• In Stock
  • Sold by Newegg
  • Make an Offer
  • New
  • Combo Deals Only
Brands
Show More
Price
Show More
Type
Ports
Show More
VPN
WAN Ports
LAN Ports
Maximum Users
Form Factor
Simultaneous Sessions
Sold by
All Top Brands
Availability
Condition
Current Promotion
Discount
Useful Links
Customer Ratings
  • SOPHOS Networking
  • Get the right protection to secure your network
  • 3 & Free Program
  • Next-Generation Firewall
  • Featured Brands

    See Deals from SonicWallSee Deals from TP-LinkSee Deals from ASUSSee Deals from Netgear Inc.
Sort By:
View:
D-Link DIR-868L Wireless Dual Band Gigabit Wi-Fi Router
Quick View
  •  
  • $103.00 
  • Free Shipping
WatchGuard Firebox M290 Network Security/Firewall Appliance - 8 Port - 10/100/1000Base-T - Gigabit Ethernet - 8 x RJ-45 - 1 Total Expansion Slots - 1 Year Basic Security Suite
Quick View
WatchGuard Firebox M290 Network Security/Firewall Appliance - 8 Port - 10/100/1000Base-T - Gigabit Ethernet - 8 x RJ-45 - 1 Total Expansion Slots - 1 Year Basic Security Suite
  • Brand: WatchGuard
  • Type: Wired
  • Ports: 8 x 1000 Base-TX (10/100/1000Mbps RJ45 connector
  • Simultaneous Sessions: 3500000
  • Model #: WGM29000701
ASKAsk me
CISCO 890 Series C892FSP-K9 10/100/1000Mbps 892FSP Gigabit Ethernet security router with SFP
Quick View
CISCO 890 Series C892FSP-K9 10/100/1000Mbps 892FSP Gigabit Ethernet security router with SFP
  • WAN Ports: 2 x 10/100/1000Mbps
  • LAN Ports: 8 x 10/100/1000Mbps
  • Brand: CISCO
  • Series: 890 Series
  • Model #: C892FSP-K9
  • $1,529.13
  •  
  • $1,299.95 
  • Save: 14%
  • Free Shipping
ASKAsk me
Cisco Small Business ISR4331/K9 10/100/1000Mbps Router
Quick View
Cisco Small Business ISR4331/K9 10/100/1000Mbps Router
  • LAN Ports: 3 x 10/100/1000Mbps
  • Protocols: IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast sparse mode (PIM SM), PIM Source Specific Multicast (SSM), RSVP, CDP, ERSPAN, IPSLA, CNS, Call Home, EEM, IKE, ACL, EVC, DHCP, FR, DNS, LISP, OTV, HSRP, RADIUS, AAA, AVC, Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, MPLS, Layer 2 and Layer 3 VPN, IP sec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE802.1ag, and IEEE802.3ah
  • Security: UL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 AS/NZS 60...
  • Model #: ISR4331/K9
WatchGuard Firebox T85-PoE Network Security/Firewall Appliance WGT85001US
Quick View
WatchGuard Firebox T85-PoE Network Security/Firewall Appliance WGT85001US
  • Firewall Type: Firewalls / Security Appliances
  • Model #: WGT85001US
  •  
  • $1,512.93 
  • Free Shipping
Cisco Small Business ISR4321/K9 10/100/1000Mbps Router
Quick View
Cisco Small Business ISR4321/K9 10/100/1000Mbps Router
  • LAN Ports: 2 x 10/100/1000Mbps
  • Protocols: IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast sparse mode (PIM SM), PIM Source Specific Multicast (SSM), RSVP, CDP, ERSPAN, IPSLA, CNS, Call Home, EEM, IKE, ACL, EVC, DHCP, FR, DNS, LISP, OTV, HSRP, RADIUS, AAA, AVC, Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, MPLS, Layer 2 and Layer 3 VPN, IP sec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE802.1ag, and IEEE802.3ah
  • Security: UL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 AS/NZS 60...
  • Model #: ISR4321/K9
Cisco Small Business ISR4321-SEC/K9 10/100/1000Mbps Router with Security (SEC) Bundle
Quick View
Cisco Small Business ISR4321-SEC/K9 10/100/1000Mbps Router with Security (SEC) Bundle
  • LAN Ports: 2 x 10/100/1000Mbps
  • Protocols: IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast sparse mode (PIM SM), PIM Source Specific Multicast (SSM), RSVP, CDP, ERSPAN, IPSLA, CNS, Call Home, EEM, IKE, ACL, EVC, DHCP, FR, DNS, LISP, OTV, HSRP, RADIUS, AAA, AVC, Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, MPLS, Layer 2 and Layer 3 VPN, IP sec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE802.1ag, and IEEE802.3ah
  • Security: UL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 AS/NZS 60...
  • Model #: ISR4321-SEC/K9
Meraki MX68 Network Security/Firewall Appliance
Quick View
Meraki MX68 Network Security/Firewall Appliance
  • Series: MX
  • Type: Hardware only, required license is sold separately
  • OS Support: Hardware only, required license is sold separately
  • Weight: 2.46 lb
  • Model #: MX68-HW
Cisco 867VAE Base Router with VDSL2/ADSL2+ over Basic Telephone Service
Quick View
Cisco 867VAE Base Router with VDSL2/ADSL2+ over Basic Telephone Service
  • Brand: CISCO
  • Speed: 10/100/1000Base-T 10/100Base-TX
  • Model #: C867VAE
  • $584.46
  •  
  • $499.95 
  • Save: 14%
  • Free Shipping
Cisco 891F Gigabit Ethernet Security Router with SFP - 11 Ports - Management Port - 1 Slots - -
Quick View
Cisco 891F Gigabit Ethernet Security Router with SFP - 11 Ports - Management Port - 1 Slots - -
  • WAN Ports: 1-port GE or 1-port SFP 1-port FE
  • LAN Ports: 8-port 10/100/1000 Mbps managed switch (4-ports PoE capable with 125W power supply adapter)
  • Protocols: TCP/IP
  • Security: Cisco IOS Firewall IPsec DES 3DES AES SSH DMVPN VPN SHA-1 SHA-2 Zone-Based Policy Firewall SPI Firewall VRF-Aware firewall Flexible Packet Matching Stateful Inspection Transparent Firewall NAT Threat Protection Content Filtering
  • Model #: C891F-K9
WatchGuardFirebox T45 - Security appliance - with 3 years Basic Security Suite - 5 ports - GigE - Competitive Trade In - Advanced Firewall, VPN, Intrusion Prevention (WGT45413)
Quick View
WatchGuardFirebox T45 - Security appliance - with 3 years Basic Security Suite - 5 ports - GigE - Competitive Trade In - Advanced Firewall, VPN, Intrusion Prevention (WGT45413)
  • Security: Stateful packet inspection, TLS decryption, proxy firewall HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy DoS attacks, fragmented & malformed packets, blended threats Browser Safe Search, Google for Business
  • Brand: WatchGuard
  • Series: T45
  • Part Number: WGT45001
  • Model #: RNAB0BTRS5SGD
  •  
  • $1,666.97 
Meraki MX67W Network Security/Firewall Appliance
Quick View
Meraki MX67W Network Security/Firewall Appliance
  • Type: Wireless
  • Weight: 1.84 lb
  • Parts: Lifetime
  • Model #: MX67W-HW
  •  
  • $999.95 
  • Free Shipping
Juniper MX240 3D Universal Edge Router
Quick View
Juniper MX240 3D Universal Edge Router
  • Brand: Juniper
  • Model #: MX240-PREM3-AC
Cisco ASA 5516-X Network Security/Firewall Appliance - 8 Port - 10/100/1000Base-T - Gigabit - 3DES,
Quick View
Cisco ASA 5516-X Network Security/Firewall Appliance - 8 Port - 10/100/1000Base-T - Gigabit - 3DES,
  • Firewall Type: Desktop Type
  • Type: Office Products
  • Throughput: Stateful inspection (maximum): 1.8 Gbps Stateful inspection (multiprotocol): 900 Mbps ASA IPS: 450 Mbps Next-generation firewall (multiprotocol): 850 Mbps Triple Data Encryption Standard / Advanced Encryption Standard (3DES/AES) VPN: 250 Mbps
  • Maximum Users: Unlimited
  • Model #: ASA5516-FPWR-K9
  •  
  • $5,030.95 
  • Free Shipping
ASA 5508-X with FirePOWER services, 8GE Data, 1GE Mgmt, AC, 3DES/AES
Quick View
ASA 5508-X with FirePOWER services, 8GE Data, 1GE Mgmt, AC, 3DES/AES
  • Series: ASA
  • Firewall Type: Rack-mountable
  • Type: 529
  • Throughput: Stateful inspection (maximum): 1 Gbps Stateful inspection(multiprotocol): 500 Mbps Triple Data Encryption Standard / Advanced Encryption Standard (3DES/AES) VPN: 175 Mbps Application Control (AVC): 450 Mbps Application Control (AVC) and IPS: 250 Mbps
  • Model #: ASA5508-K9
  •  
  • $3,016.95 
  • Free Shipping
Juniper Networks SRX1500-AC
Quick View
Grandstream UC + Networking Convergence Solutions GCC6010 Firewall and VoIP PBX
Quick View
Grandstream UC + Networking Convergence Solutions GCC6010 Firewall and VoIP PBX
  • Brand: Grandstream
  • Parts: 1-Year Manufacturer Warranty
  • Labor: 1-Year Manufacturer Warranty
  • Model #: GS-GCC6010
Grandstream Unmanaged 2.5 Multi-Gigabit Switch, 8 x 2.5 GigE, 1 x SFP+ GWN7701M
Quick View
Grandstream Unmanaged 2.5 Multi-Gigabit Switch, 8 x 2.5 GigE, 1 x SFP+ GWN7701M
  • Parts: 1-Year Warranty
  • Labor: 1-Year Warranty
  • Model #: GS-GWN7701M
UBIQUITI - US ACB-ISP-US AIRCUBE ISP WIFI WRLS N ROUTER
Quick View
  •  
  • $54.00 
  • Free Shipping
Ubiquiti Networks INS-3AF-USB INSTANT 3AF TO USB ADAPTER
Quick View
  •  
  • $49.99 
  • Free Shipping
Cambium cnPilot Home & Business R201 Gigabit WLAN Router 802.11ac Dual Band 2.4 and 5GHz with ATA ROW
Quick View
  •  
  • $129.00 
  • Free Shipping
WatchGuard Firebox T25 Up to 3.14 Gbps firewall throughput, 5 x 1Gb ports, 10 Branch Office VPNs
Quick View
WatchGuard Firebox T25 Up to 3.14 Gbps firewall throughput, 5 x 1Gb ports, 10 Branch Office VPNs
  • Security: Stateful packet inspection, TLS decryption, proxy firewall HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy DoS attacks, fragmented & malformed packets, blended threats Browser Safe Search, Google for Business
  • Series: T25
  • Type: Wired + Wireless
  • Throughput: UTM (full scan):403 Mbps Firewall (IMIX):900 Mbps VPN (IMIX):300 Mbps HTTPS Content Inspection (IPS enabled): 216 Mbps Antivirus: 472 Mbps IPS (full scan): 525 Mbps Firewall (UDP 1518): 3.14 Gbps VPN (UDP 1518): 1.02 Gbps
  • Model #: RNAB0BTRR4VLJ
Sophos XGS 88w Network Security/Firewall Appliance 4 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 9.67 Gbit/s Firewall Throughput - Wireless LAN IEEE 802.11ax - TLS - 4 x RJ-45 - Desktop, Rack-mountable
Quick View
ASKAsk me
Sophos XGS 88 Network Security/Firewall Appliance 4 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 9.67 Gbit/s Firewall Throughput - TLS - 4 x RJ-45 - Desktop, Rack-mountable
Quick View
Sophos XGS 88 Network Security/Firewall Appliance 4 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 9.67 Gbit/s Firewall Throughput - TLS - 4 x RJ-45 - Desktop, Rack-mountable
  • Series: XGS
  • Part Number: XG88ZZ00ZZPCUS
  • Firewall Type: Firewalls / Security Appliances
  • Type: Wired
  • Model #: XG88ZZ00ZZPCUS
ASKAsk me
Sophos XGS 118 Network Security/Firewall Appliance 9 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 15.14 Gbit/s Firewall Throughput - TLS - 9 x RJ-45 - 2 Total Expansion Slots
Quick View
Sophos XGS 118 Network Security/Firewall Appliance 9 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 15.14 Gbit/s Firewall Throughput - TLS - 9 x RJ-45 - 2 Total Expansion Slots
  • Series: XGS
  • Part Number: XG118Z00ZZPCUS
  • Firewall Type: Firewalls / Security Appliances
  • Type: Wired
  • Model #: XG118Z00ZZPCUS
ASKAsk me
Sophos XGS 88w Network Security/Firewall Appliance - 1yr Xstream Protection 4 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 9.67 Gbit/s Firewall Throughput - Wireless LAN IEEE 802.11ax - TLS - 4 x RJ-45
Quick View
ASKAsk me
Sophos XGS 118w Network Security/Firewall Appliance 9 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 15.14 Gbit/s Firewall Throughput - Wireless LAN IEEE 802.11ax - TLS - 9 x RJ-45
Quick View
Sophos XGS 118w Network Security/Firewall Appliance 9 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 15.14 Gbit/s Firewall Throughput - Wireless LAN IEEE 802.11ax - TLS - 9 x RJ-45
  • Series: XGS
  • Part Number: XG118Z00ZZPCUS
  • Firewall Type: Firewalls / Security Appliances
  • Type: Wired + Wireless
  • Model #: XW118Z00ZZPCUS
ASKAsk me
Sophos XGS 88 Network Security/Firewall Appliance - 1 Year Xstream Protection - 4 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 9.67 Gbit/s Firewall Throughput - TLS - 4 x RJ-45
Quick View
Sophos XGS 88 Network Security/Firewall Appliance - 1 Year Xstream Protection - 4 Port - 2.5GBase-T - 2.5 Gigabit Ethernet - 9.67 Gbit/s Firewall Throughput - TLS - 4 x RJ-45
  • Series: XGS
  • Part Number: XX88ZZ36ZZPCUS
  • Firewall Type: Firewalls / Security Appliances
  • Type: Wired
  • Model #: XX88ZZ36ZZPCUS
ASKAsk me
Ubiquiti ER-X-US EdgeRouter X 5-Port Advanced Gigabit Ethernet Routers, 256MB Storage
Quick View
Ubiquiti ER-X-US EdgeRouter X 5-Port Advanced Gigabit Ethernet Routers, 256MB Storage
  • WAN Ports: 1 x 10/100/1000Mbps
  • LAN Ports: 5 x 10/100/1000Mbps
  • Protocols: TCP/IP
  • Brand: Ubiquiti
  • Model #: ER-X
  •  
  • $91.90 
  • Free Shipping
ASKAsk me
Sophos XGS 116w Network Security/Firewall Appliance 8 Port - 10/100/1000Base-T, 1000Base-X - Gigabit Ethernet - Wireless LAN IEEE 802.11 a/b/g/n/ac - 7 x RJ-45 - 1 Total Expansion Slots
Quick View
ASKAsk me
D-Link EBR-2310 10/100Mbps Ethernet Broadband Router
Quick View
D-Link EBR-2310 10/100Mbps Ethernet Broadband Router
  • WAN Ports: 1 x 10/100Mbps
  • LAN Ports: 4 x 10/100Mbps
  • Security: Advanced Firewall Features: Network Address Translation (NAT) MAC Filtering Website Filtering Scheduling
  • Brand: D-Link
  • Model #: EBR-2310
TP-Link AC1750 Smart WiFi Router - Dual Band Gigabit Wireless Internet Router for Home, Works with Alexa, VPN Server, Parental Control&QoS(Archer A7)
Quick View
TP-Link
TP-Link AC1750 Smart WiFi Router - Dual Band Gigabit Wireless Internet Router for Home, Works with Alexa, VPN Server, Parental Control&QoS(Archer A7)
  • Brand: TP-Link
  • Series: R6700
  • Speed: 1300Mbps
  • Features: Smart WiFi Router - 5GHz Dual Band Gigabit Wireless Internet Routers for Home, Works with Alexa, Parental Control&QoS
  • Model #: 930525544505

Firewall & Network Security Devices – Gateways, UTM, VPN

Protect and Segment Your Network

Build a secure edge that blocks threats, enforces policy, and supports remote work. Start by shop firewalls & security, then add the right access and switching layers for your layout—whether that’s wireless routers, LAN switches, or WAN termination via modems & gateways.

For uplinks and backbones, many deployments rely on fiber. If that’s you, check compatible SFP/SFP+ transceivers and ensure cabling quality with Ethernet cables. On the access layer, plan reliable Wi-Fi using ceiling-mounted access points or a whole-home topology using Mesh Wi-Fi. For neat installs and proper airflow, mount gear in server racks & cabinets.

Budgeting a rollout? Watch for seasonal promos and bundles under networking deals to stretch spend while maintaining security baselines.

When to Choose Each Type

  • SOHO / Home Lab: Basic IPS/web filtering, simple VPN, and VLANs for user/IoT separation.
  • SMB: UTM/NGFW for app control, URL filtering, IPS/IDS; PoE switching for cameras and APs.
  • Enterprise / Multi-Site: High-throughput NGFW with HA, SSO/MFA, centralized management, and 10GbE aggregation.

UTM / Next-Gen Firewalls

  • All-in-one controls: IPS/IDS, antivirus, web filtering, application visibility
  • Size for real-world firewall/IPS/VPN throughput, not just theoretical rates
  • Plan license tiers (AV/IPS/WebFilter) and renewal timelines

VPN & WAN Gateways

  • Remote-user and site-to-site VPN (SSL/IPsec), with dual-WAN and failover
  • Support identity controls (SSO/MFA) and per-app policies
  • Use VLANs and ACLs to segment users, servers, and IoT
Deployment tip: If you enable IPS or content filtering, validate under-load throughput and keep headroom for peak hours and future features.

How to Choose the Right Firewall

    When choosing the right firewall, compare its firewall, IPS, and VPN performance under realistic network loads to ensure it meets your needs. Check the maximum number of concurrent VPN users supported and the types of tunnels available, such as SSL or IPsec. Look for 10GbE ports and fiber uplinks, as well as dual-WAN capabilities for redundancy and failover. Review the UTM (Unified Threat Management) bundles and renewal terms to make sure the included security features align with your requirements. Use VLANs to segment traffic between users, servers, security cameras, and IoT devices for better control and security. Finally, consider rack depth, airflow, cable management, and redundant power supplies to ensure reliable, long-term operation.

Benefits of a Dedicated Hardware Firewall

  • Stronger perimeter protection than software-only solutions
  • Built-in VPN for secure remote work and partner access
  • Layered defenses: IPS/IDS, malware filtering, application control
  • Simple network segmentation with VLANs and ACLs
  • Centralized logging, alerting, and compliance reporting
  • Scales from SOHO to enterprise with HA and high-speed uplinks

FAQs: Firewall & Network Security Devices

Do I need a firewall if my router has NAT?

Yes. NAT is address translation, not security. A firewall adds policy, threat prevention, VPN, and audit logging.

What’s the difference between UTM and NGFW?

UTM highlights “all-in-one” security for SMBs, while NGFW emphasizes app awareness and advanced threat prevention. Many devices blend both.

How do I size a firewall for my office?

Match firewall/IPS/VPN throughput to peak traffic, confirm user/VPN counts, and plan dual-WAN plus growth headroom.

What else should I prepare before installation?

Confirm rack space, power and cooling, cable runs, addressing/VLAN plan, identity integration (SSO/MFA), and logging destinations.

Bestselling Firewall & Network Security Devices Reviews:

Dylan G.
7/2/2024 2:34:39 PM
Great platform to build a 10Gb network on

“ I wanted a wired router that would support my 10Gb internet connection, and this is doing the trick. ”

TP-Link ER8411 | Enterprise Wired 10G VPN Router | Up to 10 WAN Ports | High Network Capacity | SPI Firewall | Omada SDN Integrated | Load Balance | Lightning Protection |