Stonesoft 3205

The Stonesoft 3205 appliance is a versatile and modular Security Engine (NGN)-powered solution designed to meet the performance and scalability requirements of data centers and large-sized network central sites. It can be used as a Layer 3 device for secure routing, NAT and IPsec VPN gateway purposes. In a Layer 2 configuration it presents itself as an IDS sensor, inline IPS or Layer 2 firewall. All this is available with a single unified software image, adaptable with just a configuration change.

In the Layer 3 role, as a routing firewall and IPsec VPN gateway solution, the 3205 appliance provides high performance and offers unique clustering capabilities with up to 16 nodes. This provides very high IPSec VPN speeds, as well as high performance content and application inspection.

In Layer 2 roles the Security Engine enables the 3205 to become transparent to surrounding network devices. The inline IPS and Layer 2 Firewall roles combine deployment flexibility, AET-ready network security and application control into one dedicated appliance.

The adaptability of security-as-a-service

Built on the Stonesoft Security Engine (NGN) platform, the Stonesoft 3205 can transform as your organizational needs change. The Security Engine is a unique unified design – the next generation platform for network security – that can take on different security roles, with the flexibility of security-as-a-service. You can make rapid deployment changes remotely and automatically via license, helping to cut OPEX and eliminate unnecessary future CAPEX rounds.

The Stonesoft 3205 is adminstered via the class-leading Stonesoft Management Center (SMC) giving you the ability to automate workflows, easily define policies across your entire infrastructure, and swiftly access visualizations, all with unpresedented situational awareness. The console has been designed – with feedback from daily users around the world – to save administrators time and effort. SMC helps to further cut OPEX while enabling you to implement the most suitable network security for your business to thrive.

Stonesoft 3205 Specifications

Maximum performance L3 FW/VPN L2 FW / IPS / IDS
(UDP 1514 byte packets, no inspection)
50 Gbps -
(UDP 1514 byte packets, with inspection)
20 Gbps 20 Gbps
64 byte packets per second
(no inspection)
15 million -
HTTP inspection (21 kB payload) 6 Gbps 6 Gbps
SSL inspection throughput 2.5 Gbps 2.5 Gbps
New TCP connections/sec
(no inspection)
200 000 -
New inspected HTTP connections/sec (21 kB payload) 28 000 28 000
Concurrent connections 20 million -
Inspected concurrent connections 10 million 15 million
VLANs Unlimited Unlimited
VPN throughput (AES-128-GCM) 12 Gbps n/a
VPN tunnels 40 000 n/a 
Concurrent mVPN Clients Unlimited n/a
Licensed Performance Firewall/VPN 3205 appliance Firewall/VPN 3205-P appliance
(UDP 1514 byte packets, no inspection)
30 Gbps 50 Gbps
VPN throughput (AES-128-GCM) 10 Gbps 17 Gbps
Network interfaces  
Fixed 2 x 10/100/1000 Mbps copper
Module slots 3 (Available modules listed at the product codes section)
Connectors 4 x USB, 1 x serial, VGA, IPMI Ethernet 
Form factor 2U 19” rack unit
Dimensions (W x H x D) 437 x 89 x 450 mm / 17.2" x 3.5" x 17.7"
Net weight 16 kg / 35 lbs
Safety/EMC certifications CE, FCC, CB, Gost-R, RoHS 
Power supply 1+1 Redundant 700W + 700W, AC Input 100-240 VAC, 50-60 Hz
Typical power consumption 400 W
Operating temperature/humidity +10—+35°C (+50—+95°F) 8%—90%, non condensing humidity (RH)
Storage temperature/humidity -40—+70°C (-40—+158°F) 5%—95%, non condensing humidity (RH)
MTBF 120 000 hours
Rack mounting Rack kit APP-RACK3-3200 for 68 cm – 92 cm deep rack included by default
Replacement service 15 months or 39 months replacement service for non-complying hardware
Premium support 24/7-call logging via web, email and phone, two-hour response time, software updates, hardware replacement service
Basic support 8/5-call logging via web, email and phone, next business day response time, software updates, hardware replacement service
Product codes **  
APP-FW-3205-C1 Stonesoft Firewall/VPN 3205 appliance
APP-FW-3205-C1-P Stonesoft Firewall/VPN 3205P appliance
APP-IPS-3205-C1 Stonesoft IPS/IDS 3205 appliance
APP-NGN-3205-C1 Stonesoft 3205 Security Engine
Feature pack codes  
FP-1Y-AS-8 One year Antispam subscription for NGN-3205, FW-3205, FW-3205P appliance
FP-1Y-AV-13 One year Antivirus subscription for NGN-3205, FW-3205, FW-3205P appliance
FP-1Y-WF2-170 One year Web filtering subscription for FW-3205 appliance
FP-1Y-WF2-169 One year Web filtering subscription for NGN-3205, FW-3205P appliance
FP-1Y-UTM-15 One year UTM subscription bundle (AV, AS, WF) for FW-3205 appliance
FP-1Y-UTM-5 One year UTM subscription bundle (AV, AS, WF) for NGN-3205, FW-3205P appliance
FP-FW-FDPI-6 Full deep inspection for FW-3205, FW-3205P
Interface modules  
MOD-EM1-GE-6  Six Port Gigabit Ethernet Copper Module
MOD-EM1-GE-8  Eight Port Gigabit Ethernet Copper Module
MOD-EM1-GE-SFP-4  Quad Port SFP Gigabit Ethernet Module
MOD-EM1-10G-SFP-2  Dual Port SFP+ 10GB Module
MOD-EM1-GE-4-B Quad Port Gigabit Ethernet Copper Bypass Module
MOD-EM1-GE-SX-4-B Quad Port Gigabit Ethernet Fiber (SX) Bypass Module
MOD-EM1-10G-SR-2-B Dual Port Fiber (SR) 10GB Bypass Module
MOD-EM1-10G-LR-2-B Dual Port Fiber (LR) 10GB Bypass Module
Add-on product codes  
APP-RACK2-3200 Rack mounting kit for 50 cm – 68 cm deep rack
SP-PSU-DC-3200 DC  power supply for 3200 series appliance

* Supported encryption algorithms depend on used license. ** -R license codes are without strong encryption (DES only)

Free Consultation

Due to our numerous partnerships, we can provide unbiased opinions on the best solution for your environment.

Unbeatable Prices

Our partnership levels give us the highest product discounts which we pass on as savings to our customers.

Professional Services

Finish your IT projects on-time and under budget with our nation-wide team of senior level engineers.

24x7 Tech Support

Rest assured knowing that our U.S. based IT support team is here for you on nights, weekends and when you need us most.