Datasheet

Forcepoint NGFW 300 Series forcepoint.com

Next Generation Firewall

300 Series
For branch offices, 4–7 Gbps firewall throughput

Remote sites and branch offices requiring enhanced performance can

easily connect directly to the cloud with Forcepoint NGFW 300 Series.
It integrates full SD-WAN connectivity and strong security in a compact,
desktop appliance that’s managed at enterprise scale from Forcepoint’s
renowned Security Management Console (SMC).

Direct-to-cloud connectivity and security for digital transformation

Key features Digital transformation is all about connecting distributed workforces to the
resources they need, no matter where they are. With applications and data
· Compact desktop form factor²
moving to the cloud, organizations are increasingly finding that old “hub-and-
· Multi-ISP SD-WAN and site-to-site spoke” networking technologies such as MPLS can no longer handle the load.
Multi Link™ VPN connectivity
The Forcepoint NGFW 300 Series provides the networking and security
· Industry’s most secure NGFW
needed to safely connect branches and remote offices directly to the Internet
with anti-evasion IPS
for maximum performance and productivity using the cloud. The N335 and
· High-availability clustering N335W's modular interfaces and optional WLAN (on NGFW 335W) allow
· Accelerated inspection of organizations to tailor the appliance to their exact connectivity needs.
encrypted traffic
Reduced costs and footprint with integrated SD-WAN and NGFW
· Zero-touch deployment
The Forcepoint NGFW 300 Series unites networking and security in a compact
· Access and security policy updates desktop appliance that is easy to install in small locations. It integrates multi-
with just a few clicks ISP SD-WAN connectivity, site-to-site Multi-Link™ VPN and high-availability
clustering with the industry’s strongest next-generation firewall (NGFW) and
· Centralized management of 2,000
intrusion prevention (IPS) security*.
appliances on one pane of glass

· Integration with Forcepoint Web It is centrally administered using the same Forcepoint Security Management
Security Cloud and CASB Center (SMC) that controls up to 2000 physical, virtual and cloud appliances
from a single pane of glass. With zero-touch deployment, Forcepoint NGFW
· Optional WLAN (NGFW N335W)
devices throughout the world can be deployed quickly, without an on-site
· Optional Advanced Malware technician, and SMC enables access and security policies can be updated with
Detection sandboxing just a few clicks.

· Optional URL Filtering powered by

Advanced clustering for high availability
Forcepoint ThreatSeeker
Downtime is not an option for many organizations. That’s why the Forcepoint
NGFW 300 Series offers advanced clustering that allows multiple appliances
(including other Forcepoint NGFW models) to be used together to keep branch
networks running even in the middle of firmware updates or hardware failure.
Built-in SD-WAN traffic management enables links from more than one ISP to
*Top security effectiveness score for three years in a row in NSS Labs
NGFW Group Test be used at the same time to further reduce the chance of outages.
2 forcepoint.com

Forcepoint NGFW N330 & N331 Appliance

PHYSICAL N330 N331 N335 N335W

Form factor Desktop²

Dimensions 305 x 44 x 196 mm 305 x 44 x 247 mm

WxHxD 12.01 x 1.73 x 7.72 in 12.01 x 1.73 x 9.72 in

Net weight 2.1 kg 2.3 kg 2.4 kg

N335 & without modules 4.63 lbs 5.07 lbs 5.29 lbs
PERFORMANCE 1
N330 N331
N335W
AC power supply 100 - 240 VAC 50 - 60 Hz, 180 W
NGFW/NGIPS throughput 350 700 1,000
(HTTP 21kB payload) Mbps Mbps Mbps Typical power
25 W 27 W 30 W 35 W
consumption
Max firewall throughput
4 Gbps 5 Gbps 7 Gbps
(UDP 1518 byte) Max power
36 W 38 W 50 W 55 W
consumption
Max inspection throughput
1 Gbps 1.8 Gbps 2.5 Gbps
(UDP 1518 byte) Max BTU/Hour 123 130 171 188

TLS 1.2 inspection performance 200 400 550 Dual power supply Optional
(44kB payload) Mbps Mbps Mbps
MTBF 150,000 hours
IPsec VPN throughput
1.4 Gbps 2 Gbps 3 Gbps
AES-GCM-256 Operating temp 0° - 45° C, 32° - 113° F

Max number of concurrent 2.9 Storage temp -20° - 70° C, -4° - 158° F
7 million 7 million
connections million
Relative humidity
10% - 90%
Concurrent IPsec VPN tunnels 10,000 20,000 20,000 non-condensing

Mobile VPN clients Unlimited Unlimited Unlimited Safety certifications CB, UL/EN60950

Concurrent inspected EMI certifications FCC Part 15, CE, EN55022, EN55024
100,000 200,000 200,000
TCP connections

Max number of concurrent ORDERING N330 N331 N335 N335W

50,000 150,000 150,000
inspected HTTP connections
Forcepoint NGFW
N330 N331 N335 N335W
New TCP connections/second 40,000 70,000 80,000 33x Appliance

VLAN tagging Unlimited Unlimited Unlimited URL Filtering FPURL2X FPURL3X

Virtual contexts Advanced

3/3 3/3 3/3 FPAMD2X FPAMD3X
default/maximum Malware Detection

4 port FE switch
MMFESW4
NETWORK INTERFACES N330 N331 N335 N335W mini module³

Fixed Ethernet interfaces 8 x GE RJ45 4 port GbE mini module³ MMGE4

Gigabit Ethernet - 1 port GbE SFP

8 8-16 MMGESFP
copper ports mini module³

Gigabit Ethernet - 2 port GbE bypass

Up to 4 MMGE2B
SFP ports mini module³

IEEE 802.11 300 Series 19in rack

Wi-Fi capability ac/a/b/g/n ACR32X
mounting kit

Network I/O slots 2 mini modules 300 Series

AC power supply ACP33X
Connectors 3x USB, 1x serial (dual power supply capable)

¹ Performance values reflect maximums measured under test conditions and may vary based on
300 Series spare part
configuration and features enabled ACM8 ACM16
² Optional rackmount kit available Cfast (SLC)
³ See NGFW Module Datasheet for details on modules and supported SFPs

Contact: forcepoint.com/contact

© 2019 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint. All other trademarks
used in this document are the property of their respective owners.
[datasheet_forcepoint_ngfw_300_series_en] 100108.070819