Datasheet

FORCEPOINT NGFW 300 SERIES

High-availability Enterprise SD-WAN in a high-security
firewall for remote sites and branch offices

NGFW 321 NGFW 325

Forcepoint NGFW 300 Series appliances offer high- All Forcepoint NGFW systems are administered via the
performance SD-WAN connectivity and security for Forcepoint NGFW Security Management Center (SMC).
connecting and protecting stores, branches or home It provides centralized provisioning, rapid configuration
offices with true enterprise efficiency, availability and holistic monitoring of up to 2,000 devices in even the
and security. With up to 13 Gigabit Ethernet ports and most distributed enterprise. SMC’s high-level “Smart
optional WLAN (on the NGFW 325), the 300 Series can Policies” map business processes into security controls
be used in mixed clusters of as many as 16 devices to faster and more accurately than low-level firewall rules
deliver unrivaled high availability and fast access for and enable changes to be made throughout the network
VPNs and SD-WAN. in minutes. Fully customizable, interactive visualizations
give administrators continuous 360° visibility to quickly
Forcepoint NGFW provides multiple layers of security. identify and resolve incidents.
It has built-in IPS with anti-evasion defenses,
accelerated encrypted inspection, file scanning, exploit
detection, mission-critical application proxies and
more. Forcepoint’s cloud-assisted Advanced Malware
Detection (sandboxing) and dynamic URL Filtering can
be enabled in moments. Forcepoint’s CASB, Web, Email
and DLP Security serve as ideal complements for the
ultimate level of protection.

www.forcepoint.com 1
 Forcepoint NGFW 300 Series Appliance | Datasheet

FEATURES 321 & 325

Next Generation
Firewall
Compact design,
centrally managed
Key Benefits
 Compact, desktop design²
Enterprise
SD-WAN
Multi-Link optimization Small footprint and easy to deploy
 Zero-touch configuration and updating
High Availability
Appliance and network No need for an on-site technician
clustering
 Gigabit Ethernet and WLAN option (NGFW 325)
Mobile VPN All-in-one convenience for smaller locations
Unlimited, IPsec and SSL
Clients
 Active-active, mixed clustering
Full IPS capabilities with
High availability with higher performance and
IPS reuse of older devices
decryption

 Multi-Link SD-WAN clustering of broadband and

Usage Control By application, user, URL
leased lines
Resilient, direct-to-internet connectivity and
Encrypted Accelerated,
Inspection policy-controlled lower cost
 Built-in VPN, IPS, NGFW and encrypted traffic
SSH/SFTP, HTTP, HTTPS, control
Security Proxies
TCP, UDP, TFTP, FTP, DNS
Strong and fast security that doesn’t require
extra licenses or equipment
Command and Control
Anti-Bot channel multi-method  URL filtering and advanced malware
detection
detection options
Reputation and local
Consolidated security that removes gaps
Anti-Virus and simplifies operations
AV scan

 Enhanced Web Security powered from the cloud

More than 120 dynamic
URL Filtering Web security and content Optional
Policy-based traffic forwarding for advanced
categories protection on the web
 Remote, interactive visibility into remote
Advanced Cloud-based and on-
Malware premises zero day Optional
locations
Detection sandboxing Faster, centralized investigations and incident
response
 Centralized management by enterprise or MSSP
Lower TCO and less IT staff burden

www.forcepoint.com 2
 Forcepoint NGFW 300 Series Appliance | Datasheet

Specifications
PERFORMANCE 1 321 & 325 NETWORK INTERFACES 321 325

NGFW/NGIPS Throughput Fixed Ethernet Interfaces 5 x GE RJ45

200 Mbps
(HTTP 21 kB payload)
Gigabit Ethernet — Copper Ports 5 5-13
Maximum Firewall Throughput
4 Gbps
(UDP 1518 byte)
IEEE802.11
WiFi Capability –
a/b/g/n
Maximum Inspection Throughput
700 Mbps
(UDP 1518 byte)
2 mini
Network I/O Slots –
modules
TLS (1.2) Inspection Performance
130 Mbps
(44kB payload)
Connectors 2 x USB, 1 x serial

IPsec VPN Throughput

900 Mbps
(AES-GCM-256)
ORDERING PART #
Concurrent IPsec VPN Tunnels 6,000
Forcepoint NGFW 321 Appliance N321
Mobile VPN Clients Unlimited
Forcepoint NGFW 325 Appliance N325
Concurrent Inspected TCP Connections 100,000
OPTIONAL SUBSCRIPTIONS
Maximum Number of Concurrent Inspected
50,000
HTTP Connections
URL Filtering for NGFW 321 and 325 FPURL2X

VLAN Tagging Unlimited

Advanced Malware Detection for NGFW 321
FPAMD2X
and 325
Virtual Contexts (default/maximum) 3/3
NETWORKING MODULES 3 4

2 Port Gigabit Ethernet bypass Mini Module MMGE2B

4 Port Fast Ethernet Switch Mini Module MMFESW4

4 Port Gigabit Ethernet Mini Module MMGE4

1 Port Gigabit Ethernet SFP Mini Module MMGESFP

ACCESSORIES

300 Series AC Power Supply ACP32X

300 Series 19in Rack Mounting Kit ACR32X

300 Series 2 Spare part Cfast (SLC) ACM16

www.forcepoint.com 3
 Forcepoint NGFW 300 Series Appliance | Datasheet

Specifications
PHYSICAL 321 325

Form Factor Desktop 2

Dimensions 282 x 44 x 196mm 305 x 44 x 196mm

(W x H x D) 11.11 x 1.73 x 7.72in 12 x 1.73 x 7.72in

Net Weight 1.8 kg 2.2 kg

(Without Modules) 3.97 lbs. 4.85 lbs.

AC Power Supply 100–240 VAC 50–60 Hz, 180 W

Typical Power Consumption 18 W 22 W

Maximum Power Consumption 21 W 28 W

Maximum BTU/hr. 72 96

MTBF 120,000 hours

Operating Temperature 0–+45°C +32–+113°F

Storage Temperature -20–+70°C -4–+158°F

Relative Humidity
10%–90%
(Non-Condensing)

Safety Certifications CB, UL/EN60950

EMI Certifications FCC part 15, CE, EN55022, EN55024

1 Performance values reflect maximums measured under test conditions and may vary based on configuration and features enabled.
2 Optional rack mount kit available
3 See NGFW Module Datasheet for details on modules and supported SFPs
4 Supported only for 325 appliance

CONTACT © 2018 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of
Forcepoint. All other trademarks used in this document are the property of
www.forcepoint.com/contact their respective owners.

[DATASHEET_FORCEPOINT_NGFW300_DATASHEET_EN] 100082.021418

www.forcepoint.com 4