• XG-2758 1U pfSense® Security Gateway Appliance

click on thumbnail to zoom
Item #: XG-2758
Our Price: $1,849.00
Console Cable:
Expansion Card:
Storage: All options for 'Storage:' are currently out of stock.
SFP+ Cables:
SFP Module:
SFP+ Module:
Power Cord:
Build Time:
Bundled Software Support:


XG-2758 1U pfSense® Security Gateway Appliance


Fast 10 Gigabit networking at a price you can afford.

The pfSense XG-2758 1U rack system is a state of the art pfSense Security Gateway Appliance, featuring the low-power Silvermont microarchitecture and the Intel® Atom™ ARK (Rangeley) C2000 family SoC. The XG-2758 8-core SoC features a high level of I/O and acceleration integration and optimal performance per watt. The pfSense XG-2758 with pfSense delivers a high performance, high throughput front-line security architecture at an excellent price per gigabit.The XG-2758 sports 2 10GbE SFP+, three 10/100/1000 Mb Ethernet ports, and one switchable port between 1 GbE RJ-45/SFP, 16 GB of ECC memory, and a 150 GB SSD. 



  • No additional usage or feature based pricing.  Unlimited users, firewall rules, VPN connections, etc.
  • Blistering fast Intel® Atom™ C2758 8 core SoC  
  • Max Active Connections: 16,000,000
  • 16 GB ECC Memory, 150 GB Intel DC S3520 Series SSD included
  • Two 10 GbE SFP+ and Four 1 GbE RJ-45 on board (one configurable as RJ-45 or SFP)

Best Used For:

  • Medium to Large Businesses
  • Medium to Large Branch Offices
  • Installations that plan to add packages which require logging
  • All businesses that have Gigabit connectivity
  • All businesses that have fiber connectivity

Main Software Features:

pfSense is a free, open source firewall and router platform based on FreeBSD that is functionally competitive with expensive, commercial firewalls. pfSense can be configured as a stateful packet filtering firewall, which also serves as a LAN or WAN router, VPN Appliance, DHCP Server, DNS Server, or can be configured for other applications and special purpose Appliances.   This next generation pfSense firewall features include:

  • Stateful packet filtering firewall or pure router
  • Routing policy per gateway and per-rule for multiple WAN, failover, load balancing
  • Transparent layer 2 firewall
  • Support for IPV6, NAT, BGP
  • Captive portal with MAC filtering, RADIUS support, etc
  • VPN: IPsec, OpenVPN, PPTP
  • Dynamic DNS client
  • DHCP Server and Relay functions
  • PPPoE Server
  • Reporting and monitoring features with real time information
  • Amazon VPC Wizard to easily connect to the Amazon AWS cloud 
  • Integrates with Snort for IDS/IPS, Squid for optimized content delivery and SquidGuard for anti-spam/anti-phishing and URL filtering
  • Learn more about the features of pfSense

XG-2758 System Specification 

  • 8 core Intel Atom C2758 CPU (8x2.4GHz, 2MB cache, 20W, QuickAssist, AES-NI)
  • Standard 1U 19" Rack Mount form factor
  • 16 GB ECC Memory on board
  • 150 GB Intel DC S3520 Series SSD included, second SSD optional
  • 2x 10Gb Ethernet SFP+ via Intel 82599 Niantic
  • 4x 1 Gb Ethernet RJ45 via Intel i354 on-chip; one port configurable as RJ45 or SFP
  • 2 USB 2.0 Host ports
  • 1 mini-USB Serial Console Port
  • Hardware Reset Push Button
  • Power/Status/SATA Activity LEDs
  • RTC Coin Cell Backup Battery
  • Operating Temperature from 0°C to 50°C ambient temperature using included fansink
  • Extended temperature version available to 60°C
  • FCC, CE Class B, IC Class A, IEC-60950 Compliance
  • RoHS/WEEE Compliant 


Your purchase includes all of these super neat things, which will help you get started with pfSense:
  • Access to the online version of the continuously updated official pfSense book (700+ pages)
  • ACB: Auto-Configuration Backup Service 
  • Monthly live education hangouts featuring in depth pfSense topics hosted by our core developers
  • Access to the archive of education hangouts
  • Access to the pfSense Virtual Security Gateway Appliance for VMWare®


Only use one of the SFP / SFP+ modules on this list, or a compatible module with the same specification. We sell the following modules which we recommend:

SFP 1000Base-SX Transciever Module
SFP+ 10GBase-SR Transciever Module

Compatible Modules:

SR Modules
Intel DUAL RATE 1G/100G SFP+ SR (bailed)  FTLX8571D3BCV-IT
Intel DUAL RATE 1G/10G SFP+ SR (bailed)   AFBR-703SDZ-IN2
Intel DUAL RATE 1G/10G SFP+ SR (bailed)   AFBR-703SDDZ-IN1

LR Modules
Intel DUAL RATE 1G/10G SFP+ LR (bailed) FTLX1471D3BCV-IT
Intel DUAL RATE 1G/10G SFP+ LR (bailed) AFCT-701SDZ-IN2
Intel DUAL RATE 1G/10G SFP+ LR (bailed) AFCT-701SDDZ-IN1

The following is a list of 3rd party SFP+ modules and direct attach cables that have received some testing. Not all modules are applicable to all devices.

Supplier    Type Part Number
Finisar SFP+ SR bailed, 10g single rate FTLX8571D3BCL
Avago SFP+ SR bailed, 10g single rate AFBR-700SDZ
Finisar SFP+ LR bailed, 10g single rate FTLX8571D3BCV-IT
Finisar DUAL RATE 1G/10G SFP+ SR (No Bail)   FTLX8571D3QCV-IT
Avago DUAL RATE 1G/10G SFP+ SR (No Bail) AFBR-703SDZ-IN1
Finisar DUAL RATE 1G/10G SFP+ LR (No Bail) FTLX1471D3QCV-IT
Avago DUAL RATE 1G/10G SFP+ LR (No Bail) AFCT-701SDZ-IN1
Finisar 1000BASE-T SFP FCLF8522P2BTL
Avago 1000BASE-T SFP ABCU-5710RZ


  • Voltage Range: 90~264V
  • Input Frequency: 47-63 Hz
  • Inlet: Standard IEC320-C14
  • US Power Cord: NEMA 5-15P to IEC320-C13
  • Ships with 6 foot long US style 3 prong power cord. Easily changed to non-US style by purchasing a IEC320-C13 (3 PIN) compatible power cord (visual example).


  • Netgate Global Support is available 24x7x365. Select your subscription plan and term at the top of this page. 
  • For service level descriptions click here.
  • Netgate Global Support FAQ is here.
  • A complete pricing table for all levels of support is here.
  • Community based software support is available here.
  • One year manufacturers hardware warranty.
  • Standard 30 day return policy.
  • All specifications subject to change without notice.
1 Free packages.
2 Future pfSense distributions will have support for QuickAssist. AES-NI support is included.



Average Rating:
(based on 2 reviews)

Showing 2 Reviews:

by David
on 7/13/2017
from Calgary, Canada
Great, except for missing IPMI and VGA
Bought this as a replacement for a failed C2758 (Listed as replacement here: https://store.netgate.com/Firewall/C2758.aspx), but I didn't notice that IPMI had been removed in the updated device.  Considering that it's the exact same processor, and this device is targeted at a data centre, it's a disappointing omission to say the least.  

I wish I could still buy the C2758 but with 16 GB of RAM.  I'll miss the convenience of the VGA too.  I suppose I could've bought the new XG-1541, but I didn't need the extra processing power, and it's a big price jump from $999 (C2758) -> $2649 (XG-1541) just so I can properly remotely manage and monitor my firewall.  Even this one was a lot more for mostly the same features: $999 (C2758) -> $1849 (XG-2758)
by Stephen
on 3/29/2016
Easy to setup, handles the load
Our SMB was previously on a Tomato router and suffering trying to handle our 100Mb symmetric line with limited horsepower to handle QoS, VPN, etc. The XG-2758 was a dream to setup and it is performing flawlessly. We can routinely have several folks on the VPN, large file downloads and simultaneous VoIP calls with no issues.
Review and Rate this Item