• In Stock
  • Sold by Newegg
  • Make an Offer
  • New
Brands
Show More
Price
Show More
Type
Ports
Show More
VPN
WAN Ports
LAN Ports
Maximum Users
Form Factor
Simultaneous Sessions
Show More
Sold by
All Top Brands
Availability
Condition
Current Promotion
Discount
Useful Links
Customer Ratings
  • 3 & Free Program
  • Next-Generation Firewall
  • Likewize Home Tech Protect
  • Featured Brands

    See Deals from SonicWallSee Deals from TP-LinkSee Deals from ASUSSee Deals from Netgear Inc.
Sort By:
View:
Sophos XGS 108 Network Security/Firewall Appliance - 1 Year Xstream Protection - 6 Port - 2.5GBase-T, 1000Base-X - 2.5 Gigabit Ethernet - 12.21 Gbit/s Firewall Throughput - TLS - 6 x RJ-45
Quick View
  •  
  • $1,125.99 
  • Free Shipping
Sophos XGS 108w Network Security/Firewall Appliance 1 Year XSTREAM Protection - 6 Port - 2.5GBase-T, 1000Base-X - 2.5 Gigabit Ethernet - 12.21 Gbit/s Firewall Throughput - Wireless LAN IEEE 802.11ax
Quick View
  •  
  • $1,247.40 
  • Free Shipping
Fortinet FortiGate FG-90G, 8x GE RJ45 ports, 2x 10GE RJ45/SFP+ shared media WAN ports | FG-90G
Quick View
Fortinet FortiGate FG-90G, 8x GE RJ45 ports, 2x 10GE RJ45/SFP+ shared media WAN ports | FG-90G
  • Brand: Fortinet
  • Series: FortiGate 90G Series
  • Part Number: FG-90G
  • VPN: System Performance - Enterprise Traffic Mix IPS Throughput: 4.5 Gbps NGFW Throughput: 2.5 Gbps Threat Protection Throughput: 2.2 Gbps System Performance and Capacity Firewall Throughput (1518 / 512 / 64 byte UDP packets): 28 / 28 / 27.9 Gbps Firewall Latency (64 byte UDP packets): 3.23 µs Firewall Throughput (Packets Per Second): 41.85 Mpps Concurrent Sessions (TCP): 3 M New Sessions/Second (TCP): 124 000 Firewall Policies: 5000 IPsec VPN Throughput (512 byte): 25 Gbps Gateway-to-Gateway IPsec VPN Tunnels: 200 Client-to-Gateway IPsec VPN Tunnels: 2500 SSL-VPN Throughput: 1.4 Gbps Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode): 200 SSL Inspection Throughput (IPS, avg. HTTPS) 3 2.6 Gbps SSL Inspection CPS (IPS, avg. HTTPS) 3 1400 SSL In...
  • Model #: FG90G
SonicWall TZ570 High Availability appliance | 02-SSC-5694
Quick View
SonicWall
SonicWall TZ570 High Availability appliance | 02-SSC-5694
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ 570
  • Model #: 02-SSC-5694
ASUS ExpertWiFi EBG19P Gigabit PoE+ VPN wired router, 8 PoE+ ports, 123W, Up to 3 WAN ethernet ports + 1 USB WAN, Perfect for APs, Commercial-grade network security
Quick View
ASUS
ASUS ExpertWiFi EBG19P Gigabit PoE+ VPN wired router, 8 PoE+ ports, 123W, Up to 3 WAN ethernet ports + 1 USB WAN, Perfect for APs, Commercial-grade network security
  • WAN Ports: Gigabit WAN Port x 1
  • LAN Ports: Gigabit LAN Port x 8 (Changable WAN/LAN Port x 2)
  • Security: AiProtection VPN Let's Encrypt DNS-over-TLS SSH Firewall • Maximum Firewall Keyword Filter :64 • Maximum Firewall Network Service Filter :32 • Maximum Firewall URL Filter : 64
  • Brand: ASUS
  • Model #: EBG19P
Juniper Networks SRX320 Firewall w/ Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching), RMK not included | SRX320-SYS-JB
Quick View
Juniper Networks SRX320 Firewall w/ Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching), RMK not included | SRX320-SYS-JB
  • Protocols: ROUTING PROTOCOLS IPv4, IPv6, ISO, Connectionless Network Service (CLNS) Static routes RIP v1/v2 OSPF/OSPF v3 BGP with Route Reflector IS-IS Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), Reverse Path Forwarding (RPF) Encapsulation: VLAN, Point-to-Point Protocol (PPP), Frame Relay, High-Level Data Link Control (HDLC), serial, Multilink Point-to-Point Protocol (MLPPP), Multilink Frame Relay (MLFR), and Point-to-Point Protocol over Ethernet (PPPoE) Virtual routers Policy-based routing, source-based routing Equal-cost multipath (ECMP)
  • Brand: Juniper Networks
  • Series: SRX3000...
  • Model #: SRX320-SYS-JB
Sophos XGS 108w Network Security/Firewall Appliance 3 Year XSTREAM Protection - 6 Port - 2.5GBase-T, 1000Base-X - 2.5 Gigabit Ethernet - 12.21 Gbit/s Firewall Throughput - Wireless LAN IEEE 802.11ax
Quick View
  •  
  • $1,985.99 
  • Free Shipping
SonicWall NSa 3800 Hardware Only | 03-SSC-1843
Quick View
SonicWall NSA 2700, Network Secure Appliance w/ Secure Upgrade Plus (2-Year Advanced Protection Security Suite) | 02-SSC-8199
Quick View
SonicWall
SonicWall NSA 2700, Network Secure Appliance w/ Secure Upgrade Plus (2-Year Advanced Protection Security Suite) | 02-SSC-8199
  • Part Number: 02-SSC-8199
  • Firewall Type: Firewalls / Security Appliances
  • Type: Wired
  • Standard: IEEE 802.3
  • Model #: 02-SSC-8199
APC AP9630 UPS Network Management Card 2
Quick View
APC AP9630 UPS Network Management Card 2
  • Type: UPS Management Adapter
  • Specifications: Protocols: HTTP, HTTPS, SMTP, SNMP v1, SNMP v3, TCP/IP, Telnet Network Interface Connections: RJ-45 10/100 Base-T
  • Dimensions: 1.50" x 4.80" x 4.50"
  • Weight: 0.18 lb.
  • Model #: AP9630
NETBOTZ RACK MONITOR 750
Quick View
NETBOTZ RACK MONITOR 750
  • Firewall Type: Desktop Type
  • Type: Office Products
  • Model #: NBRK0750
SonicWall TZ670 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) and 1 Year CSE (3 & Free program) | 03-SSC-3028
Quick View
SonicWall
SonicWall TZ670 Firewall (Gen 7) w/ Secure Upgrade Plus (3-Year Advanced Protection Security Suite) and 1 Year CSE (3 & Free program) | 03-SSC-3028
  • Protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security: Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection
  • Brand: SONICWALL
  • Series: TZ 670
  • Model #: 03-SSC-3028
Tripp Lite SFP Transceiver MM Fiber GLC-SX-MMD Compatible 1000Base-SX 550M LC - For Data - 1
Quick View
Juniper Networks SRX340 Firewall w/ Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) | SRX340-SYS-JB
Quick View
Juniper Networks SRX340 Firewall w/ Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) | SRX340-SYS-JB
  • Protocols: ROUTING PROTOCOLS IPv4, IPv6, ISO, Connectionless Network Service (CLNS) Static routes RIP v1/v2 OSPF/OSPF v3 BGP with Route Reflector IS-IS Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), Reverse Path Forwarding (RPF) Encapsulation: VLAN, Point-to-Point Protocol (PPP), Frame Relay, High-Level Data Link Control (HDLC), serial, Multilink Point-to-Point Protocol (MLPPP), Multilink Frame Relay (MLFR), and Point-to-Point Protocol over Ethernet (PPPoE) Virtual routers Policy-based routing, source-based routing Equal-cost multipath (ECMP)
  • Brand: Juniper Networks
  • Series: SRX300
  • Par...
  • Model #: SRX340-SYS-JB
WatchGuard Firebox T25-W Network Security/Firewall Appliance - 5 Port - 10/100/1000Base-T - Gigabit Ethernet - 3.14 Gbit/s Firewall Throughput - 5 x RJ-45 - 1 Year Total Security Suite
Quick View
WatchGuard Firebox T25-W Network Security/Firewall Appliance - 5 Port - 10/100/1000Base-T - Gigabit Ethernet - 3.14 Gbit/s Firewall Throughput - 5 x RJ-45 - 1 Year Total Security Suite
  • Brand: WatchGuard
  • Type: Wired + Wireless
  • Ports: Interfaces 10/100/1000: 5 I/O interfaces: 1 Serial/2 USB Concurrent connections: 1,300,000 Concurrent connections (Proxy): 1,300,000 New connections per second: 16,000 VLANs: 10 WSM licenses (incl): 0 TDR Host Sensors included: 5
  • Simultaneous Sessions: 1300000
  • Model #: WGT26671
Juniper Networks SRX345 Firewall w/ Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) | SRX345-SYS-JB
Quick View
Juniper Networks SRX345 Firewall w/ Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) | SRX345-SYS-JB
  • Protocols: ROUTING PROTOCOLS IPv4, IPv6, ISO, Connectionless Network Service (CLNS) Static routes RIP v1/v2 OSPF/OSPF v3 BGP with Route Reflector IS-IS Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), Reverse Path Forwarding (RPF) Encapsulation: VLAN, Point-to-Point Protocol (PPP), Frame Relay, High-Level Data Link Control (HDLC), serial, Multilink Point-to-Point Protocol (MLPPP), Multilink Frame Relay (MLFR), and Point-to-Point Protocol over Ethernet (PPPoE) Virtual routers Policy-based routing, source-based routing Equal-cost multipath (ECMP)
  • Brand: Juniper Networks
  • Series: SRX300...
  • Model #: SRX345-SYS-JB
Juniper Networks SRX320 Firewall, 6 Ports - PoE Ports, Desktop | SRX320
Quick View
Juniper Networks SRX320 Firewall, 6 Ports - PoE Ports, Desktop | SRX320
  • Protocols: ROUTING PROTOCOLS IPv4, IPv6, ISO, Connectionless Network Service (CLNS) Static routes RIP v1/v2 OSPF/OSPF v3 BGP with Route Reflector IS-IS Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), Reverse Path Forwarding (RPF) Encapsulation: VLAN, Point-to-Point Protocol (PPP), Frame Relay, High-Level Data Link Control (HDLC), serial, Multilink Point-to-Point Protocol (MLPPP), Multilink Frame Relay (MLFR), and Point-to-Point Protocol over Ethernet (PPPoE) Virtual routers Policy-based routing, source-based routing Equal-cost multipath (ECMP)
  • Brand: Juniper Networks
  • Series: SRX3000...
  • Model #: SRX320
WatchGuard WG9020 Firebox SFP+ Module
Quick View
Ubiquiti Networks USG-PRO-4 Enterprise Gateway Router with 2 Combination SFP/RJ-45 Ports
Quick View
Ubiquiti Networks USG-PRO-4 Enterprise Gateway Router with 2 Combination SFP/RJ-45 Ports
  • Brand: Ubiquiti Networks
  • Series: Network Routers
  • Type: Wired
  • Standards: Single
  • Model #: USG-PRO-4-US
Cisco Firepower 1120 NGFW Appliance, 1RU (runs FTD software + optional subscriptions) | FPR1120-NGFW-K9
Quick View
Cisco Firepower 1120 NGFW Appliance, 1RU (runs FTD software + optional subscriptions) | FPR1120-NGFW-K9
  • LAN Ports: Total Number of Expansion Slots: 4.0 Expansion Slot Type: SFP Number of SFP Slots: 4
  • Type: Office Products
  • Dimensions: Height: 1.7" Width: 17.2" Depth: 10.6"
  • Weight: Weight (Approximate): 8 lb
  • Model #: FPR1120-NGFW-K9
LINKSYS BEFSX41 10/100Mbps Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint
Quick View
LINKSYS BEFSX41 10/100Mbps Cable/DSL Firewall Router with 4-Port Switch/VPN Endpoint
  • WAN Ports: 10/100 (Half Duplex) 20/200 (Full Duplex)
  • LAN Ports: 10/100 (Half Duplex) 20/200 (Full Duplex)
  • Protocols: SNMP, DHCP, NTP, PPPoE, PPTP, IPsec, etc.
  • Security: Protects PCs from Ping of Death, SYN Flood, Land Attacks, IP Spoofing, and Other DoS Attacks; Supports Up to Two IPSec Virtual Private Network (VPN)Tunnels, URL Filtering and Time Filtering; Blocks Java, ActiveX, and Cookies
  • Model #: BEFSX41
  •  
  • $200.00 
  • Free Shipping
watchguard firebox t45-poe with 1-yr standard support (us) (wgt47001-us)
Quick View
watchguard firebox t45-poe with 1-yr standard support (us) (wgt47001-us)
  • Security: Stateful packet inspection, TLS decryption, proxy firewall HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy DoS attacks, fragmented & malformed packets, blended threats Browser Safe Search, Google for Business
  • Brand: WatchGuard
  • Series: T45-PoE
  • Type: Wired + Wireless
  • Model #: RNAB0BTS12KDM
TRENDnet Gigabit Multi-WAN VPN Business Router; TWG431BR
Quick View
TRENDnet Gigabit Multi-WAN VPN Business Router; TWG431BR
  • Brand: TRENDnet
  • Standards: IEEE 802.3 IEEE 802.3u IEEE 802.3x IEEE 802.3ab IEEE 802.1Q
  • Speed: 10/100/1000Mbps
  • VPN: SSL VPN Site-to-Site / Client-to-Site IPsec VPN Site-to-Site / Client-to-Site PPTP / L2TP VPN Server / Client-to-Site L2TP with IPsec VPN Server / Client-to-Site IPsec Encryption: 3DES, AES-128/192/256 IPsec Authentication: MD5, SHA-1, SHA-256 IPsec Key Exchange: IKE: Main/Aggressive Mode, Pre-shared Key, DH Groups 1/2/5/14 IPsec Protocols: ESP, PFS DH Groups 1/2/5/14, DPD, Local / Remote ID: IP Address, FQDN IPsec NAT Traversal SSL VPN Encryption: Blowfish, AES, 3DES SSL VPN Certificate: RSA PPTP / L2TP Encryption: MPPE 40-bit, 128-bit, IPsec PPTP / L2TP Authentication: MS-CHAPv1/2
  • Model #: TWG-431BR
Sierra Wireless AC 12VDC Power Adapter for AirLink LS, ES, GX, and RV Models Modem
Quick View
  •  
  • $48.79 
  • Free Shipping
  • $33.90 - $48.79
Cisco 2-Port Analog Telephone Adapter with Router For Multiplatform, 2 x RJ-45 - 2 x FXS - Fast Ethernet - Wall Mountable
Quick View
Cisco 2-Port Analog Telephone Adapter with Router For Multiplatform, 2 x RJ-45 - 2 x FXS - Fast Ethernet - Wall Mountable
  • Brand: Cisco Systems, Inc
  • Part Number: ATA192-3PW-K9
  • Features: Interfaces/Ports Number of Network (RJ-45) Ports: 2 Number of FXS (RJ-11) Ports: 2 I/O Expansions SIM Card Supported: No Network & Communication Ethernet Technology: Fast Ethernet Network Standard: 10/100Base-T Wireless Specifications Wireless LAN: No Power Description Redundant Power Supply Supported: No
  • Dimensions: Height: 3.9" Width: 3.9" Depth: 1.1"
  • Model #: ATA192-3PW-K9
  •  
  • $192.99 
Juniper Networks SRX210HE-POE-TAA Secure Services Gateway PoE Router
Quick View
  •  
  • $399.00 
  • $15.00 Shipping
RACKMOUNT SONICWALL TZ570W
Quick View
RACKMOUNT SONICWALL TZ570W
  • Brand: Rackmount.IT, LLC
  • Type: See Description
  • Model #:
  •  
  • $144.72 
ADTRAN NetVanta 3305 3000 Series 2-Port 10/100Base-T Wired Router 64MB/16MB
Quick View
Refurbished ADTRAN NetVanta 3305 3000 Series 2-Port 10/100Base-T Wired Router 64MB/16MB
  • WAN Ports: 1 x 10/100Mbps
  • LAN Ports: 2 x 10/100Mbps
  • Brand: Adtran
  • Speed: 10/100Mbps
  • Model #: NetVanta 3305-REF
  •  
  • $30.00 
  • Free Shipping
Juniper SSG-5-SH-W-US Secure Services Gateway 5
Quick View
Juniper SSG-5-SH-W-US Secure Services Gateway 5
  • Protocols: HCRP, SPP
  • Model #: SSG-5-SH-W-US
Cisco C1111-4P Router
Quick View
Cisco C1111-4P Router
  • WAN Ports: 1 x 10/100/1000Mbps
  • LAN Ports: 4 x 10/100/1000Mbps
  • Protocols: TCP/IP
  • Brand: CISCO
  • Model #: C1111-4P

Firewall & Network Security Devices – Gateways, UTM, VPN

Protect and Segment Your Network

Build a secure edge that blocks threats, enforces policy, and supports remote work. Start by shop firewalls & security, then add the right access and switching layers for your layout—whether that’s wireless routers, LAN switches, or WAN termination via modems & gateways.

For uplinks and backbones, many deployments rely on fiber. If that’s you, check compatible SFP/SFP+ transceivers and ensure cabling quality with Ethernet cables. On the access layer, plan reliable Wi-Fi using ceiling-mounted access points or a whole-home topology using Mesh Wi-Fi. For neat installs and proper airflow, mount gear in server racks & cabinets.

Budgeting a rollout? Watch for seasonal promos and bundles under networking deals to stretch spend while maintaining security baselines.

When to Choose Each Type

  • SOHO / Home Lab: Basic IPS/web filtering, simple VPN, and VLANs for user/IoT separation.
  • SMB: UTM/NGFW for app control, URL filtering, IPS/IDS; PoE switching for cameras and APs.
  • Enterprise / Multi-Site: High-throughput NGFW with HA, SSO/MFA, centralized management, and 10GbE aggregation.

UTM / Next-Gen Firewalls

  • All-in-one controls: IPS/IDS, antivirus, web filtering, application visibility
  • Size for real-world firewall/IPS/VPN throughput, not just theoretical rates
  • Plan license tiers (AV/IPS/WebFilter) and renewal timelines

VPN & WAN Gateways

  • Remote-user and site-to-site VPN (SSL/IPsec), with dual-WAN and failover
  • Support identity controls (SSO/MFA) and per-app policies
  • Use VLANs and ACLs to segment users, servers, and IoT
Deployment tip: If you enable IPS or content filtering, validate under-load throughput and keep headroom for peak hours and future features.

How to Choose the Right Firewall

    When choosing the right firewall, compare its firewall, IPS, and VPN performance under realistic network loads to ensure it meets your needs. Check the maximum number of concurrent VPN users supported and the types of tunnels available, such as SSL or IPsec. Look for 10GbE ports and fiber uplinks, as well as dual-WAN capabilities for redundancy and failover. Review the UTM (Unified Threat Management) bundles and renewal terms to make sure the included security features align with your requirements. Use VLANs to segment traffic between users, servers, security cameras, and IoT devices for better control and security. Finally, consider rack depth, airflow, cable management, and redundant power supplies to ensure reliable, long-term operation.

Benefits of a Dedicated Hardware Firewall

  • Stronger perimeter protection than software-only solutions
  • Built-in VPN for secure remote work and partner access
  • Layered defenses: IPS/IDS, malware filtering, application control
  • Simple network segmentation with VLANs and ACLs
  • Centralized logging, alerting, and compliance reporting
  • Scales from SOHO to enterprise with HA and high-speed uplinks

FAQs: Firewall & Network Security Devices

Do I need a firewall if my router has NAT?

Yes. NAT is address translation, not security. A firewall adds policy, threat prevention, VPN, and audit logging.

What’s the difference between UTM and NGFW?

UTM highlights “all-in-one” security for SMBs, while NGFW emphasizes app awareness and advanced threat prevention. Many devices blend both.

How do I size a firewall for my office?

Match firewall/IPS/VPN throughput to peak traffic, confirm user/VPN counts, and plan dual-WAN plus growth headroom.

What else should I prepare before installation?

Confirm rack space, power and cooling, cable runs, addressing/VLAN plan, identity integration (SSO/MFA), and logging destinations.

Bestselling Firewall & Network Security Devices Reviews:

Dylan G.
7/2/2024 2:34:39 PM
Great platform to build a 10Gb network on

“ I wanted a wired router that would support my 10Gb internet connection, and this is doing the trick. ”

TP-Link ER8411 | Enterprise Wired 10G VPN Router | Up to 10 WAN Ports | High Network Capacity | SPI Firewall | Omada SDN Integrated | Load Balance | Lightning Protection |