 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 Network Security Education Center 
|
Frequently Asked Questions
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Firebox X Core Model | X550e | X750e | X1250e |
|---|---|---|---|
| Firewall Throughput | 300+ Mbps | 300+ Mbps | 300+ Mbps |
| VPN Throughput (3DES) | 35 Mbps | 50 Mbps | 100 Mbps |
| Interfaces
10/100 |
4 0 |
8 0 |
0 8 |
| Simultaneous VPN Tunnels
Branch Office |
35/45 5/75 |
100/100 50/100 |
600/600 400 |
| Appliance Software | Fireware | ||
| Compliant with EU RoHS and WEEE regulations | Yes | ||
Previously released Core models, running WFS:
| Firebox X Core Model | X500 | X700 | X1000 | X2500 |
|---|---|---|---|---|
| Firewall Throughput | 100 Mbps | 150 Mbps | 225 Mbps | 275 Mbps |
| VPN Throughput (3DES) | 20 Mbps | 40 Mbps | 75 Mbps | 100 Mbps |
| Interfaces
10/100 |
3 enabled / 6 max 0 |
|||
| Simultaneous VPN Tunnels
Branch Office |
0/50 max 5/50 max |
100 10/50 max |
400 50/1,000 |
1,000 1,000 |
| Appliance Software | WatchGuard Firebox System (WFS) | |||
| Compliant with EU RoHS and WEEE regulations | No | |||
Q: Which Firebox X Core model is right for me?
A: Several factors should inform your decision regarding your choice of Firebox X Core appliances. Some questions to consider include:
- What is the speed of your Internet connection, and what volume of traffic is typical for your network?
- Do you have multiple LAN segments, requiring greater interface port density on your security appliance?
- How many users are on your network and what are your company's future plans for growth?
- Do you host a mail server on your network or at a provider, and what is the typical volume of e-mail traffic?
- Do you host a Web server on your network and what is the typical volume of Web traffic?
- Do you need extra horsepower for running multiple security services, such as gateway anti-virus, URL filtering, and spam blocking?
- Are you affected by European Union environmental regulations RoHS or WEEE?
You can compare up to three Firebox X Core appliances at a time with WatchGuard's online product comparison chart, or call one of our security experts at 1.800.734.9905 in the U.S. and Canada, and +1.206.613.0895 from other areas of the world.
Q: How do Firebox X Core e-Series models differ from previously released Firebox X Core security appliances?
A: Firebox X Core e-Series models differ from previous versions of the Firebox X Core in several key areas. Firebox X Core e-Series:
- Ships with Fireware appliance software rather than the WatchGuard Firebox System (WFS) appliance software of the older Core models
- Comes with twice the memory of previous Core models, for increased scalability
- Offers a choice of interfaces and speeds - four 10/100, eight 10/100, or eight 10/100/1000 RJ45 Ethernet interfaces
- Meets European Union hardware environmental regulations (RoHS and WEEE compliance)
Appliance Software
Q: What's new in Fireware and Fireware Pro 10?
A:
Single Sign-on – Single sign-on allows users transparent Firebox authentication upon Active-Directory login. This saves time and training of end-users by streamlining Firebox authentication, providing strong security and a seamless web surfing experience when used with Webblocker.
VOIP and Video Conferencing Support – Fireware 10 introduces a new SIP and H.323 application support, allowing VOIP and videoconferencing solutions to work seamlessly with the Firebox Peak.
Expanded Webblocker Categories – Webblocker categories have been expanded to 54, for more granular control of web surfing.
Webblocker for HTTPS – HTTPS is now no longer a way for end-users to bypass Webblocker for counterproductive surfing! Webblocker will now apply its surfing rules to HTTPS sites.
Integrated SSL VPN – SSL VPN’s provide ease-of-use, security and universal access. FireWare 10 intruces SSL VPN as an additional method of securing remote connections for mobile users.
Virus OutBreak Detection - For SpamBlocker users, Virus Outbreak Detection has been added to block potentially malicious attachments in real-time, preventing costly outages and eliminating the need for intensive malware clean-up. Not only does SpamBlocker keep spam out, it keeps email born malicious attachements out as well, for more complete email security and uptime.
Q: What appliance software is shipped on each Firebox X Core model?
A: Firebox X Core e-Series models (X550e, X750e, X1250e) ship with Fireware appliance software.
Previously released Firebox X Core models (X500, X700, X1000, X2500) ship with WatchGuard Firebox System (WFS) appliance software.
Whether running Fireware or WFS, any Core model can be upgraded to Fireware Pro advanced appliance software, which offers important networking features including traffic shaping, dynamic routing, and high availability.
The following table summarizes the appliance software shipped with each Firebox X model and the available appliance software upgrade.
| Model | Ships with | Upgradeable to |
|---|---|---|
| X500, X700, X1000, X2500 | WatchGuard Firebox System (WFS) | Fireware Pro |
| X550e, X750e, X1250e | Fireware | Fireware Pro |
Q: What are the differences in WFS, Fireware, and Fireware® Pro appliance software?
A: Refer to the Appliance Software FAQ for detailed information on the appliance software features and versions.
Q: Can previously released Firebox X Core appliances running WFS appliance software be upgraded to Fireware?
A: Today, Firebox X Core models (X500, X700, X1000, X2500) may only be upgraded to Fireware Pro. Once all major features of WFS are available in Fireware, a free upgrade from WFS to Fireware will be available to WFS customers who have an active LiveSecurity Service subscription.
Q: Can I purchase WFS as the appliance software for a Firebox X Core e-Series model (X550e, X750e, X1250e)?
A: No. WFS will not be available on the newer Firebox X Core e-Series models. E-Series models ship with Fireware appliance software, upgradeable to Fireware Pro.
Q: Will WFS continue to be supported when the Firebox Core X500, X700, X1000 and X25000 models sales are ended?
A: Yes. WFS will continue to be supported. Hardware and software support remains available to customers with active LiveSecurity Service subscriptions.
Appliance Hardware
Q: What are the hardware differences between the previously released Firebox X Core models (X500, X700, X1000, X2500) and the newer Firebox X Core e-Series models (X550e, X750e, X1250e)?
A: The e-Series models use a faster processor and have twice the L2 cache, DRAM, and Flash memory of the previous Firebox X Core models.
Additionally, the Firebox X Core e-Series models are compliant with new environmental regulations in EU countries that specify a reduction of hazardous substances (RoHS regulations) used in manufacturing, and new EU regulations that specify manufacturing designs which promote ease of recycling (WEEE regulations).
Q: What are the processor and memory configurations in each Firebox X Core model?
A: What are the processor and memory configurations in each Firebox X Core model?
| X500, X700, X1000, X2500 | X550e, X750e, X1250e | |
|---|---|---|
| Processor | 1.26GHz Celeron | 1.3 GHZ Celeron M |
| L2 Cache | 265 Kb | 512 Kb |
| DRAM | 256 Mb | 512 Mb |
| Flash | 64 Mb | 128 Mb |
Q: What are the physical hardware interfaces on the new Firebox Core X550e, X750e, and X1250e e-Series models?
A: Firebox X Core e-Series hardware interfaces are as follows:
- Firebox Core X550e has four 10/100 interfaces
- Firebox Core X750e has eight 10/100 interfaces
- Firebox Core X1250e has eight 10/100/1000 interfaces
All interfaces are enabled on the Firebox Core X550e, X750e, and X1250e models, whether they are running Fireware (which ships standard on the Core e-Series) or Fireware Pro (our advanced appliance software upgrade). No port upgrade is ever needed.
Q: What are the physical hardware interfaces on the previously released Firebox Core X500, X700, X1000, and X2500 models?
A: All Firebox Core X500, X700, X1000 and X2500 models have the same physical interface configuration. There are six 10/100 interfaces. When running WFS appliance software, three interfaces are enabled. A 3-port upgrade is required to enable all six ports. When running Fireware Pro, all six interfaces are enabled.
Q: What is the difference in hardware between the Firebox X550e model and the Firebox X750e and X1250e models?
A: The only hardware difference is that the X550e model has four physical interfaces while the X750e and X1250 both have eight physical interfaces.
Q: Is it possible to upgrade X500, X700, X1000, or X2500 hardware to the new X550e, X750e, or X1250e hardware?
A: No. The hardware platforms are different. It is not possible to upgrade hardware to the newer X550e, X750e, or X1250e hardware. If you're interested in upgrading to the new hardware platform, you can take advantage of the WatchGuard Trade-Up program.
Q: Are the newer Firebox X Core X550e, X750e, and X1250e models compliant with European Union RoHS and WEEE regulations?
A: Yes, these models are fully compliant with EU RoHS and WEEE regulations. Previously released Firebox X Core models (X500, X700, X1000, X2500) are not compliant with the new EU RoHS regulations.
Q: Will a Fireware® 8.x configuration file work on Fireware® 10?
A: Yes. An 8.x configuration file can be used with Fireware 10. The configuration file can be read and no changes should be necessary. However, users currently running versions lower than 8.3 will need to first upgrade to 8.3, and then upgrade to 10. There is no direct configuration conversion from 8.2 or previous to 10.
Q: What is the LCD front panel display and what can be controlled?
A: The LCD displays the Firebox X Core model and operational status. It allows the user to get basic information and make minor setup changes without using the Management Station. Through the use of the buttons, you may view the Firebox X status (for example, Sys A or Sys B status, Armed or Disarmed status), average load on the box, memory usage, Firebox uptime, time of last change to the configuration file, and the external and default gateway IP addresses.
Q: What kind of warranty is included with a Firebox X Core appliance?
A: All Firebox X Core appliances include a one-year standard, limited hardware warranty that begins with product purchase. Additionally, the appliance is covered by a 90-day Advance Hardware Replacement that begins when a customer activates the initial LiveSecurity Service subscription. Advance Hardware Replacement coverage is continued when a customer renews the LiveSecurity Service subscription within 90 days of initial subscription activation.
Q: What happens to the limited hardware warranty on a Firebox X Core if the LiveSecurity Service subscription is allowed to lapse?
A: The customer must pay a LiveSecurity Service Reinstatement fee to renew the LiveSecurity Service coverage and be current once again.
Management Software: WatchGuard® System Manager
Q: What is WatchGuard® System Manager?
A: WatchGuard System Manager (WSM) is the software used to manage one or more Firebox appliances. It is available to all Core and Peak customers for download on the WatchGuard Web site. WSM provides a unified management experience that simplifies network administration for the IT expert, while providing indispensable ease of use for novice network administrators, with a variety of features that common Web-based interfaces cannot match! WSM includes:
- Simple Setup and Configuration
Smart, out-of-the-box defaults make installation easy; e-Series Core appliances ship with browser-based Quick Setup Wizard to further streamline the initial installation experience - Interactive Real-Time Monitoring
WSM provides instant visibility into current network, security, and user events, and interactive components allow the user to take direct diagnostic or preventive action on a running Firebox - Policy Manager
Easily configure and manage policies with a powerful, icon-based interface. Offline configuration gives maximum flexibility to save changes instantly, or you can take time to craft the configuration over multiple work sessions without disrupting Firebox activity - Drag-and-Drop VPN Tunnel Creation
Fast, easy, and virtually foolproof, our drag and drop VPN creation in WSM 10 is more powerful than ever before. Build highly secure Branch Office VPN tunnels among Fireebox appliances with a simple drag-and-drop action - Log Viewer
View color-coded Firebox log entries that are easy to read and understand - HostWatch™
Provides a live, graphical display of real-time connections to and through the Firebox, with interactive components to allow instant diagnostic or preventive actions - Historical Reports
Offers rich reporting with graphical presentations of security, network, and user activity data
Q: Which versions of WSM can be used to manage a Firebox X Core e-Series or previously released Core appliance?
A: In order to manage a Firebox X Core e-Series appliance (X550e, X750e, X1250e), use WSM 8.3 or higher (WSM 10 recommended). WSM 10 can manage previously released Core appliances, and centrally update appliance software and configurations for Firebox X Edge appliances, as well.
Q: Which version of WSM ships with the new Firebox X Core e-Series models?
A: The Firebox X Core e-Series (X550e, X750e, X1250e) ships without a software CD; to manage an e-Series Core, it is necessary to download WSM 10. For instructions, see the Firebox X Core e-Series Quick Start Guide.
Q: What's new in WatchGuard System Manager 10?
A: WSM 10 includes a number of enhancements over previous WSM versions:
Improved Reporting – Fireware 10 includes new SQL-based reports with improved performance and scalability.
Realtime Bandwidth Monitoring by Service – With Firebox System Manager, you can now get realtime bandwidth data by service. Giving a clearer picture of what appliations are consuming valuable network bandwidth.
Expanded Quarantine Support – With Fireware 10 and GAV/IPS. email identified as potentially infected can be quarantined for later administrator review. Email users won’t lose mission critical attachments that may be infected. This new quarantine allows safe cleaning of potentially infected files.
As always, WSM provides unparalleled ease of use with features such as interactive real-time monitoring; secure, flexible logging and reporting; and smart, out-of-the-box defaults.
Q: Where can I get more information on WatchGuard System Manager?
A: You can read more about WatchGuard System Manager on the WatchGuard Web site at www.watchguard.com/products/wsm.asp.
Security Service Subscriptions
Q: What security service subscriptions are available for the Firebox X Core?
A: The following table identifies the security service subscriptions available for the various Firebox X Core models. Note that as of Fireware 10, spamBlocker includes a new quarantine function.
| Models | Previously released Firebox X Core models X500, X700, X1000, X2500 | Firebox X Core e-Series models X550e, 700e, 1250e | ||
|---|---|---|---|---|
| Appliance Software | WFS | Fireware Pro | Fireware | Fireware Pro |
| Anti-spam Service | SpamScreen | spamBlocker (w/virus outbreak detection) | spamBlocker (w/virus outbreak detection) | spamBlocker (w/virus outbreak detection) |
| Anti-Virus Service | Gateway AntiVirus for E-mail | Gateway AntiVirus/Intrusion Prevention Service | Gateway AntiVirus/Intrusion Prevention Service | Gateway AntiVirus/Intrusion Prevention Service |
| URL Filtering Service | WebBlocker | WebBlocker | WebBlocker | WebBlocker |
Q: Are WatchGuard security service subscriptions purchased separately from the appliance?
A: Yes. Firebox X Core security service subscriptions are sold separately.
Q: If I own a Firebox X Core appliance, can I get a free trial of these security service subscriptions?
A: Yes, users can initiate trials of Gateway AV/IPS, spamBlocker, and WebBlocker on Firebox X Core e-Series appliances, and on previously released Firebox X Core models running Fireware Pro.
- When activating a new Firebox X Core, users will be guided through the free trial activation process
- Users with a Core appliance that has already been activated can go into "Product Details" in the Managed Products section of the LiveSecurity Service site
A 90-day initial subscription to LiveSecurity Service also comes with every Firebox X Core purchase.
Q: How do I purchase security service subscriptions?
A: All security services are fully integrated with the intelligent layered security architecture of the Firebox X Core. You simply purchase a subscription to a service, and then use a downloadable license key to turn on the service on you Firebox.
Q: Will I still be able to buy SpamScreen, GAV for E-mail, and WebBlocker services for appliances running WFS?
A: Yes. These subscription services will continue to be available with Firebox X Core appliances running WFS appliance software.
Q: If I'm running WFS, do I need to upgrade from WFS to Fireware Pro advanced appliance software in order to use Gateway AV/IPS and spamBlocker security services?
A: Yes. WFS only works with Gateway AV for E-mail and SpamScreen. An upgrade to Fireware Pro advanced appliance software is required in order to use Gateway AV/IPS and spamBlocker. WebBlocker works with any type of Firebox X Core appliance software.
Q: If I am a Core e-Series customer, do I need to upgrade from Fireware to Fireware Pro advanced appliance software in order to use Gateway AV/IPS, spamBlocker, and WebBlocker?
A: No. Gateway AV/IPS, spamBlocker, and WebBlocker will all run on a Firebox X Core e-Series models using Fireware appliance software. You can upgrade to Fireware Pro for enhanced networking features such as dynamic routing, traffic shaping, VLAN, multi-WAN load balancing, and high availability.
Q: Where do I find out more about security service subscriptions for the Firebox X Core?
A: FAQs and product overviews are available on the WatchGuard web site at www.watchguard.com/products/security_services.asp.
Q: Will I still be able to buy SpamScreen, Gateway AV for E-mail, and WebBlocker services for appliances running WFS?
A: Yes. These subscription services will continue to be available with Firebox X Core appliances running WFS appliance software.
Q: If I'm running WFS, do I need to upgrade from WFS to Fireware Pro advanced appliance software in order to use Gateway AV/IPS and spamBlocker security service subscriptions?
A: Yes. WFS only works with Gateway AV for E-mail and SpamScreen. An upgrade to Fireware Pro advanced appliance software is required in order to use Gateway AV/IPS and spamBlocker. WebBlocker works with any type of Firebox X Core appliance software.
Upgrades
Q: What is the upgrade path for the Firebox X Core line?
A: Most Firebox X Core appliances can be easily upgraded to a higher model in the line with the purchase of a downloadable license key. The following table outlines the options.
| Model | License Key Upgradeable to |
|---|---|
| X500 | X700, X1000, X2500 |
| X700 | X1000, X2500 |
| X1000 | X2500 |
| X2500 | N/A |
| X550e (e-Series) | X750e-4, X1250e-4 |
| X750e (e-Series) | X1250e |
| X1250e (e-Series) | N/A |
Q: Is it possible to upgrade from a previously released Firebox X Core model to the Core e-Series using a license key?
A: No. Firebox X Core and Core e-Series appliances are two different machines. WatchGuard has a Trade-Up program for Firebox X Core customers who wish to move up to the performance and capacity of the Firebox X Core. Details are available at www.watchguard.com/products/trade.asp.
Q: Is it possible to use a license key to upgrade from Firebox X Core to Firebox X Peak?
A: No. Firebox X Core and Peak appliances are two different machines. WatchGuard has a Trade-Up program for Firebox X Core customers who wish to move up to the performance and capacity of the Firebox X Peak. Details are available at www.watchguard.com/products/trade.asp.
Q: Is it possible to upgrade X550e hardware to the X750e or X1250e hardware?
A: Yes - this is a change with 9.1. An X550e may be upgraded to either of the following:
- X750e-4
- X1250e-4
Of course the "-4" models will have four Ethernet interfaces as opposed to the "native" X750e and X1250e models, but in all other respects the upgraded 550e will perform identically to the X750e or X1250e, respectively.
Q: Can the processor or memory on the device be upgraded?
A: Yes, the processor and memory are upgradeable; however, WatchGuard doesn't recommend users upgrade hardware. Opening the case of a Firebox X will void the appliance hardware warranty.
Physical Environment
Q: Is the Firebox X Core rack-mountable?
A: Yes. The Firebox X Core appliance comes with a 19" rack mount kit.
Q: Does the power supply support 110/220 volts?
A: Yes. Firebox X Core contains an auto-sensing power supply that will run on either 100 or 240 volts.
Q: What is the power consumption on a Firebox X Core?
A: United States: 60 Watts; Rest of World: 860 Cal/min, 205 BTU/hr
