• In Stock
  • Sold by Newegg
  • Make an Offer
  • New
Brands
Show More
Price
Show More
Type
Ports
Show More
VPN
WAN Ports
LAN Ports
Maximum Users
Form Factor
Simultaneous Sessions
Show More
All Top Brands
Availability
Condition
Current Promotion
Discount
Sold by
Useful Links
Customer Ratings
  • Sophos Banners
  • 3&Free Program
  • Connect with US today
  • Featured Brands

    See Deals from TP-LinkSee Deals from ASUSSee Deals from Netgear Inc.See Deals from MSI
Sort By:
View:
WatchGuard Firebox T45-PoE Network Security Appliance with 1 Year Basic Security Suite License - Advanced Firewall, VPN, Intrusion Prevention (WGT47031-US)
Quick View
WatchGuard Firebox T45-PoE Network Security Appliance with 1 Year Basic Security Suite License - Advanced Firewall, VPN, Intrusion Prevention (WGT47031-US)
  • Brand: WatchGuard
  • Type: Wired
  • Ports: I/O interfaces: 1 Serial/2 USB
  • Simultaneous Sessions: 3850000
  • Model #: WGT47031US
SonicWall TZ570 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) | 02-SSC-5687
Quick View
in 30 days
SonicWall
SonicWall TZ570 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) | 02-SSC-5687
  • Brand: SONICWALL
  • Type: Others
  • Ports: 8x1GbE, 2x5GbE, 2 USB 3.0
  • Simultaneous Sessions: 1250000
  • Model #: 02-SSC-5687
Ubiquiti Poe-24-24W Power Over Ethernet Injector
Quick View
Ubiquiti Poe-24-24W Power Over Ethernet Injector
  • Protocols: TCP/IP
  • Brand: UBIQUITI - NETWORKS
  • Weight: 0.65
  • Model #: POE-24-24W
  • $29.99
  •  
  • $21.99 
  • Save: 26%
  • Free Shipping
SonicWall TZ270 Firewall (Gen 7) 3 Years Secure Upgrade Plus Threat 02-SSC-7311
Quick View
SonicWall
SonicWall TZ270 Firewall (Gen 7) 3 Years Secure Upgrade Plus Threat 02-SSC-7311
  • Firewall Type: Desktop Type
  • Type: Wired
  • Standard: TCP/IP L2TP PPTP PPPoE DHCP
  • Frequency Band: 2.4 GHz/5 GHz
  • Model #: 02-SSC-7311
Fortinet FortiGate FG-70F Network Switch Firewall Secure SD-WAN 10xGE RJ45 ports
Quick View
Fortinet FortiGate FG-70F Network Switch Firewall Secure SD-WAN 10xGE RJ45 ports
  • Part Number: FG-70F
  • Firewall Type: Desktop Type
  • Type: Wired
  • Simultaneous Sessions: 1.5 Million
  • Model #: FG-70F
WatchGuard Firebox T85-PoE Network Security/Firewall Appliance
Quick View
WatchGuard Firebox T85-PoE Network Security/Firewall Appliance
  • Brand: WatchGuard
  • Type: Wired + Wireless
  • Ports: 1 Serial/2 USB
  • Simultaneous Sessions: 3800000
  • Model #: WGT85033US
FACEPLATE F/ ION PLATFORM
Quick View
FACEPLATE F/ ION PLATFORM
  • Brand: TRANSITION NETWORKS
  • Model #: IONFP
Trade up toWatchGuardFirebox M290 with 3-yr Basic Security Suite
Quick View
Trade up toWatchGuardFirebox M290 with 3-yr Basic Security Suite
  • Brand: WatchGuard
  • Ports: 8 x 1GbE RJ45
  • Simultaneous Sessions: 3500000
  • Throughput: 1Gbps - 2.5Gbps
  • Model #: WGM29002003
Fortinet FortiGate FG-201F Network Security/Firewall Appliance - 18 Port - 10/100/1000Base-T, 1000Base-X, 10GBase-X - 10 Gigabit Ethernet - 500 VPN - 17 x RJ-45 - 12 Total Expansion Slots - 1U
Quick View
  •  
  • $5,137.99 
  • Free Shipping
Cisco Firepower 1010 Ngfw
Quick View
Cisco Firepower 1010 Ngfw
  • Firewall Type: Desktop Type
  • Weight: 6.1
  • Model #: FPR1010NGFWK9
Ubiquiti Gateway Max (UXG-Max)
Quick View
Ubiquiti Gateway Max (UXG-Max)
  • Brand: Ubiquiti Networks
  • Part Number: UXG-MAX
  • Network Management Type: Managed
  • Primary Ports: 5 x RJ45
  • Model #: UXG-Max
Cisco Firepower 1120 Network Security/Firewall Appliance
Quick View
Cisco Firepower 1120 Network Security/Firewall Appliance
  • LAN Ports: Total Number of Expansion Slots: 4.0 Expansion Slot Type: SFP Number of SFP Slots: 4
  • Type: Office Products
  • Dimensions: Height: 1.7" Width: 17.2" Depth: 10.6"
  • Weight: Weight (Approximate): 8 lb
  • Model #: FPR1120-NGFW-K9
SonicWall TZ270 Firewall (Gen 7) w/ 2 years Essential Protection Security Suite | 02-SSC-6846
Quick View
SonicWall
SonicWall TZ270 Firewall (Gen 7) w/ 2 years Essential Protection Security Suite | 02-SSC-6846
  • Firewall Type: Desktop Type
  • Type: Wired
  • Simultaneous Sessions: 750000
  • Throughput: Firewall inspection throughput: 2 Gbps Threat prevention throughput: 750 Mbps Application inspection throughput: 1 Gbps IPS throughput: 1 Gbps Anti-malware inspection throughput: 750 Mbps TLS/SSL inspection and decryption throughput (DPI SSL): 300 Mbps IPSec VPN throughput: 750 Mbps
  • Model #: 02-SSC-6846
SONICWALL TZ 470 Firewall (Gen 7) w/ Total Secure (1-Year Advanced Protection Security Suite) | 02-SSC-6794
Quick View
SonicWall
SONICWALL TZ 470 Firewall (Gen 7) w/ Total Secure (1-Year Advanced Protection Security Suite) | 02-SSC-6794
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ 470
  • Model #: 02-SSC-6794
SonicWall TZ370 Firewall (Gen 7) w/ Secure Upgrade Plus (2-Year Advanced Protection Security Suite) | 02-SSC-6820
Quick View
SonicWall
SonicWall TZ370 Firewall (Gen 7) w/ Secure Upgrade Plus (2-Year Advanced Protection Security Suite) | 02-SSC-6820
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ 370
  • Model #: 02-SSC-6820
SonicWall 02-SSC-6796 TZ470 Secure Upgrade Plus - Essential Edition (2 Years)
Quick View
SonicWall
SonicWall 02-SSC-6796 TZ470 Secure Upgrade Plus - Essential Edition (2 Years)
  • Firewall Type: Desktop Type
  • Type: Wired
  • Simultaneous Sessions: 1000000
  • Throughput: Firewall inspection throughput: 3.5 Gbps Threat prevention throughput: 1.5 Gbps Application inspection throughput: 2 Gbps IPS throughput: 2 Gbps Anti-malware inspection throughput: 1.5 Gbps TLS/SSL inspection and decryption throughput (DPI SSL): 600 Mbps IPSec VPN throughput: 1.5 Gbps
  • Model #: 02-SSC-6796
SonicWall 02-SSC-5858 TZ670 with 8x5 Support (1 Year)
Quick View
SonicWall
SonicWall 02-SSC-5858 TZ670 with 8x5 Support (1 Year)
  • Firewall Type: Desktop Type
  • Type: Wired
  • Simultaneous Sessions: 150000
  • Throughput: Firewall inspection throughput: 5.0 Gbps Threat prevention throughput: 2.50 Gbps Application inspection throughput: 3.0 Gbps IPS throughput: 3.0 Gbps Anti-malware inspection throughput: 2.50 Gbps TLS/SSL inspection and decryption throughput (DPI SSL): 800 Mbps IPSec VPN throughput: 2.1 Gbps
  • Model #: 02-SSC-5858
SonicWall TZ470 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) | 02-SSC-6799
Quick View
SonicWall
SonicWall TZ470 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) | 02-SSC-6799
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Series: TZ 470
  • Part Number: 02-SSC-6799
  • Firewall Type: Desktop Type
  • Model #: 02-SSC-6799
SonicWall TZ270 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) and 1 Year CSE | 03-SSC-2996
Quick View
in 30 days
SonicWall
SonicWall TZ270 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) and 1 Year CSE | 03-SSC-2996
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ270 Series
  • Model #: 03-SSC-2996
SonicWall TZ270 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) | 02-SSC-6845
Quick View
SonicWall
SonicWall TZ270 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) | 02-SSC-6845
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Series: TZ 270
  • Part Number: 02-SSC-6845
  • Firewall Type: Desktop Type
  • Model #: 02-SSC-6845
WatchGuard WG9020 Firebox SFP+ Module
Quick View
SONICWALL TZ 370 Firewall (Gen 7) w/ Total Secure (1-Year Advanced Protection Security Suite) | 02-SSC-6819
Quick View
SonicWall
SONICWALL TZ 370 Firewall (Gen 7) w/ Total Secure (1-Year Advanced Protection Security Suite) | 02-SSC-6819
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ 370
  • Model #: 02-SSC-6819
TRENDnet Gigabit Multi-WAN VPN Business Router; TWG431BR
Quick View
TRENDnet Gigabit Multi-WAN VPN Business Router; TWG431BR
  • Brand: TRENDnet
  • Standards: IEEE 802.3 IEEE 802.3u IEEE 802.3x IEEE 802.3ab IEEE 802.1Q
  • Speed: 10/100/1000Mbps
  • VPN: SSL VPN Site-to-Site / Client-to-Site IPsec VPN Site-to-Site / Client-to-Site PPTP / L2TP VPN Server / Client-to-Site L2TP with IPsec VPN Server / Client-to-Site IPsec Encryption: 3DES, AES-128/192/256 IPsec Authentication: MD5, SHA-1, SHA-256 IPsec Key Exchange: IKE: Main/Aggressive Mode, Pre-shared Key, DH Groups 1/2/5/14 IPsec Protocols: ESP, PFS DH Groups 1/2/5/14, DPD, Local / Remote ID: IP Address, FQDN IPsec NAT Traversal SSL VPN Encryption: Blowfish, AES, 3DES SSL VPN Certificate: RSA PPTP / L2TP Encryption: MPPE 40-bit, 128-bit, IPsec PPTP / L2TP Authentication: MS-CHAPv1/2
  • Model #: TWG-431BR
SonicWall TZ370 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) and 1 Year CSE | 03-SSC-3018
Quick View
SonicWall
SonicWall TZ370 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) and 1 Year CSE | 03-SSC-3018
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ 370
  • Model #: 03-SSC-3004
Cisco Small Business ISR4331-V/K9 10/100/1000Mbps Router with Voice (V) Bundle
Quick View
Cisco Small Business ISR4331-V/K9 10/100/1000Mbps Router with Voice (V) Bundle
  • LAN Ports: 3 x 10/100/1000Mbps
  • Protocols: IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast sparse mode (PIM SM), PIM Source Specific Multicast (SSM), RSVP, CDP, ERSPAN, IPSLA, CNS, Call Home, EEM, IKE, ACL, EVC, DHCP, FR, DNS, LISP, OTV, HSRP, RADIUS, AAA, AVC, Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, MPLS, Layer 2 and Layer 3 VPN, IP sec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE802.1ag, and IEEE802.3ah
  • Security: UL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 AS/NZS 60...
  • Model #: ISR4331-V/K9
  • $3,521.99
  •  
  • $3,491.99 
  • Free Shipping
SonicWall TZ270W Firewall (Gen 7) w/ Total Secure (1-Year Advanced Protection Security Suite) | 02-SSC-6850
Quick View
SonicWall
SonicWall TZ270W Firewall (Gen 7) w/ Total Secure (1-Year Advanced Protection Security Suite) | 02-SSC-6850
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ270 Series
  • Model #: 02-SSC-6850
SonicWall 02-SSC-6856 TZ270 Wireless-AC Secure Upgrade Plus - Essential Edition - 2 Year
Quick View
SonicWall
SonicWall 02-SSC-6856 TZ270 Wireless-AC Secure Upgrade Plus - Essential Edition - 2 Year
  • Series: TZ270W Series
  • Firewall Type: Desktop Type
  • Type: Wireless
  • Wireless Technology: IEEE 802.11ac
  • Model #: 02-SSC-6856
SonicWall 02-SSC-7285 TZ370 Secure Upgrade Plus - Threat Edition - 2 Year
Quick View
SonicWall
SonicWall 02-SSC-7285 TZ370 Secure Upgrade Plus - Threat Edition - 2 Year
  • Firewall Type: Desktop Type
  • Type: Wired
  • Simultaneous Sessions: 900000
  • Throughput: 1.0 Gbps
  • Model #: 02-SSC-7285
Sophos XGS 108w Network Security/Firewall Appliance 1 Year Standard Protection - 6 Port - 2.5GBase-T, 1000Base-X - 2.5 Gigabit Ethernet - 12.21 Gbit/s Firewall Throughput - Wireless LAN IEEE 802.11ax
Quick View
  • $1,104.50
  •  
  • $1,084.99 
  • Free Shipping
Sophos XGS 108 Network Security/Firewall Appliance - 3 Year Standard Protection - 6 Port - 2.5GBase-T, 1000Base-X - 2.5 Gigabit Ethernet - 12.21 Gbit/s Firewall Throughput - TLS - 6 x RJ-45
Quick View
  • $1,555.00
  •  
  • $1,520.99 
  • Free Shipping
Sophos XGS 108 Network Security/Firewall Appliance - 3 Year Xstream Protection - 6 Port - 2.5GBase-T, 1000Base-X - 2.5 Gigabit Ethernet - 12.21 Gbit/s Firewall Throughput - TLS - 6 x RJ-45
Quick View
  • $1,804.00
  •  
  • $1,779.99 
  • Free Shipping

Firewall & Network Security Devices – Gateways, UTM, VPN

Protect and Segment Your Network

Build a secure edge that blocks threats, enforces policy, and supports remote work. Start by shop firewalls & security, then add the right access and switching layers for your layout—whether that’s wireless routers, LAN switches, or WAN termination via modems & gateways.

For uplinks and backbones, many deployments rely on fiber. If that’s you, check compatible SFP/SFP+ transceivers and ensure cabling quality with Ethernet cables. On the access layer, plan reliable Wi-Fi using ceiling-mounted access points or a whole-home topology using Mesh Wi-Fi. For neat installs and proper airflow, mount gear in server racks & cabinets.

Budgeting a rollout? Watch for seasonal promos and bundles under networking deals to stretch spend while maintaining security baselines.

When to Choose Each Type

  • SOHO / Home Lab: Basic IPS/web filtering, simple VPN, and VLANs for user/IoT separation.
  • SMB: UTM/NGFW for app control, URL filtering, IPS/IDS; PoE switching for cameras and APs.
  • Enterprise / Multi-Site: High-throughput NGFW with HA, SSO/MFA, centralized management, and 10GbE aggregation.

UTM / Next-Gen Firewalls

  • All-in-one controls: IPS/IDS, antivirus, web filtering, application visibility
  • Size for real-world firewall/IPS/VPN throughput, not just theoretical rates
  • Plan license tiers (AV/IPS/WebFilter) and renewal timelines

VPN & WAN Gateways

  • Remote-user and site-to-site VPN (SSL/IPsec), with dual-WAN and failover
  • Support identity controls (SSO/MFA) and per-app policies
  • Use VLANs and ACLs to segment users, servers, and IoT
Deployment tip: If you enable IPS or content filtering, validate under-load throughput and keep headroom for peak hours and future features.

How to Choose the Right Firewall

    When choosing the right firewall, compare its firewall, IPS, and VPN performance under realistic network loads to ensure it meets your needs. Check the maximum number of concurrent VPN users supported and the types of tunnels available, such as SSL or IPsec. Look for 10GbE ports and fiber uplinks, as well as dual-WAN capabilities for redundancy and failover. Review the UTM (Unified Threat Management) bundles and renewal terms to make sure the included security features align with your requirements. Use VLANs to segment traffic between users, servers, security cameras, and IoT devices for better control and security. Finally, consider rack depth, airflow, cable management, and redundant power supplies to ensure reliable, long-term operation.

Benefits of a Dedicated Hardware Firewall

  • Stronger perimeter protection than software-only solutions
  • Built-in VPN for secure remote work and partner access
  • Layered defenses: IPS/IDS, malware filtering, application control
  • Simple network segmentation with VLANs and ACLs
  • Centralized logging, alerting, and compliance reporting
  • Scales from SOHO to enterprise with HA and high-speed uplinks

FAQs: Firewall & Network Security Devices

Do I need a firewall if my router has NAT?

Yes. NAT is address translation, not security. A firewall adds policy, threat prevention, VPN, and audit logging.

What’s the difference between UTM and NGFW?

UTM highlights “all-in-one” security for SMBs, while NGFW emphasizes app awareness and advanced threat prevention. Many devices blend both.

How do I size a firewall for my office?

Match firewall/IPS/VPN throughput to peak traffic, confirm user/VPN counts, and plan dual-WAN plus growth headroom.

What else should I prepare before installation?

Confirm rack space, power and cooling, cable runs, addressing/VLAN plan, identity integration (SSO/MFA), and logging destinations.