Netgate4200 MAX pfSense+ Security Gateway | Firewall, Router, VPN | Lifetime TAC Lite Support | 4x 2.5 GbE Ports | Protect your network with a fully featured, professional network security appliance.

This is the lowest cost Netgate router with an Intel chip that has sufficient power to run the Tailscale software package and its [Tailscale's] inefficient implementation of the wireguard protocol. The less expensive models with ARM processors delivered less that 100kbs for our tests and the 4200 delivered several hundred kbs. We did use Netgate's support with this router on an unrelated matter and it was excellent, as usual. The result is a very useful Router that can fully participate in a Tailscale network; and that combination is very good.

Simple to setup. No problems thus far

Died not even a year after purchase. No warnings nothing just emmc (on board storage) not found and everything is gone and can't even re-install pfsense (no storage found). At least the other intel firewall appliance machines lasted me 5 years at half the price.Really disappointed

I am a seasoned network professional, someone who has installed and used and implemented network equipment from Cisco, Juniper, and TP-link. and Ubiquity. I bought this on the recommendation of someone in r/networking on Reddit.Here's the TLDR version. If you are going to use this simple for its simple routing and logging characteristics, you're going to love this. As long as you're a sophisticated used and know how to configure things, you're going to be fine.The longer version. I have not been able to successfully get ipSEC VPN setup, and the L2TP configuration aspects are just simply non-existent. Setting up ipSEC is insufferably difficult. After spending about four hours with my team, we finally called NetGate support. We were told that, even though you bought this and there's support, the actual support you need will cost somewhere between $399 and $799 for a year of support, because their support is actually "we will help you set an IP address on a LAN and be able to ping it from one of the computers on the subnet". So now, on top of paying my own staff for four hours (a total of about 8 hours of pay) and the amount that I would otherwise have billed, I am going to need to pay an additional amount of money to get the support I need to use it the way that I need (setting up VPN's, etc). So my $619 router now costs several thousands of dollars.So, now, let's talk L2TP. The option to enable L2TP shows, but it doesn't actually doesn't stay on, despite setting up everything the way that the directions stated that it should be., you can go to the LOG , then go back to "L2TP" and it's clicked off. This is the sort of awfulness that I keep experiencing over and over and over.So, we went back to our humble TP-LINK TP605 SafeStream router. that simply works.Sure, we don't have the myriad of options and settings that the Netgate product affors us, and sure, with the tpLink, we don't get the benefit of adding multiple DHCP-enabled subnets to separate LAN ports, we don't get all those really funky and fun options that makes me feel special like king rocket-science-man of the netmask worlds.Sure, the Netgate works for simple applications that don't need VPN and such, but if you don't want to resign yourself to losing tons of time trying to figure out something with awful documentation, and don't have yourself $799 to pay for support (or whatever they're charging for telephone support), then just stick with the TP-LINK stuff, and you'll save yourself the aggravation and the annoyance.

The device kept resetting so I returned it. They charged me $120 as restocking fee stating the returned device cannot be sold.Fix your devices first so they work.