RG-CF30XS

Overview

The Ruijie Cybrey RG-CF30XS Next-Generation Firewall represents a robust solution tailored for small-to-medium enterprise networks, branch offices, schools, and commercial facilities. This model combines dual-engine processing with SPU hardware acceleration to deliver comprehensive threat protection without compromising network throughput. Equipped with flexible multi-Gigabit copper ports and 10G optical uplinks, the device includes built-in 64GB eMMC log storage for reliable data retention. Its all-in-one security engine integrates AI-powered analytics and intuitive policy management tools, enabling IT teams to deploy enterprise-grade protection with minimal operational effort.

Description

This high-performance NGFW is designed to simplify network defense through its powerful Dual-Engine SPU architecture and flexible connectivity options. The RG-CF30XS offers an eight-in-one security suite including AI analysis, real-time threat intelligence, and deep packet inspection for over 7,200 applications. With scalable throughput ranging from 1.3 Gbps to 1.6 Gbps and support for up to 1,125 concurrent SSL VPN users included at no extra cost, it ensures secure and fast connectivity for growing organizations.

Features

Ruijie Cybrey RG-CF30XS Overview

The Part Number RG-CF30XS identifies this specific model of the Ruijie Cybrey firewall series. It is engineered to handle complex security tasks while maintaining high performance levels essential for modern business environments. The device utilizes a dedicated SPU decryption chip that offloads encrypted traffic inspection from the main CPU, ensuring that network speed remains consistent even under heavy load. This architecture supports up to 90% coverage of encrypted traffic analysis without degrading user experience.

Security is further enhanced through an integrated suite that includes Web Application Firewall capabilities, Intrusion Prevention Systems, and antivirus protection. The system also features a Policy Simulation Space, allowing administrators to test rule changes in a safe environment before applying them live. For connectivity, the unit provides eight Gigabit Ethernet ports alongside two 2.5Gbps ports and dual 10G SFP+ uplinks, preventing bottlenecks even during peak usage times.

Security and Performance Highlights

• Dual-Engine Matrix Architecture with dedicated CPU core and SPU decryption accelerator for optimized processing
• Eight-in-One Security Suite including AI Analyzer, GTI, RTI, WAF, IPS, Antivirus, URL Filtering, and Application Control
• Scalable threat protection throughput ranging from 1.3 Gbps to 1.6 Gbps based on active security profiles
• AI-powered cloud analytics that correlate alerts into actionable incidents with automated root-cause tracing
• Integrated SD-WAN capabilities (AnyLink) for automated multi-WAN routing and load balancing across sites

Connectivity and Port Configuration
The hardware layout is designed to support diverse network environments without requiring additional switches or adapters. The front panel includes eight 10/100/1000 Mbps Base-T RJ45 ports for standard device connections, complemented by two multi-gigabit 2.5Gbps RJ45 ports for high-speed local links. For backbone connectivity, there are two 1G SFP fiber interfaces and two high-speed 10G SFP+ optical uplink slots available.

• Fixed Ports: 8 x GE RJ45, 2 x 2.5GE RJ45, 2 x 1GE SFP, 2 x 10GE SFP+
• Maximum Packet Processing Bandwidth: 9.0 Gbps
• IPS Throughput Rate: 1.8 Gbps for deep packet inspection
• NGFW Throughput Rate: 1.6 Gbps for policy traffic inspection
• Threat Protection Rate: 1.3 Gbps for full active anti-malware profiling

Capacity and Scalability Metrics
This firewall is built to handle substantial network loads with a session capacity of up to 1,500,000 concurrent TCP sessions. New connection rates can reach 105,000 per second, ensuring that even large enterprises experience minimal latency during peak traffic periods. The device supports the simultaneous operation of up to 3,000 firewall rule profiles, offering granular control over network access policies.

For remote access needs, the system offers a free SSL VPN license supporting 1,125 concurrent users and allows for up to 200 gateway tunnels. IPsec throughput reaches 3.7 Gbps while the SSL VPN packet pipeline handles 2.16 Gbps efficiently. Local storage is provided by a built-in 64 GB solid-state memory unit which can be expanded with an internal HDD kit or external drives for extended log retention.

• Concurrent SSL VPN Users: Up to 1,125 (License-free)
• Active Policies Limit: Supports up to 3,000 rule profiles
• Session Capacity: 1,500,000 Maximum Active TCP Sessions
• New Connections Rate: 105,000 per second
• Storage: 64 GB eMMC with support for modular expansion

Management and Deployment Tools
The RG-CF30XS simplifies network administration through cloud-based management tools provided by the Ruijie ecosystem. Administrators benefit from lifetime free centralized support and access to the AnyLink SD-WAN solution for streamlined branch office connectivity. The interface includes one-click policy generation wizards and traffic learning modules that automatically suggest optimal rules based on observed behavior.

The chassis is designed as a 1U form factor rack-mountable enclosure, making it suitable for standard server racks or desktop placement. Additional expansion options include support for 4G LTE dial modules to ensure connectivity redundancy in critical scenarios. The system integrates seamlessly with existing IT infrastructure while providing the advanced security features required for modern threat landscapes.

What's in the box

• Ruijie Cybrey RG-CF30XS Next-Generation Firewall Unit
• Power Cord and Power Adapter
• Rack Mount Kit with Brackets
• RJ45 Console Cable for Initial Configuration

The specific throughput rates and feature activations may vary based on active software licensing and traffic conditions. It is recommended to verify total network bandwidth requirements prior to deployment to ensure optimal performance.

Specifications

©2026 Respective owners and brand holders. This table has been carefully researched and generated by ComXpert International CC (//www.comx-computers.co.za), however, errors and omissions may occur. Only references to South Africa apply. All products are sourced in South Africa from the official suppliers and the warranty is that of the local supplier. E&OE. This table and our site's content may be used on condition that this notice and link remains intact and unaltered.
Specifications
Product Code	RG-CF30XS
Key specifications
SKU	RG-CF30XS
Details
Gateway type	Next-Generation High-Performance Intelligent Enterprise Firewall
Security throughput	9.0 Gbps Maximum Packet Processing Bandwidth
Hardware architecture	Dual-Engine Matrix (Dedicated CPU Core + SPU Decryption Chip Accelerator)
IPS throughput rate	1.8 Gbps Deep Packet Intrusion Prevention System Velocity
NGFW throughput rate	1.6 Gbps Next-Generation Policy Traffic Inspection
Threat protection rate	1.3 Gbps Full Active Anti-Malware Layer Block Profiling
Copper interfaces	8 x 10/100/1000 Mbps Base-T RJ45 Ports , 2 x 2.5 GbE RJ45 Multi-Gig Ports
Optical SFP slots	2 x 1G SFP Fiber Interfaces , 2 x 10G SFP+ High-Speed Optical Uplinks
Local storage	Built-in 64 GB Solid State Memory Capacity (For Log Retention Space)
Hardware expansion	Supports Modular 1TB Internal HDD Kit & Add-On 4G LTE Dial Modules
Session capacity	1,500,000 Maximum Active Concurrent TCP Sessions
New connections rate	105,000 TCP Sessions Processed Per Second
Active policies limit	Supports Up to 3,000 Firewall Rule Profiles Simultaneously
VPN performance	3.7 Gbps IPsec Throughput , 2.16 Gbps SSL VPN Packet Pipeline
Active VPN tunnels	Supports 200 Gateway Tunnels & 1,125 Concurrent Active Users
Security license	8-in-1 Features Bundle (IPS, AV, WAF, App Control, URL & AI Inspection)
Cloud management	Lifetime Free Centralised Ruijie Cloud Ecosystem Support / AnyLink SD-WAN
Chassis profile	1U Form Factor Rack-Mountable Structural Enclosure Layout

FAQ

What is the maximum number of concurrent SSL VPN users supported?
The Ruijie Cybrey RG-CF30XS supports up to 1,125 concurrent SSL VPN users at no additional license cost.

Does this firewall support high-speed optical connections for uplinks?
Yes, the device includes two 10GE SFP+ ports specifically designed as high-speed optical uplinks to prevent network bottlenecks.

Can I expand the log storage capacity beyond the built-in memory?
The unit comes with 64 GB of eMMC storage for logs, but it supports expansion via an external hard drive or a modular internal HDD kit for long-term retention.

How does this device handle encrypted traffic inspection without slowing down performance?
It utilizes a Dual-Engine SPU Architecture where dedicated decryption hardware offloads up to 90% of encrypted traffic from the main CPU, ensuring peak network throughput.

Is SD-WAN functionality included in the base package?
Yes, the RG-CF30XS features integrated AnyLink SD-WAN for automated multi-WAN routing and load balancing without requiring extra licensing fees.