Partners       Corporate Info       Site Map       Worldwide       Log In
Email Sales
Question?

Contact Sales

Detailed Specs

Security

Firewall
Stateful Packet Inspection, Deep Application Inspection, Proxy Firewall
Application Proxies
HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323
Threat Protection
Blocks spyware, DoS attacks, fragmented & malformed packets, blended threats & more
VoIP
H.323. SIP, Call Setup and Session Security
Application Control
Available with NGFW Bundle and Security Bundle
Intrusion Prevention Service
Available with NGFW Bundle and Security Bundle
Gateway AntiVirus
Available with Security Bundle
Reputation Enabled Defense
Available with Security Bundle
spamBlocker
Available with Security Bundle
WebBlocker
Available with Security Bundle
APT Blocker
Available as purchase upgrade
Data Loss Prevention
Available as purchase upgrade

VPN & Authentication

Encryption
DES, 3DES, AES 128-, 192-, 256-bit
IPSec
SHA-1, MD5, IKE pre-shared key, 3rd party cert
SSL
Thin client
L2TP
Works with native OS clients
PPTP
Server & Passthrough
VPN Failover
Yes
Single Sign-On
Transparent Active Directory Auth.
XAUTH
Radius, LDAP, Secure LDAP, Windows Active Directory
Other User Authentication
VASCO, RSA SecurID, Web-based, Local, Microsoft Terminal Services and Citrix

Performance

Firewall Throughput*
20 Gbps

VPN Throughput*
2 Gbps
AV Throughput*
10 Gbps
IPS Throughput*
10 Gbps
XTM Throughput*
Up to 10 Gbps
Concurrent Sessions (bi-directional)
2,500,000


Nodes Supported (LAN IPs)
Unrestricted

BOVPN Tunnels
10,000
MUVPN Tunnels (IPSec/SSL/L2TP)
20,000

Networking

Operating System
Fireware® XTM Pro
IP Address Assignment
Static, DynDNS, PPPoE, DHCP (Server, Client, Relay)
Routing
Static, dynamic (BGP4, OSPF, RIP v1/v2), Policy-based
Link Aggregation
802.3ad dynamic, static, active/backup
QoS
8 priority queues, diff serv, modified strict queuing
VLAN Support
4,000 VLANs: bridging, tagging, routed mode
High Availability
Active/Passive, Active/Active with load balancing
NAT
Static, dynamic, 1:1, IPSec NAT traversal, Policy-based NAT, Virtual IP
Other Networking
Port independence, WAN failover, load balancing, transparent/drop-in mode

*Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration. Contact your WatchGuard reseller or call WatchGuard directly for help determining the right model for your network.

Management

Management Platform
WatchGuard System Manager v11.5 or higher

4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.

Alarms and Notifications
SNMP v2/v3, Email, Mgmt. System Alert

Server Support
Logging, Reporting, Quarantine, WebBlocker, Management
Web UI
Supports Windows, Mac, Linux, and Solaris OS with most common browsers
CLI
Includes direct connect and scripting

Hardware

Interfaces
16: 10/100/1000
4: 10G SFP+ Fiber

Other Ports
1 Serial, 1 Management, 2 USB
Product Dimensions
19" x 27" x 3.5" (48.2 x 68.6 x 8.8 cm)

Shipping Dimensions
23" x 34" x 10.25" (58.3 x 86.4 x 24.7 cm)

Weight
58 lbs (26.3 kg)
AC Power
100-240 VAC Autosensing
Rack Mountable
2U rack-mounted, brackets with rear rails included
Accessories
Universal redundant hot swap power supplies, Hot swap replaceable fans
WEEE/RoHS Compliant
Yes

Security Certifications
ICSA Firewall, ICSA VPN, CC EAL4+
Review Pending: FIPS 140-2

Network Certifications
IPv6 Ready Gold (routing)

Safety Certifications
NRTL/C, CB, CE pending
Application Control
Take Back Control of Your Network

Application visibility and control is critical to the health of your network and your business. Learn how Application Control from WatchGuard makes enforcing acceptable use policies simple.

10 Questions to Ask Before Buying an Anti-spam Solution
10 Questions to Ask Before Buying an Anti-spam Solution

With so many anti-spam products on the market, how can you be sure you're getting the best solution for your business network? Find out the right questions to ask.