Skip to content
sudopicks
esc

Netgate 4200 pfSense+ Security Gateway vs Protectli Vault Pro VP2420

Researched, not hands-on tested.How we review ›

all judged against firewalls at a similar price

The Netgate 4200 pfSense+ Security Gateway scores 7.1/10 overall, ahead of the Protectli Vault Pro VP2420 at 6.1/10.

The Netgate 4200 pfSense+ Security Gateway leads on throughput and software and features.

The Protectli Vault Pro VP2420 leads on running costs.

They score the same on ports and networking and security record.

The biggest difference is throughput, where the Netgate 4200 pfSense+ Security Gateway scores 8/10 to the Protectli Vault Pro VP2420's 5/10.

Netgate 4200 pfSense+ Security Gateway

Netgate 4200 pfSense+ Security Gateway

7.1/10verdict: buy

The Netgate 4200 is a desktop pfSense Plus firewall with four 2.5GbE ports and published multi-gig firewall and VPN throughput. It suits anyone with a gigabit or faster line who wants four 2.5GbE ports and a firewall platform they can configure in depth. It is less clear-cut for buyers who need published IPS throughput, SFP+ ports or a documented advisory history.

Typically about £465 in the UK when we researched itSearch Amazon UK (opens in a new tab, affiliate link)

Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details

Protectli Vault Pro VP2420

Protectli Vault Pro VP2420

6.1/10verdict: good, not the best

The Protectli Vault Pro VP2420 suits homelabbers and small offices who want a four-port 2.5GbE box to run pfSense or OPNsense themselves. It fits people who care more about VPN speed, build quality and low power draw than heavy intrusion prevention. Buyers should check stock first, because the manufacturer says the VP2420e has replaced it.

Typically about £569 in the UK when we researched itSearch Amazon UK (opens in a new tab, affiliate link)

Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details

Scores, criterion by criterion

CriterionWeightNetgate 4200 pfSense+ Security GatewayProtectli Vault Pro VP2420
Throughput25%8/105/10
Ports and networking20%7/107/10
Software and features20%8/106/10
Security record20%5/105/10
Running costs15%7/108/10
Overall7.1/106.1/10

Specifications

SpecNetgate 4200 pfSense+ Security GatewayProtectli Vault Pro VP2420
PortsFour 2.5GbE RJ-45 ports (PORT1WAN to PORT4); no SFP+ port listed4x Intel I226-V 2.5G Ethernet RJ-45; 2x USB 3.2 Gen 2 Type-A; console port
SoftwarepfSense Plus, preinstalledNot a fixed OS; vendor states compatibility with a variety of operating systems including open source firewall projects; AMI or coreboot BIOS
VPN throughputIPsec AES-GCM-128 3.2 Gbps (iPerf3) and 1.05 Gbps (IMIX); WireGuard supportedpfSense WireGuard ~2250Mbps (vendor test; conflicts with the ~1200Mbps OPNsense WireGuard figure, test conditions not fully stated)
ProcessorIntel Atom C1110, 4-core, 2.1 GHz with AVX2Intel Celeron J6412, 4 cores/4 threads, 2.0 GHz base, up to 2.6 GHz burst, 1.5M cache, AES-NI, VT-x/VT-d
Memory4 GB LPDDR51x SO-DIMM slot, DDR4-3200, max 32GB
Subscriptions neededTAC Lite included; Professional $399/yr and Enterprise $799/yr; no paid subscription listed as required for core featuresNo paid subscription listed; 2-year factory warranty, extendable

Strengths and weaknesses

Netgate 4200 pfSense+ Security Gateway

  • + Firewall throughput of 8.61 Gbps (iPerf3) is well above gigabit
  • + Four 2.5GbE ports
  • + No paid subscription listed as required for core features
  • − IPS throughput not published
  • − No SFP+ port listed

Skip it if:

  • Buyers who need a published IPS throughput figure before committing
  • Anyone needing SFP+ or fibre ports on the firewall itself
  • Buyers who require a documented firmware and advisory history
Read the full Netgate 4200 pfSense+ Security Gateway review ›

Protectli Vault Pro VP2420

  • + Four 2.5GbE Intel I226-V ports
  • + No paid subscription listed; two-year warranty
  • + Owners report strong power efficiency for the performance
  • − Owners report limited CPU headroom under heavy IDS/IPS
  • − Listed as out of stock; replaced by VP2420e
  • − One SO-DIMM slot, no SFP+ listed

Skip it if:

  • Buyers who want heavy IDS/IPS inspection on a fast line
  • Anyone who needs SFP+ ports or a pre-installed firewall OS
  • Buyers planning several virtual machines on the same box
Read the full Protectli Vault Pro VP2420 review ›

More comparisons

Compare all firewalls · Best firewalls