Datasheet
Next-Generation Firewall
350 Series
Compact appliance with Secure SD-WAN and
high-performance firewall
Key Benefits The Forcepoint NGFW 350 Series enables remote offices, branches,
and stores to securely connect directly to the cloud. This compact, high-
performance desktop appliance offers 1 gigabit and 10 gigabit Ethernet
› Compact desktop design
connectivity with Secure SD-WAN, next-generation firewall security,
› 1 Gbps, 2.5 Gbps and 10 Gbps advanced intrusion prevention, and integration with SASE/SSE cloud-based
interface speeds
security services—all centrally managed via Forcepoint’s renowned Security
› High-availability clustering Management Center (SMC).
› Multi-ISP SD-WAN and site-to- site
Multi-Link™ VPN connectivity and
optimization
Direct-to-cloud SASE connectivity and security for the hybrid enterprise
› High-security NGFW with anti-
Digital transformation is all about connecting distributed workforces to the resources
evasion technology and endpoint-
they need, no matter where they are. With applications and data moving to the cloud,
aware policy enforcement
organizations are increasingly finding that old “hub-and-spoke” networking, like MPLS,
› Interactive cloud application health can’t handle the demand.
monitoring to spot network issues
before they become problems The Forcepoint NGFW 350 Series combines networking and security to safely connect
stores, branches, and remote offices directly to the internet for maximum productivity. Its
› Security policy and operating application health monitoring and integration with Forcepoint ONE (SASE Security Service
software updates with just a Edge delivered from the cloud) help you deliver the best performance and security so that
few clicks your users, networking, and security teams can be more productivity without having to
› Centralized management of up to juggle multiple systems.
6,000 appliances at once
Multi-function solution with integrated SD-WAN, NGFW, IPS, VPN, and ZTNA
› Integration with Forcepoint ONE for App Connector that simplifies operations and reduces infrastructure
SASE/SSE security (SWG, CASB,
The Forcepoint NGFW 350 Series brings together a wide range of capabilities in a
ZTNA)
compact desktop appliance that is easy to install, even in smaller locations. It integrates
› Built-in ZTNA App Connector that multi-ISP SD-WAN connectivity, site-to-site Multi-Link™ VPN, and high-availability
simplifies deployment of ZTNA so clustering with the industry’s strongest next-generation firewall (NGFW) and intrusion
that users don’t have to use VPNs to prevention (IPS) security. It even has a built-in ZTNA App Connector for providing access
access private apps to internal private apps via Forcepoint ONE’s Zero Trust Network Access (ZTNA) cloud
› Optional Advanced Malware service, eliminating the need for users to wrestle with VPNs.
Detection & Protection (AMDP) Like all Forcepoint NGFW appliances, the Forcepoint NGFW 350 Series is centrally
sandboxing administered using the Forcepoint Security Management Center (SMC). Physical, virtual,
› Optional URL Filtering powered by and cloud appliances can be deployed throughout the world quickly, without an on-site
Forcepoint ThreatSeeker technician, and updated with just a few clicks.
Advance clustering for high availability
Every minute an organization is offline costs money, so downtime is not an option. That’s
why the Forcepoint NGFW 350 Series offers advanced clustering that allows multiple
appliances (including other models of Forcepoint NGFW) to be used together to keep
remote sites running even in the middle of software updates or hardware failure. Built-in
SD-WAN traffic management enables links from more than one ISP to be used at the
same time to further reduce the risk of outages. Redundancy in the management console
and log services enables global deployments and helps to ensure your business stays
forcepoint.com connected securely, even during unexpected interruptions.
Forcepoint NGFW 350 Series Appliance
PERFORMANCE1 352 355 PHYSICAL 352 355
NGFW/NGIPS throughput Regulatory model number APP-352C1 APP-355C1
2.0 Gbps 4.1 Gbps
(HTTP 64kB payload)
Form factor Desktop
Max firewall throughput
40 Gbps
(UDP 1518 byte payload) Dimensions W x H x D 340 x 44 x 250 mm / 13.4” x 1.73” 9.84”
Max inspection throughput Net weight 2.9 kg / 6.4 lbs 2.9 kg / 6.4 lbs
3.3 Gbps 6.2 Gbps
(UDP 1518 byte payload)
Weight of appliance, 1 power
4.4 kg / 9.7 lbs 4.4 kg / 9.7 lbs
Threat Prevention Throughput 1.5 Gbps 3.0 Gbps supply + package
TLS 1.2 inspection (44kB payload) 700 Mbps 1300 Mbps AC power supply 90–260 VAC 50–60 Hz 65 W
IPsec VPN AES-GCM-256 11 Gbps 24 Gbps Redundant power supply Option
Mobile VPN clients Unlimited Typical power consumption 40 W 47 W
Max concurrent IPsec VPNs 20,000 30,000 Max power consumption 57 W 65 W
Max concurrent inspected HTTP connections 70,000 200,000 Max BTU/hour 195 225
Max concurrent connections 5 Million 15 Million MTBF (hours) 150000
New TCP connections/sec 160,000 300,000 Operating temperature 0 – +40°C / +32 – +104°F
VLAN tagging Unlimited Storage temperature -20 – +70°C / -4 – +158°F
Virtual contexts default/max 3/3 5 / 25 Relative humidity
10%-90%
non-condensing
Max concurrent ZTNA users 50 250
Safety certification CB, UL/EN62368
EMI certification FCC part 15, CE, EN55032
NETWORK INTERFACES 352 & 355 ORDERING 352 355
1 x 2.5 Gbps Ethernet RJ45 NGFW appliance N352 N355
Fixed Ethernet interfaces 8 x 1 Gbps Ethernet RJ45
4 x 10 Gbps Ethernet SFP+ URL filtering FPURL3X FPURL4X
2 x USB
AMDPFWS, AMDPFWM,
Connectors 1 x serial console RJ45 AAdvanced Malware Detection
AMDPFWL, AMDPFWXL,
2 x DC power in & Protection*
AMDPFWXXL
Additional Virtual Contexts (25) — FPVC25
Additional AC power supply ACP35X
Rack mount kit ACR35X
Appliance Spare Unit N352SPU N355SPU
SFP+ Copper Transceiver 10 Gbps RJ45 SFP10T
SFP+ Fiber Transceiver 10 Gigabit
SFP10SR
Ethernet Short Reach
SFP+ Fiber Transceiver 10 Gigabit
SFP10LR
Ethernet Long Reach
SFP Fiber Transceiver Gigabit Ethernet
SFPGESX
SX Short Reach
SFP Fiber Transceiver Gigabit Ethernet
SFPGELX
LX Long Reach
* Contact your sales representative for suitable AMDP sandbox sizing
forcepoint.com/contact
© 2023 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint.
All other trademarks used in this document are the property of their respective owners.
[FP-NGFW-350-Series-Datasheet] 03Oct2023
2
