Tabletop Firebox Appliances
High performance, total security tabletop appliances. Built-in PoE+. Wi-Fi and 5G optional. Ideal for small, home, and branch office locations.
Rackmount Firebox Appliances
1U rackmount, total security appliances with screaming fast performance ideal for midsize and distributed enterprise organizations.
Rugged Firebox Appliances
Total security built to withstand harsh conditions and extreme temperatures. IP64-rated appliance. Perfect for manufacturing and IIoT environments.
TOP BROWSER THREATS
Browser security is growing in importance with the rise of remote work, the growing prevalence of cloud-based services, and the increase in online transactions.
There are two aspects to browser security.
- Ensure employees are using the internet responsibly
- No matter their device or location, their browsers are secure against threats like malware, malicious redirects, and phishing
Upgrade Your Security Today!
Wondering if you can trade in your old firewall or trade up your existing WatchGuard firewall?
Absolutely! Not only can you make the switch seamlessly, but you can also enjoy an extra discount on the latest Firebox platform. Our WatchGuard Trade Up Program makes it easy to replace your aging products with top-of-the-line security solutions, ensuring you stay ahead of evolving threats while giving your network a modernized boost. Click here to explore your options and enhance your protection now!
HIGH-PERFORMANCE FIREWALLS
NV5 T25 T45 T85 (Table Top)
| WatchGuard® Model |  Firebox NV5 Renew |
Firebox T25 Renew |
 Firebox T45 Renew |
 Firebox T85 Renew |
|---|---|---|---|---|
| Ideal For | 5 Users | 20 Users | 50 Users | |
| Performance | ||||
| UTM (Full Scan) | N/A | 403 Mbps | 557 Mbps | 943 Mbps |
| Firewall (UDP 1518) | 410 Mbps | 3.14 Gbps | 3.94 Gbps | 4.96 Gbps |
| VPN (UDP 1518) | 200 Mbps | 1.02 Mbps | 1.58 Gbps | 2.04 Gbps |
| VPN (IMIX) | 62 Mbps | 300 Mbps | 460 Mbps | 680 Mbps |
| AntiVirus | N/A | 472 Mbps | 874 Mbps | 1.53 Gbps |
| IPS (Full Scan) | N/A | 525 Mbps | 716 Mbps | 1.28 Gbps |
| HTTPS (Full Scan) | N/A | 216 Mbps | 301 Mbps | 576 Mbps |
| VPN Tunnels | ||||
| Branch Office VPN Tunnels | 10 | 10 | 30 | 60 |
| Mobile VPN | 10 | 10 | 30 | 60 |
| Hardware | ||||
| Interfaces | 3x1Gb | 5x1Gb | 5x1Gb | 8x1Gb; Optional 1xSFP+ or 4G/LTE |
| Wireless Models | N/A | 802.11ax | 802.11ax | N/A |
| Networking Features | ||||
| VLAN | 10 | 10 | 30 | 75 |
| SD-WAN Dynamic Path Selection |  |
|
|
|
| Supported Security Services | ||||
| Support License | ||||
| Access Portal* | N/A | N/A | |
|
| SD-WAN | |
|
|
|
| Stateful Firewall | |
|
|
|
| VPN | |
|
|
|
| Basic Security Suite | ||||
| Application Control | N/A | |
|
|
| Gateway AntiVirus | N/A | |
|
|
| Intrusion Prevention Service (IPS) | N/A | |
|
|
| Network Discovery | N/A | |
|
|
| Reputation Enabled Defense | N/A | |
|
|
| spamBlocker | N/A | |
|
|
| WebBlocker | N/A | |
|
|
| Total Security Suite | ||||
| APT Blocker | N/A | |
|
|
| DNSWatch | N/A | |
|
|
| IntelligentAV | N/A | N/A | |
|
| Threat Detection and Response | N/A | |
|
|
M270 M370 (Rackmount)
| WatchGuard® Model | Firebox T70 |  Firebox M270 Renew |  Firebox M370 Renew |
|---|---|---|---|
| Ideal For | No longer being sold, for comparison purposes only | 60 Users | 150 Users |
| Performance | |||
| UTM (Full Scan) | 479 Mbps | 800 Mbps | 1.7 Gbps |
| Firewall (UDP 1518) | 4 Gbps | 4.9 Gbps | 8 Gbps |
| VPN (UDP 1518) | 740 Mbps | 1.6 Gbps | 4.6 Gbps |
| VPN (IMIX) | 260 Mbps | 480 Mbps | 1.4 Gbps |
| AntiVirus | 1.2 Gbps | 2.1 Gbps | 3 Gbps |
| IPS (Full Scan) | 530 Mbps | 0.9 Gbps | 2.5 Gbps |
| HTTPS (Full Scan) | 163Mbps | 642 Mbps | 662 Mbps |
| VPN Tunnels | |||
| Branch Office VPN Tunnels | 50 | 50 | 100 |
| Mobile VPN | 60 | 75 | 150 |
| Hardware | |||
| Interfaces | 8x1Gb | 8x1Gb | 8x1Gb |
| Wireless Models | N/A | N/A | N/A |
| Networking Features | |||
| VLAN | 75 | 100 | 200 |
| SD-WAN Dynamic Path Selection | | | |
| Supported Security Services | |||
| Support License | |||
| Access Portal* | N/A | | |
| SD-WAN | | | |
| Stateful Firewall | | | |
| VPN | | | |
| Basic Security Suite | |||
| Application Control | | | |
| Gateway AntiVirus | | | |
| Intrusion Prevention Service (IPS) | | | |
| Network Discovery | | | |
| Reputation Enabled Defense | | | |
| spamBlocker | | | |
| WebBlocker | | | |
| Total Security Suite | |||
| APT Blocker | | | |
| DNSWatch | | | |
| IntelligentAV | N/A | | |
| Threat Detection and Response | | | |
M290 M390 (Rackmount)
| WatchGuard® Model | WatchGuard Firebox T80 | WatchGuard Firebox M290 | WatchGuard Firebox M390 |
|---|---|---|---|
| Ideal For | 50 Users | 60 Users | 150 Users |
| Performance | |||
| UTM (Full Scan) | 631 Mbps | 1180 Mbps | 2.4 Gbps |
| Firewall (UDP 1518) | 4.7 Gbps | 5.8 Gbps | 18 Gbps |
| VPN (UDP 1518) | 1.4 Gbps | 2.4 Gbps | 5.2 Gbps |
| VPN (IMIX) | 416 Mbps | 800 Mbps | 1.8 Gbps |
| AntiVirus | 1.15 Gbps | 1.47 Gbps | 3.1 Gbps |
| IPS (Full Scan) | 909 Mbps | 1.3 Gbps | 3.3 Gbps |
| HTTPS (Full Scan) | 344 Mbps | 696 Mbps | 1.32 Gbps |
| VPN Tunnels | |||
| Branch Office VPN Tunnels | 60 | 75 | 250 |
| Mobile VPN | 60 | 75 | 250 |
| Hardware | |||
| Interfaces & Modules | 8x1Gb; Optional 1xSFP+ or LTE module | 8x1Gb (included); Optional 4x1Gb, 4xSFP fiber, 2xSFP+ fiber; modules are not compatible with previous gen | 8x1Gb (included); Optional 4x1Gb, 4xSFP fiber, 2xSFP+ fiber; modules are not compatible with previous gen |
| Wireless Models | N/A | N/A | N/A |
| Networking Features | |||
| VLAN | 75 | 100 | 250 |
| SD-WAN Dynamic Path Selection | | | |
| Supported Security Services | |||
| Support License | |||
| Access Portal* | | | |
| SD-WAN | | | |
| Stateful Firewall | | | |
| VPN | | | |
| Basic Security Suite | |||
| Application Control | | | |
| Gateway AntiVirus | | | |
| Intrusion Prevention Service (IPS) | | | |
| Network Discovery | | | |
| Reputation Enabled Defense | | | |
| spamBlocker | | | |
| WebBlocker | | | |
| Total Security Suite | |||
| APT Blocker | | | |
| DNSWatch | | | |
| IntelligentAV | | | |
| Threat Detection and Response | | | |
Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration. Max firewall throughput tested using 1518 byte UDP packets based on RFC 2544 methodology.
M470 M570 M670 (Rackmount)
| WatchGuard® Model |  Firebox M470 Renew |  Firebox M570 Renew |  Firebox M670 Renew |
|---|---|---|---|
| Ideal For | 450 Users | 600 Users | 850 Users |
| Performance | |||
| UTM (Full Scan) | 2.1 Gbps | 3.5 Gbps | 4.2 Gbps |
| Firewall (UDP 1518) | 19.6 Gbps | 26.6 Gbps | 34 Gbps |
| VPN (UDP 1518) | 5.2 Gbps | 5.8 Gbps | 7.6 Gbps |
| VPN (IMIX) | 1.8 Gbps | 2 Gbps | 2.6 Gbps |
| AntiVirus | 3.5 Gbps | 5.4 Gbps | 6.2 Gbps |
| IPS (Full Scan) | 3 Gbps | 4.8 Gbps | 5.6 Gbps |
| HTTPS (Full Scan) | 723 Mbps | 1.2 Gbps | 1.5 Gbps |
| VPN Tunnels | |||
| Branch Office VPN Tunnels | 250 | 500 | 750 |
| Mobile VPN | 250 | 500 | 750 |
| Hardware | |||
| Interfaces | 8x1Gb (included); Optional 8x1Gb, 8x1Gb fiber, 4x10Gb fiber | 8x1Gb (included); Optional 8x1Gb, 8x1Gb fiber, 4x10Gb fiber | 8x1Gb (included); Optional 8x1Gb, 8x1Gb fiber, 4x10Gb fiber |
| Wireless Models | N/A | N/A | N/A |
| Networking Features | |||
| VLAN | 300 | 500 | 750 |
| SD-WAN Dynamic Path Selection | | | |
| Supported Security Services | |||
| Support License | |||
| Access Portal* | | | |
| SD-WAN | | | |
| Stateful Firewall | | | |
| VPN | | | |
| Basic Security Suite | |||
| Application Control | | | |
| Gateway AntiVirus | | | |
| Intrusion Prevention Service (IPS) | | | |
| Network Discovery | | | |
| Reputation Enabled Defense | | | |
| spamBlocker | | | |
| WebBlocker | | | |
| Total Security Suite | |||
| APT Blocker | | | |
| DNSWatch | | | |
| IntelligentAV | | | |
| Threat Detection and Response | | | |
M590 M690 (Rackmount)
| WatchGuard® Model | WatchGuard Firebox M390 | WatchGuard Firebox M590 | WatchGuard Firebox M690 |
|---|---|---|---|
| Ideal For | 150 Users | 600 Users | 850 Users |
| Performance | |||
| UTM (Full Scan) | 2.4 Gbps | 2.4 Gbps | 4.6 Gbps |
| Firewall (UDP 1518) | 18 Gbps | 18 Gbps | 29.7 Gbps |
| VPN (UDP 1518) | 5.2 Gbps | 5.2 Gbps | 10.0 Gbps |
| VPN (IMIX) | 1.8 Gbps | 1.8 Gbps | 3.2 Gbps |
| AntiVirus | 3.1 Gbps | 3.1 Gbps | 6.2 Gbps |
| IPS (Full Scan) | 3.3 Gbps | 3.3 Gbps | 5.8 Gbps |
| HTTPS (Full Scan) | 1.32 Gbps | 1.32 Gbps | 2.9 Gbps |
| VPN Tunnels | |||
| Branch Office VPN Tunnels | 250 | 250 | 1000 |
| Mobile VPN | 250 | 250 | 1000 |
| Hardware | |||
| Interfaces & Modules | 8x1Gb (included); Optional 4x1Gb, 4xSFP fiber, 2xSFP+ fiber; modules are not compatible with previous gen | 8x1Gb (included); Optional 4x1Gb, 4xSFP fiber, 2xSFP+ fiber; modules are not compatible with previous gen | 8x1Gb & 2xSFP+ & 2x10Gb multispeed (included); Optional 4x1Gb, 4xSFP fiber, 2xSFP+ fiber, 4x10Gb multispeed with PoE+ |
| Wireless Models | N/A | N/A | N/A |
| Networking Features | |||
| VLAN | 250 | 250 | 1000 |
| SD-WAN Dynamic Path Selection | | | |
| Supported Security Services | |||
| Support License | |||
| Access Portal* | | | |
| SD-WAN | | | |
| Stateful Firewall | | | |
| VPN | | | |
| Basic Security Suite | |||
| Application Control | | | |
| Gateway AntiVirus | | | |
| Intrusion Prevention Service (IPS) | | | |
| Network Discovery | | | |
| Reputation Enabled Defense | | | |
| spamBlocker | | | |
| WebBlocker | | | |
| Total Security Suite | |||
| APT Blocker | | | |
| DNSWatch | | | |
| IntelligentAV | | | |
| Threat Detection and Response | | | |
Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration. Max firewall throughput tested using 1518 byte UDP packets based on RFC 2544 methodology.
M4800 M5800 (RackMount)
| WatchGuard® Model | Firebox M670 |  Firebox M4800 |  Firebox M5800 |
|---|---|---|---|
| Ideal For | 850 Users | 2500 Users | 7500 Users |
| Performance | |||
| UTM (Full Scan) | 4.2 Gbps | 5.2 Gbps | 11.3 Gbps |
| Firewall (UDP 1518) | 34 Gbps | 49.6 Gbps | 87 Gbps |
| VPN (UDP 1518) | 7.6 Gbps | 16.4 Gbps | 18.8 Gbps |
| VPN (IMIX) | 2.6 Gbps | 4.8 Gbps | 5.2 Gbps |
| AntiVirus | 6.2 Gbps | 12.5 Gbps | 22 Gbps |
| IPS (Full Scan) | 5.6 Gbps | 8.1 Gbps | 12.5 Gbps |
| HTTPS (Full Scan) | 1.5 Gbps | 3 Gbps | 4.9 Gbps |
| VPN Tunnels | |||
| Branch Office VPN Tunnels | 750 | 5,000 | Unrestricted |
| Mobile VPN | 750 | 10,000 | Unrestricted |
| Hardware | |||
| Interfaces | 8x1Gb (included); Optional 8x1Gb, 8x1Gb fiber, 4x10Gb fiber | 8x1Gb (included); Optional 8x1Gb, 8x1Gb fiber, 4x10Gb fiber, 2x40Gb fiber | 8x1Gb, 4x10Gb fiber (included); Optional 8x1Gb, 8x1Gb fiber, 4x10Gb fiber, 2x40Gb fiber |
| Wireless Models | N/A | N/A | N/A |
| Networking Features | |||
| VLAN | 750 | 1,000 | Unrestricted |
| SD-WAN Dynamic Path Selection | | | |
| Supported Security Services | |||
| Support License | |||
| Access Portal* | | | |
| SD-WAN | | | |
| Stateful Firewall | | | |
| VPN | | | |
| Basic Security Suite | |||
| Application Control | | | |
| Gateway AntiVirus | | | |
| Intrusion Prevention Service (IPS) | | | |
| Network Discovery | | | |
| Reputation Enabled Defense | | | |
| spamBlocker | | | |
| WebBlocker | | | |
| Total Security Suite | |||
| APT Blocker | | | |
| DNSWatch | | | |
| IntelligentAV | | | |
| Threat Detection and Response | | | |
FireboxV
| FireboxV Small | FireboxV Medium | FireboxV Large | FireboxV XLarge | |
|---|---|---|---|---|
| Throughput and Connections | ||||
| Firewall throughput¹ | 2 Gbps | 4 Gbps | 8 Gbps | Unrestricted |
| Virtual Interfaces | 8-10 | 8-10 | 8-10 | 8-10 |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| VLAN | 50 | 300 | 750 | 1,500 |
| VPN and Authentication | ||||
| Branch Office VPN | 50 | 600 | 6,000 | 10,000 |
| Mobile VPN with SSL | 50 | 600 | 6,000 | 10,000 |
| Mobile VPN with IPSec | 50 | 600 | 6,000 | 10,000 |
| Authenticated Users | 500 | 3,000 | 6,000 | Unrestricted |
Firebox Cloud
| Firebox Cloud Small | Firebox Cloud Medium | Firebox Cloud Large | Firebox Cloud XLarge | |
|---|---|---|---|---|
| Throughput and Connections | ||||
| Firewall throughput¹ | 2 Gbps | 4 Gbps | 8 Gbps | Unrestricted |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| VPN and Authentication | ||||
| Branch Office VPN | 50 | 600 | 6,000 | 10,000 |
| Mobile VPN with SSL | 50 | 600 | 6,000 | 10,000 |
| Mobile VPN with IPSec | 50 | 600 | 6,000 | 10,000 |
| Authenticated Users | 500 | 3,000 | 6,000 | Unrestricted |
Endpoint next- generation antivirus
WatchGuard EDR
WatchGuard EDR is an innovative cybersecurity solution for computers, laptops and servers, delivered from the Cloud. It automates the prevention, detection, containment and response to any advanced threat, zero day malware, ransom- ware, phishing, in-memory exploits, and malwareless attacks, both present and future, inside and outside the corporate network
WatchGuard EPDR
WatchGuard EPDR is an innovative cybersecurity solution for computers,
laptops and servers, delivered from the Cloud. It automates the prevention,
detection, containment and response to any advanced threat, zero day
malware, ransomware, phishing, in-memory exploits, and fileless and
malwareless attacks
Multi-Factor Authentication (MFA)
Eliminate Your Company’s #1 Risk
AuthPoint Identity Security provides the security you need to protect identities, assets, accounts, and information. Let your company work confidently and worry-free with easy-to-use, cost-effective and complete multi-factor authentication and credential management solutions.
Wi-Fi 6 Experience
Powerfull Wi-Fi 6 Experience
WatchGuard’s Wi-Fi 6 access points include a complete and powerful wireless feature set delivered by a zero-touch deployment experience. Utilizing secure WPA3 encryption,. High-efficiency Wi-Fi is enabled through dedicated radio scanning, centralized management, intelligent reporting, and deep visibility into wireless ecosystems to stay focused on what matters.
What is Wi-Fi Security ?
WIPS or Wireless Intrusion Prevention System is a term from the Wi-Fi industry that refers to the prevention of Wi-Fi threats, and at WatchGuard we have taken it to the next level. Our WIPS is unlike any other competing Wi-Fi security solution on the market. WatchGuard's patented technology ensures you have the real, accurate, and automated Wi-Fi protection that your business needs.
Each WatchGuard access point (AP) has the flexibility to operate as both an access point and a dedicated WIPS security sensor protecting any 3rd party brand access points.