Detailed Specs
Security
- Firewall
- Stateful Packet Inspection, Deep Application Inspection, Proxy Firewall
- Application Proxies
- HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323
- Threat Protection
- Blocks spyware, DoS attacks, fragmented & malformed packets, blended threats & more
- VoIP
- H.323. SIP, Call Setup and Session Security
- Application Control
- Available with NGFW Bundle and Security Bundle
- Intrusion Prevention Service
- Available with NGFW Bundle and Security Bundle
- Gateway AntiVirus
- Available with Security Bundle
- Reputation Enabled Defense
- Available with Security Bundle
- spamBlocker
- Available with Security Bundle
- WebBlocker
- Available with Security Bundle
VPN & Authentication
- Encryption
- DES, 3DES, AES 128-, 192-, 256-bit
- IPSec
- SHA-1, MD5, IKE pre-shared key, 3rd party cert
- SSL
- Thin client
- L2TP
- Works with native OS clients
- PPTP
- Server & Passthrough
- VPN Failover
- Yes
- Single Sign-On
- Transparent Active Directory Auth.
- XAUTH
- Radius, LDAP, Secure LDAP, Windows Active Directory
- Other User Authentication
- VASCO, RSA SecurID, Web-based, Local, Microsoft Terminal Services and Citrix
Performance
- Firewall Throughput*
- 20 Gbps
- VPN Throughput*
- 2 Gbps
- AV Throughput*
- 10 Gbps
- IPS Throughput*
- 10 Gbps
- XTM Throughput*
- Up to 10 Gbps
- Concurrent Sessions (bi-directional)
- 2,500,000
- Nodes Supported (LAN IPs)
- Unrestricted
- BOVPN Tunnels
- 10,000
- MUVPN Tunnels (IPSec/SSL/L2TP)
- 20,000
Networking
- Operating System
- Fireware® XTM Pro
- IP Address Assignment
- Static, DynDNS, PPPoE, DHCP (Server, Client, Relay)
- Routing
- Static, dynamic (BGP4, OSPF, RIP v1/v2), Policy-based
- Link Aggregation
- 802.3ad dynamic, static, active/backup
- QoS
- 8 priority queues, diff serv, modified strict queuing
- VLAN Support
- 4,000 VLANs: bridging, tagging, routed mode
- High Availability
- Active/Passive, Active/Active with load balancing
- NAT
- Static, dynamic, 1:1, IPSec NAT traversal, Policy-based NAT, Virtual IP
- Other Networking
- Port independence, WAN failover, load balancing, transparent/drop-in mode
*Throughput rates will vary based on environment & configuration
Management
- Management Platform
- WatchGuard System Manager v11.5 or higher
4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.
- Alarms and Notifications
- SNMP v2/v3, Email, Mgmt. System Alert
- Server Support
- Logging, Reporting, Quarantine, WebBlocker, Management
- Web UI
- Supports Windows, Mac, Linux, and Solaris OS with most common browsers
- CLI
- Includes direct connect and scripting
Hardware
- Interfaces
- 16: 10/100/1000
4: 10G SFP+ Fiber
- Other Ports
- 1 Serial, 1 Management, 2 USB
- Product Dimensions
- 19" x 27" x 3.5" (48.2 x 68.6 x 8.8 cm)
- Shipping Dimensions
- 23" x 34" x 10.25" (58.3 x 86.4 x 24.7 cm)
- Weight
- 58 lbs (26.3 kg)
- AC Power
- 100-240 VAC Autosensing
- Rack Mountable
- 2U rack-mounted, brackets with rear rails included
- Accessories
- Universal redundant hot swap power supplies, Hot swap replaceable fans
- WEEE/RoHS Compliant
- Yes
- Security Certifications
- ICSA Firewall, ICSA VPN, CC EAL4+
Review Pending: FIPS 140-2
- Network Certifications
- IPv6 Ready Gold (routing)
- Safety Certifications
- NRTL/C, CB, CE pending