Datasheet

FlexEdge Secure SD-WAN

3400 Series
Modular high-performance connectivity and security
for campus networks and data centers

Key Benefits The FlexEdge Secure SD-WAN 3400 series delivers high-speed
networking with strong protection for campus environments in
a compact, 2U rack-mounted appliance. It combines multi-link
› Up to 300 Gbps throughput
› Up to 67 ethernet ports via modular
SD-WAN connectivity and high-availability clustering with next-
I/O interfaces supporting a variety generation firewall security, advanced intrusion prevention, and
of speeds
anti-malware blocking. The 3400 series is centrally managed via
› Compact 2U rack-mounted design
FlexEdge Secure SD-WAN Manager Console (SMC).
› Multi-ISP SD-WAN and site-to-site
Multi-Link™ connectivity
› High-availability clustering Direct-to-cloud connectivity and security for digital transformation
› High-security Secure SD-WAN Digital transformation is all about connecting distributed workforces to the resources
with anti-evasion technology they need, no matter where they are. With applications and data moving to the cloud,
› Accelerated inspection of organizations are increasingly finding that old “hub-and-spoke” networking, like MPLS,
encrypted traffic can no longer handle the load.
› Software and security policy
updates with just a few clicks The FlexEdge Secure SD-WAN 3400 series provides the networking and security
needed to safely connect campus networks and data centers to the Internet for
› Centralized management of up to
2,000 appliances at once maximum performance and productivity using the cloud. The 3400 Series’ eight I/O
module slots support 1 Gbps to 100 Gbps Ethernet interfaces, allowing organizations to
› Endpoint-aware security policy
tailor the appliance to their exact connectivity needs.
enforcement
› Integration with Forcepoint Web Reduced costs and footprint with integrated SD-WAN, NGFW, IPS, and VPN
Security Cloud, CASB, and DLP The FlexEdge Secure SD-WAN 3400 series unites networking and security in a modular
› Optional Advanced Malware 2U rack mounted appliance. It integrates multi-ISP SD-WAN connectivity, site-to-site
Detention and Protection (AMDP) Multi-Link™ VPN, and high-availability clustering with the industry’s strongest next-
› Optional URL Filtering powered by generation firewall (NGFW) and intrusion prevention security (IPS).
Forcepoint ThreatSeeker
All Forcepoint engines, physical as well as virtual, can be centrally administered together,
using SMC. FlexEdge Secure SD-WAN can be deployed across geographies quickly,
without an on-site technician, and updated with just a few clicks.

Advanced clustering for high availability

Downtime is not an option for many organizations. That’s why the 3400 series offers
advanced clustering that allows multiple appliances (including other models of
Forcepoint engines) to be used together to keep campus networks running even in the
middle of software updates or hardware failure. Built-in SD-WAN traffic management
enables links from more than one ISP to be used at the same time to further reduce
the risk of outages. Redundancy in the management console and log services enables
global deployments and the highest levels of uptime.

forcepoint.com
PERFORMANCE1 3401 3405 3410 ORDERING2 3401 3405 3410

NGFW/NGIPS throughput 15 Gbps 30 Gbps 35 Gbps FlexEdge Secure S3401 S3405 S3410
(HTTP 64kB payload) SD-WAN appliance

Max firewall throughput 200 240 300 URL Filtering FPURL10X FPURL11X FPURL12X
(UDP 1518 byte payload) Gbps Gbps Gbps
Virtual Context upgrade FPVC100 FPVC250 FPVC250
Max inspection throughput 26 Gbps 40 Gbps 50 Gbps
(UDP 1518 byte payload) 8 port Gb Ethernet RJ45 MODG8

Threat prevention throughout 12 Gbps 24 Gbps 27 Gbps 8 port Gb Ethernet SFP MODGF8
(HTTP, App-ID, AV, D16, 4kB)
4 port 10Gb Ethernet SFP+ MOD10F4
TLS 1.2 inspection 5.2 Gbps 15 Gbps 19 Gbps
(44kB payload) 8 port 10Gb Ethernet SFP+ MOD10F8

IPsec VPN AES-GCM-256 75 Gbps 100 Gbps 150 Gbps 2 port 25Gb Ethernet SFP283 MOD25F2

Mobile VPN clients unlimited 2 port 40Gb Ethernet QSFP MOD40F2

Max concurrent IPsec VPNs 200,000 230,000 280,000 2 port 100Gb Ethernet
MOD100F2
QSFP283
Max concurrent inspected 2 4 6.5
HTTP connections million million million 8 port Gb Ethernet RJ45
MODG8B
Bypass Module
Max concurrent connections 70 million 100 million 200 million
4 port 10Gb Ethernet
New TCP connections/sec 750,000 1 million 2 million MOD10L4B
Long Reach Bypass Module

VLAN tagging unlimited 4 port 10Gb Ethernet Short

MOD10S4B
Reach Bypass Module
Virtual contexts default/max 10/100 25/250 25/250
2 port 40 G Ethernet
MOD40F2B
MPO Bypass
PHYSICAL 3401 3405 3410
AC power supply ACP3400
Form factor 2U
DC power supply3 ACPD3400
Dimensions WxHxD 438 x88 x 685 mm /
17.3 x3/5 x 27.0 3400 Series fan kit ACF3400

Net weight withouht modules 18.1 kg / 39.9 lbs 3400 Series spare part SSD ACD400

AC power supply 100-240 VAC 50-60 Hz. Appliance Spare Unit N3401SPU N3405SPU N3401SPU
850 W + 850 W
Advanced Malware AMDPFWS, AMDPFWM, AMDPFWL,
DC power supply option -72 - 36 VDC, Detection & Protection4 AMDPFWXL, AMDPFWXXL
850 W + 850 W

Redundant power supply Yes NETWORK INTERFACES 3401 3405 3410

Typical power consumption 480 W 500 W 550 W Fixed Ethernet interfaces 1GE RJ45, 2 10Gbps SFP+
Max power consumption 625 W 650 W 700 W Gb Ethernet - copper ports 1-65
Max BTU/Hour 2133 2218 2388 10 Gb Ethernet ports 2-66
MTBF (hours) 100,000 25 Gb Ethernet ports 0-16
Operating temperature 0° -+40° C, +32° - +104° F 40 Gb Ethernet ports 0-16
Storage temperature -20° -+70° C, -4° -+158° F 100 Gb Ethernet ports 0-8
Relative humidity 8% - 90% Network I/O slots 8
non-condensing
Connectors 2 USB, 1 serial, IPMI Ethernet, VGA
Safety certifications CB, UL/EN60950, NOM
1 Performance values reflect maximums measured under test conditions and may vary
EMI certifications FCC part 15, CE, EN55022 based on configuration and features enabled
EN55024, AZ/NZS 2 See Module Datasheet for details on modules and supported SFPs
3 Contact your Forcepoint sales representative to ask about local availability
4 Contact your sales representative for suitable AMDP sandbox sizing

forcepoint.com/contact
© 2023 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint.
All other trademarks used in this document are the property of their respective owners.
[FP-Secure-SD-WAN-3400-Series-Datasheet] 21Sep2023 2