Stonesoft 3206

Stonesoft 3206The Stonesoft 3206 appliance is a versatile and modular Security Engine (NGN)-powered solution designed to meet the performance and scalability requirements of high-end data centers and large network central sites. It can be used in a Firewall/VPN role (Layer 3) for secure routing, NAT, and IPsec VPN gateway purposes. It can also be used in an IPS role (Layer 2) in an IDS deployment or an inline IPS deployment, or in a Layer 2 Firewall role. All of these roles are available with a single unified software image and can be adapted just by changing configuration.

In the Firewall/VPN role, the Stonesoft 3206 appliance provides high performance with unique clustering capabilities for up to 16 nodes. This provides very high IPsec VPN speeds, as well as high-performance content and application inspection as required.

In the IPS and Layer 2 Firewall roles, the Security Engine enables the 3206 to become transparent to surrounding network devices. The inline IPS and Layer 2 firewall combine flexible deployment, AET-ready network security, and application control into one dedicated appliance.

The rock solid security platform

The Stonesoft 3206 is built on the Stonesoft Security Engine (NGN) - the next generation security platform that gives you the benefits of security-as-a-service. Its unified underlying software design enables your 3206 to transform roles as your organizational needs change. Remote and automatic deployment changes via license cuts OPEX and eliminates unnecessary future CAPEX – all while delivering the level of security right for your needs. 

The Stonesoft Management Center (SMC) gives you the ability to automate workflows, easily define policies, swiftly define and deliver advanced visualizations, and provides class-leading situational awareness. With SMC, security administrators can make rapid policy changes across entire networks and deliver the high speed – and high availability – needed for modern safe and productive business.

Stonesoft 3206 Specifications

Maximum performance L3 FW/VPN L2 FW / IPS / IDS / EPS
(UDP 1514 byte packets, no inspection)
60 Gbps 60 Gbps
(UDP 1514 byte packets, with inspection)
30 Gbps 30 Gbps
64 byte packets per second
(no inspection)
40 million 40 million
HTTP inspection (21 kB payload) 10 Gbps 10 Gbps
SSL/TLS inspection throughput (AES256-SHA) 3.3 Gbps 3.3 Gbps
New TCP connections/sec
(no inspection)
300 000 300 000
New inspected HTTP connections/sec (21 kB payload) 50 000 50 000
Concurrent connections 30 million 30 million
Inspected concurrent connections 12 million 12 million
VLANs Unlimited Unlimited
VPN throughput (AES-128-GCM) 18 Gbps  
VPN tunnels 200 000  
Concurrent mVPN Clients Unlimited  
Virtual Engines 10/250  
Licensed Performance Firewall/VPN 3206 appliance Firewall/VPN 3206-P appliance
(UDP 1514 byte packets, no inspection)
50 Gbps 60 Gbps
VPN throughput (AES-128-GCM) 10 Gbps 18 Gbps
Virtual Engines n/a n/a
Network interfaces  
Fixed 2 x 10/100/1000 Mbps copper
Module slots 3 (Available modules listed at the product codes section)
Connectors  4 x USB, 1 x serial, VGA, IPMI Ethernet
Form factor 2U 19” rack unit
Dimensions (W x H x D) 437 x 89 x 450 mm / 17.2 x 3.5 x 17.7 inches
Net weight 14.2 kg / 31.3 lbs (without modules)
Gross weight 22.6  kg/ 49.8 lbs (without modules)
Safety/EMC certifications  
  CE, FCC, CB, Gost-R, RoHS
Power supply 1+1 Redundant 700W + 700W, AC Input 100-240 VAC, 50-60 Hz
Typical power consumption 400 W
Operating temperature/humidity +10—+35°C (+50—+95°F) 8%—90%, non condensing humidity (RH)
Storage temperature/humidity -40—+70°C (-40—+158°F) 5%—95%, non condensing humidity (RH)
MTBF 120 000 hours
Rack mounting Rack kit for 68 – 92 cm / 26.8 – 36.2 inches deep rack included by default
Replacement service 15 months or 39 months replacement service for non-complying hardware
Premium support 24/7-call logging via web, email and phone, two-hour response time, software updates, hardware replacement service
Basic support 8/5-call logging via web, email and phone, next business day response time, software updates, hardware replacement service
Product codes *  
APP-FW-3206-C1 Stonesoft Firewall/VPN 3206 appliance, AC power supply
APP-FW-3206-C1-P Stonesoft Firewall/VPN 3206P appliance, AC power supply
APP-IPS-3206-C1 Stonesoft IPS/IDS 3206 appliance, AC power supply
APP-NGN-3206-C1 Stonesoft 3206 Security Engine, AC power supply
APP-EPS-3206-C1 Stonesoft Evasion Prevention System 3206 appliance, AC power supply
Feature pack codes  
FP-1Y-AS-16 One year Antispam subscription for 3206 appliance
FP-1Y-AV-18 One year Antivirus subscription for 3206 appliance
FP-1Y-WF2-204 One year Web filtering subscription for 3206 appliance
FP-1Y-UTM-13 One year UTM subscription bundle (AV, AS, WF) for 3206 appliance
FP-FW-FDPI-6 Full deep inspection for FW-3206
FP-NGN-VE-250 Virtual Engine feature pack license 11-250 for NGN-3206
FP-NGN-VE-25-UPG Virtual Engine feature pack license 11-25 for NGN-3206
FP-NGN-VE-50-UPG       Virtual Engine feature pack upgrade license 26-50 for NGN-3206
FP-NGN-VE-100-UPG Virtual Engine feature pack upgrade license 51-100 for NGN-3206
FP-NGN-VE-250-UPG Virtual Engine feature pack upgrade license 101-250 for NGN-3206
Interface modules  
MOD-EM1-GE-8  Eight Port Gigabit Ethernet Copper Module
MOD-EM1-GE-SFP-4  Quad Port SFP Gigabit Ethernet Module
MOD-EM1-10G-SFP-2  Dual Port SFP+ 10GB Module
MOD-EM1-GE-4-B Quad Port Gigabit Ethernet Copper Bypass Module
MOD-EM1-GE-SX-4-B Quad Port Gigabit Ethernet Fiber (SX) Bypass Module
MOD-EM1-10G-SR-2-B Dual Port Fiber (SR) 10GB Bypass Module
MOD-EM1-10G-LR-2-B Dual Port Fiber (LR) 10GB Bypass Module
Add-on product codes  
APP-RACK2-3200 Rack mounting kit for 50– 68 cm / 19.7 – 26.8 inches deep rack
SP-PSU-DC-3200 DC  power supply for 3200 series appliance

*-R license codes are without strong encryption (DES only)

Free Consultation

Due to our numerous partnerships, we can provide unbiased opinions on the best solution for your environment.

Unbeatable Prices

Our partnership levels give us the highest product discounts which we pass on as savings to our customers.

Professional Services

Finish your IT projects on-time and under budget with our nation-wide team of senior level engineers.

24x7 Tech Support

Rest assured knowing that our U.S. based IT support team is here for you on nights, weekends and when you need us most.