SN1100

Up to 59.4 Gbps
FIREWALL PERFORMANCE

Up to 13.4 Gbps
VPN PERFORMANCE

Resilience
COMPLEX INFRASTRUCTURES

NETWORK SECURITY
POWER AND
Resilience of complex infrastructures
High availability, redundant power supply and link aggregation
functions enable you to build a complex, resilient architecture.

RESILIENCE Tailored protection at the heart of your network

25 Gbps fiber interfaces and network segmentation functions

FOR COMPLEX deliver a high-performance solution for protecting the core of

your infrastructure.
INFRASTRUCTURES Network modularity
The modularity of the network, with the ability to mix copper
and fiber interfaces (1 GbE, 2.5 GbE, 10 GbE and 25 GbE),
adapting perfectly to your infrastructure – both now and in
future.

FOR EUROPEAN
CYBERSECURITY
When you choose Stormshield, you gain true strategic independence
and peace of mind in a highly charged geopolitical context.
Completely developed in France, our firmware has received
certification from leading European cybersecurity agencies such as
ANSSI (France) and CCN (Spain), as well as Standard Qualification.

NETWORK SECURITY SN1100 DATASHEET 2

Stormshield © 2025.09.30
 2 fiber interfaces
10 Gb 2 extensions
Copper and fiber modularity
8 copper interfaces (1Gb/10Gb)
10/100/1000

Hot-swappable
redundant power supply

NETWORK SECURITY SN1100 DATASHEET 3

Stormshield © 2025.09.30
 ESSENTIAL
DATA SN1100

Copper connectivity Performance Performance

8 59.4 Gbps 30.7 Gbps
Copper interfaces Firewall Firewall (IMIX)

Network extension VPN Threat Prevention

Modularity 13.4 Gbps 6.7 Gbps
2 slots IPsec throughput Throughput
(1 GbE, 2.5 GbE, 10 GbE et 25 GbE)

NETWORK SECURITY SN1100 DATASHEET 4

Stormshield © 2025.09.30
FEATURES
Non-contractual document. The features mentioned are for version 4.x.

Resilient complex infrastructures And more features

Usage control Confidentiality
The LACP and MSP/RSTP functions, coupled with high availability Firewall/IPS/IDS mode • Identity-based firewall Site-to-site or nomad IPSec VPN • Post Quantum
and redundant power supply, ensure resilience for complex • Application detection and management • Resistant • Remote SSL VPN access in multi-
Microsoft Services Firewall • Industrial firewall/ OS tunnel mode (Windows, Android, iOS, etc.)
architecture. IPS/IDS • Industrial application control • Detection • SSL VPN agent with automatic configuration
and control of the use of mobile terminals • (Windows) • Support for Android/iPhone IPSec

Core network protection Geolocation (countries, continents) • Dynamic

Host Reputation • URL fltering (embedded
VPN

database or cloud mode) • Transparent Network - Integration

Network segmentation functions such as filtering and routing,
authentication (Active Directory, SSO Agent, SSL) IPv6 • NAT, PAT, transparent (bridge)/routed/hybrid
coupled with a choice of interface (copper or fiber), deliver the ideal • Agent-based multi-user VDI authentication modes • Dynamic routing (RIP - OSPF - BGP) •
(Citrix, TSE) • Guest and sponsorship mode Multicast • Multiple link management (balancing,
performance solution for protecting your core network.
authentication, webservices • Host Checker • Zero failover) • Multi-level internal or external PKI
Trust Network Access (ZTNA) management • Multi-domain authentication

Network modularity Protection from threats

(including internal LDAP) • Policy-based routing
(PBR) • QoS management • DHCP client/relay/
A choice of copper (1 GbE, 2.5 GbE and 10 GbE) or fiber (1 GbE, 10 Intrusion detection and prevention • Protocols server • NTP client • DNS proxy-cache • HTTP
autodetection and compliancy check • Application proxy • Aggregate links (LACP, Broadcast
GbE and 25 GbE) network interfaces ensures a perfect fit with your inspection • Protection from denial of service Mode and Redundancy) • Spanning-tree
infrastructure. attacks (DoS) • Protection from SQL injections management (RSTP/MSTP) • SD-WAN, Multifactor
• Protection from Cross-Site Scripting (XSS) • Authentication (MFA)
Protection from malicious Web2.0 code and
... and unique firmware scripts (Clean & Pass) • Trojan detection •
Detection of interactive connections (botnets,
Management
Web-based management • Interface with privacy
Stormshield offers a unique, ergonomic interface for managing Command & Control) • Protection from mode (GDPR compliancy) • Object-oriented
data evasion • Advanced management of security policy • Contextual security policy •
its products range. This reduces operating costs, facilitates the Real-time configuration helper • Rule counter •
fragmentation • Automatic reaction to attack
management of IT teams and saves time for the company. (notification, quarantine, block, QOS, dump) • Connected or disconnected security updates
Antispam and antiphishing: reputation-based • Global/local security policy • Embedded log
analysis, heuristic engine • Embedded antivirus reporting and analysis tools • Interactive and
(HTTP, SMTP, POP3, FTP) • SSL decryption and customizable reports • Support for multiple syslog
inspection • VoIP protection (SIP) • Collaborative server UDP/TCP/TLS • SNMP v2, v3 agent • IPFIX
security: IP reputation, Cloud based Sandbox on • Automated configuration backup • External
the European territory (option) storage (option) • Open API • Script recording •
High availability.
NETWORK SECURITY SN1100 DATASHEET 5
Stormshield © 2025.09.30
 PERFORMANCE1 SN1100

Firewall throughput (1518 bytes UDP) 59.4 Gbps

TECHNICAL
Firewall throughput (IMIX) 30.7 Gbps

IPS throughput (1518 bytes UDP) 48.3 Gbps

SPECIFICATIONS
IPS throughput (IMIX) 14 Gbps

Threat protection* 6.7 Gbps

* Threat protection is measured with firewall, IPS, antivirus, IP reputation, and web application security enabled, using a realistic
traffic mix, and with logging enabled.

VPN SN1100
HARDWARE SN1100
IPsec throughput - AES-GCM (1408 bytes UDP) 13.4 Gbps
Storage > 400 GB SSD
IPsec throughput - AES-GCM (IMIX) 6.6 Gbps
MTBF at 25°C 27.3 years
Nb of IPsec VPN tunnels (1024 kbps per tunnel) 4,700
Size 1U -19”
Nb of SSL VPN clients 1,600
Height x Width x Depth (mm) 44.45 x 440 x 540
NETWORK CONNECTIVITY SN1100
Weight 8.11 kg (17.88 lbs)
Max number of simultaneous sessions (TCP) 1,800,000
Power supply AC: 100-240V 60-50Hz 5A-3A
Nb of new sessions/sec. 250,000 DC (optional): -36 – -72VDC 12-6 A

Nb of main gateways (max)/backup (max) 64/64 Redundant power supply Option (hot-swappable)

CONNECTIVITY SN1100 Power consumption (idle/avg/max) 52/112/144

Interfaces 10/100/1000 8-24 Fans 3 (hot-swappable)

Copper interfaces 10 Gb 0-8 Noise level 65 dBA

Fiber interfaces 1 Gb 0-16 Thermal dissipation (idle/avg/max in BTU/h) 177/382/491

Fiber interfaces 1/10 Gb (dual speed) 2-10 Operating environment Temperature: 0° to 40°C (32° to 104°F)
Humidity: 0% to 95% @ 40°C (104°F)
Fiber interfaces 25 Gb 0-4
Storage environment Temperature: -30° to 65 °C (-22° to 149 °F)
Slot for extension modules 2 Humidity: 5% to 95% @ 60°C (140°F)

SYSTEM SN1100 CERTIFICATIONS SN1100

Nb of filtering rules (recommanded/specific config.) 8,192/32,768 Compliance CE/FCC/CB

Max number of static routes 7,680 Certifications EAL4+, Qualification Standard,

Producto CCN Aprobado & Cualificado,
High availability Active-Passive IEC-62443-4-1
1 Performance is measured in a laboratory environment under ideal conditions for version 5.x. Results may vary depending on
test conditions and software version.

NETWORK SECURITY SN1100 DATASHEET 6

Stormshield © 2025.09.30
 EXTENSION
TYPE EXTENSION MODULE Nb REFERENCE

Fiber 1 Gigabit SFP 8 ports NA-EX-CARD-8xG-FIB

Fiber

Fiber
10 Gigabit SFP+

25 Gigabit SFP28
4 ports

2 ports
NA-NW-CARD-4x10G-F

NA-EX-CARD-2x25G-F 1
MODULES
TYPE EXTENSION MODULE Nb REFERENCE TYPE ON-BOARD INTERFACE CONNECTORS REFERENCE

Copper 10x100x1000 8 ports NA-EX-CARD-8xG-COP Fiber Dual Speed 1G/10Gigabit-SR/SX SFP+ NA-TRANS-DUALSFP-SR
(short distance)
Copper 10x100x1000 with 4 bypass pairs 8 ports NA-EX-CARD-BP-8xG-C 1

Copper 100x1000x2500 8 ports NA-EX-CARD-8x2_5G-C 2 Fiber Dual Speed 1G/10Gigabit-LR/LX SFP+ NA-TRANS-DUALSFP-LR
(long distance)
Copper 10GBASE-T 4 ports NA-EX-CARD-4x10G-COP
1: Requires firmware version 4.8.1 and higher
2: Requires BIOS R1.01

SN1100

10 Gbps

8 ports copper 8 ports copper 8 ports copper 10x100x1000 4 ports copper 8 ports fiber 2 ports fiber 2 ports fiber
10x100x1000 100x1000x2500 with 4 bypass pairs 10GBASE-T 1 Gigabit SFP 10 Gigabit SFP 25 Gigabits SFP28

NETWORK SECURITY SN1100 DATASHEET 7

Stormshield © 2025.09.30
 Essential Premium
Security Pack Security Pack

SERVICE Next-Generation Firewall

PACKS
Layer 7 Firewall  

Geolocation  

Web applications  
ESSENTIAL User authentication, MFA & SSO   HARDWARE
SECURITY PACK EXCHANGE
Secure SD-WAN & ZTNA
Corporations seeking unified protection from All security packs include hardware
threats conveyed by the web or electronic mail and IPsec VPN gateway   maintenance in order to ensure
business continuity in the event of
wishing to closely monitor the online activity of Postquantum encryption   a hardware failure. Your appliance
their users would find it advantageous to subscribe will simply be exchanged for a
SSL VPN gateway & client   similar replacement product. Three
to this pack. They would then benefit from levels of service are available.
Device posture assessment  
Stormshield Network Security’s unique intrusion Standard exchange
prevention technology, an advanced antispam Threat Protection Your appliance will be exchanged
once our customer service center
engine, an antivirus module to detect malicious IPS/IDS   receives the defective appliance.
programs and web filtering engine for defining an Trusted public certificates   Express exchange
internet access policy. Your appliance will be exchanged
Antispam   in advance. As soon as our support
centers diagnose a hardware
PREMIUM Threat intelligence (IP & domains)  
failure, the replacement product will
SECURITY PACK Extended Web Control (URL filtering) Option  be sent, which you would receive
the next working day1.
This pack focuses on corporations with stringent
Antimalware Option  Serenity4all
security requirements, by providing the best
With this service, you replace the
technology for countering even the most Breach Fighter AI-powered sandboxing Option 
product yourself once our support
sophisticated attacks. Advanced antimalware centers have diagnosed the
Industrial protocols DPI Option  malfunction fault2.
system with emulation technology and URL
filtering in cloud mode based on 65 categories Services
(Extended Web Control) will raise your protection Software maintenance  
1
Please check with us regarding the eligible
countries and cities. Applies to diagnoses
to a level that is unrivalled on the market. made before 1 p.m.
Hardware maintenance  
The Stormshield Network Security module offers 2
Replacement products must be acquired
in advance for this service.
real-time visibility over network or application Standard support access  

vulnerabilities that affect workstations and servers Automated configuration backup  

on the information system. 24x7 technical support access Option Option

Express exchange Option Option

Secure return Option Option

NETWORK SECURITY SN1100 DATASHEET 8

Stormshield © 2025.09.30
FOR OPTIMAL MANAGE YOUR
PROTECTION SECURITY WITH
EFFICIENT TOOLS
Stormshield offers options to cover your
additional cybersecurity needs.

Neutralize the most sophisticated threats

with Stormshield Network Advanced Antivirus.
Benefit from an advanced and reliable
filtering solution with Stormshield Extended
Web Control.
Expand your home office with highly secure
remote access with Stormshield VPN Client.
A decision-making Management of large
tool infrastructures
with Stormshield Log Supervisor with Stormshield Management Center

Optimize your research tasks and Stormshield Management Center

ANY DOUBTS incident response. And thanks to its exchanges SNS firewalls configuration
ABOUT THE  quick overview of system effectiveness, and monitoring data in real time, while
ATTACHMENTS you willl have peace of mind knowing ensuring their confidentiality and
Stop risking the security of your your security investments are integrity. Its intuitive graphical interface
infrastructure with a dubious worthwhile. minimizes configuration errors and its
attachment and put it to the test with global management of security and
Stormshield Breach Fighter. filtering policies eliminates repetitive
 breachfighter.stormshieldcs.eu tasks.

NETWORK SECURITY SN1100 DATASHEET 9

Stormshield © 2025.09.30
THE EUROPEAN
CHOICE
IN CYBERSECURITY

www.stormshield.com

NETWORK SECURITY SN1100 DATASHEET

Stormshield © 2025.09.30