/sec. (No Inspection) 15,000 URL Filtering for NGFW 321 and 325 FPWF5
64-Byte Packets/sec. (No Inspection) 800,000 Advanced Malware Detection for NGFW 321 and 325 FPAMD2
VLAN Tagging Unlimited NETWORKING MODULES 2,3

Virtual Contexts (default/maximum) 3/3 2 Port Gigabit Ethernet bypass Mini Module MMGE2B

4 Port Fast Ethernet Switch Mini Module MMFESW4

PHYSICAL 321 325 4 Port Gigabit Ethernet Mini Module MMGE4

Form Factor Desktop1 1 Port Gigabit Ethernet SFP Mini Module MMGESFP

282 x 44 x 196mm 305 x 44 x 196mm ACCESSORIES

Dimensions (W x H x D) 11.11 x 1.73 x 7.72in 12 x 1.73 x 7.72in
300 Series AC Power Supply ACP32X
1.8 kg 2.2 kg
Net Weight (Without Modules) 300 Series 19in Rack Mounting Kit ACR32X
3.97 lbs. 4.85 lbs.

AC Power Supply 100–240 VAC 50–60 Hz, 180 W 300 Series Spare part Cfast (SLC) ACM8

Typical Power Consumption 18 W 22 W

Maximum Power Consumption 21 W 28 W

Maximum BTU/hr. 72 96
1
Optional rack mount kit available
MTBF (hr.) 120,000
2
See NGFW Module Datasheet for details on modules and supported SFPs
Operating Temperature 0–+45°C +32–+113°F 3
Supported only for 325 appliance
*
Performance values reflect maximums measured under test conditions
Storage Temperature -20–+70°C -4–+158°F
and may vary based on configuration and features enabled.
Relative Humidity (Non-Condensing) 10%–90%

Safety Certifications CB, UL/EN60950

EMI Certifications FCC part 15, CE, EN55022, EN55024

CONTACT ABOUT FORCEPOINT

www.forcepoint.com/contact © 2017 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint. Raytheon is a registered trademark of Raytheon Company. All
other trademarks used in this document are the property of their respective owners. [DATASHEET_FORCEPOINT_NGFW_300_SERIES_EN]-100064.051817