WatchGuard XTM 830-F & 2-Y Security

et
he
Datas
WatchGuard® XTM 8 Series
With a next-generation XTM 8 Series Firewall, your network is:
SECURE
■
Recommended for mIDSIZE businesses
WatchGuard XTM 8 Series appliances are nextgeneration firewalls (NGFWs) that deliver a new
class of performance-driven security. With up to
6.5 Gbps firewall throughput and security features
including full HTTPS inspection and VoIP support,
businesses no longer need to compromise on
security to meet increasing network demands.
Why buy a Next-Generation firewall?
WatchGuard’s NGFW products provide true linespeed security inspection on all traffic. In addition,
the NGFW line can deliver application control and
intrustion prevention; connects offices via unique
drag-and-drop VPN; connects people via SSL and
IPSec VPN; and gives businesses unparalleled
visibility into real-time and historical user, network,
and security activities.
With WatchGuard’s 8 Series NGFW, businesses
can define, enforce, and audit strong security and
acceptable use policies, resulting in increased
employee productivity and less risk to critical
intellectual property or customer data.
■
■
■
switching to a single provider
has made our internal
IT department’s work
considerably easier.”
Martin Kron
Head of IT and Central Service
Novoferm GmbH
Wide-ranging proxy protection provides robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS,
TCP/UDP.
Application Control, an essential component of true next-generation security, is an easy-to-deploy
security subscription that keeps unproductive, inappropriate, and dangerous applications off-limits.
Intrusion Prevention Service, another fundamental element of next-generation protection, is
available via subscription to stop attacks that comply with standard protocols but carry malicious
content.
FAST and EFFICIENT
■
Up to 6.5 Gbps firewall throughput and up to 1.7 Gbps VPN throughput keep data moving.
■
Ten 1GgE ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
■
Active/active high availability with load balancing ensures maximum network uptime.
■
Scriptable CLI supports interoperability and allows easy integration into existing infrastructure.
■
■
■
■
“We are extremely
satisfied with
WatchGuard...
Content inspection at the application layer recognizes and blocks threats that stateful packet
firewalls cannot detect.
Interactive, real-time monitoring and reporting – at no additional charge – give an unobstructed
view into network security activity so you can take immediate preventive or corrective actions.
Intuitive management console centrally manages all security functions.
Role-based access control (RBAC) allows lead administrators to create custom roles for granular
control.
Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.
FLEXIBLE
■
■
■
WAN and VPN failover provide redundancy for increased reliability.
M
ultiple VPN choices deliver flexibility in remote access. Includes IPSec, SSL, and support for iOS
devices such as iPhone, iPad, and iPod touch.
To maximize port utilization, any of the 10 ports can be configured as Trusted, External, or DMZ.
SCALABLE
■
■
Add powerful security subscriptions to block spam, control dangerous and inappropriate
application usage and web surfing, prevent network intrusions, and stop viruses, spyware, and
other malware at the gateway.
Upgrade to a higher model within the line for more performance and capacity with a simple license key.
PREPARED FOR TOMORROW’S CHALLENGES
■
Multi-layered, interlocking security protects the network while throughput remains high. No need
to compromise protection for strong performance or vice versa.
■
Advanced networking features ensure reliability and the flexibility to meet changing business requirements.
■
Secure remote connectivity keeps mobile workforce online and productive.
■
Monitoring and reporting tools, included at no extra cost, support industry and regulatory
compliance, with drill-down functions that make it easy to pinpoint specific activities.
WatchGuard® Technologies, Inc.
XTM 8 Series
XTM 810
820
830/830-F
4.5 Gbps
5.5 Gbps
6.5 Gbps
VPN throughput*
1 Gbps
1.4 Gbps
1.7 Gbps
AV throughput*
2 Gbps
2.1 Gbps
2.3 Gbps
IPS throughput*
2.1 Gbps
2.4 Gbps
2.7 Gbps
Throughput & Connections
Firewall throughput*
UTM throughput*
1.3 Gbps
1.3 Gbps
1.4 Gbps
Interfaces 10/100/1000
10 copper
10 copper
10 copper**
1 Serial
2 USB
1 Serial
2 USB
1 Serial
2 USB
Unrestricted
Unrestricted
Unrestricted
Concurrent connections
(bi-directional)
500,000
750,000
1,000,000
New connections per second
38,000
38,000
38,000
200
300
400
I/O interfaces
Nodes supported (LAN IPs)
VLANs
bridging, tagging, routed mode
4,000
Authenticated users limit
VPN Tunnels
1,000
Branch Office VPN
600/2,000
Mobile VPN IPSec (incl/max)
6,000
2,000
700/6,000
1,000
Mobile VPN SSL
Security Features
5,000
6,000
800/8,000
4,000
6,000
Powered by Fireware® XTM Pro
Every WatchGuard XTM 8 Series appliance ships with the Pro version
of the Fireware XTM operating system, providing the advanced
networking features that demanding networks require.
Networking Features
Fireware XTM Pro
Routing
Static
Dynamic (BGP4, OSPF, RIP v1/v2)
Policy-based
High Availability
Active/passive, active/active with load balancing
NAT
Static, dynamic, 1:1, IPSec traversal, policy-based
Virtual IP for server load balancing
Port Independence, Multi-WAN failover
Transparent/drop-in mode,
Multi-WAN load balancing, Server load balancing
Other Features
Dimensions and Power
Product Dimensions
16.0” x 16.9” x 1.75” (40.7 x 43.0 x 4.4 cm)
Shipping Dimensions
21.26” x 22.25” x 5.12” (54.0 x 56.6 x 13.0 cm)
Shipping Weight
19.5 lbs (8.85 Kg)
AC Power
100-240 VAC Autosensing
Power Consumption
U.S. 215 Watts (max), 734 BTU/hr (max)
Rack Mountable
1U rack mount kit included
Firewall
Stateful packet inspection, deep packet inspection,
proxy firewall
HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Operating
Storage
Application proxies
Temperature
Threat protection
Blocks spyware, DoS attacks, fragmented packets,
malformed packets, blended threats, and more
32° F to 113° F
0° C to 45° C
-40° F to 158° F
-40° C to 70° C
Relative Humidity
VoIP
H.323, SIP, call setup and session security
Security subscriptions
Application Control, Intrusion Prevention Service,
Gateway AntiVirus, Reputation Enabled Defense,
WebBlocker, spamBlocker
10% to 85%
non-condensing
0 to 9,843 ft at 95° F
(3,000 m at 35° C)
10% to 95%
non-condensing
0 to 15,000 ft at 95° F
(4,570 m at 35° C )
VPN & Authentication
Encryption
DES, 3DES, AES 128-, 192-, 256-bit
IPSec
SHA-1, MD5, IKE pre-shared key, 3rd party cert import
VPN failover
Yes
SSL
Thin client, Web exchange
PPTP
Server and Passthrough
Single sign-on
Transparent Active Directory Authentication
XAUTH
RADIUS, LDAP, Secure LDAP, Windows Active Directory
Other user authentication
VASCO, RSA SecurID, web-based, local, Microsoft
Terminal Services and Citrix
Management
Environment
Altitude
MTBF
50,174 hours @ 77° F (25° C)
Management platform
WatchGuard System Manager (WSM) v11 or higher
Expert Guidance and Support
Alarms and notifications
SNMP v2/v3, Email, Management System Alert
Server support
Logging, Reporting, Quarantine, WebBlocker, Management
Web UI
Supports Windows, Mac, Linux, OS
Command line interface
Includes direct connect and scripting
An initial subscription to LiveSecurity® Service is included with every
XTM 8 Series appliance. LiveSecurity provides hardware warranty
with advance hardware replacement, 12/5 or 24/7 technical support,
software updates, and concise threat alerts.
Standard Networking
QoS
IP address assignment
Certifications
8 priority queues, DiffServ, modified strict queuing
Static, DHCP (server, client, relay), PPPoE, DynDNS
Safety
ICSA Firewall, ICSA IPSec VPN, CC EAL4+
Review Pending: FIPS 140-2
NRTL/C, CB
Network
IPv6 Ready Gold (routing)
Control of hazardous substances
WEEE, RoHS, REACH
Security
Next-Generation security comes bundled
Protect your network with the next generation of security technology.
The 8 Series NGFW Bundle includes choice of XTM 8 Series appliance,
plus Application Control, Intrusion Prevention Service,
and LiveSecurity Plus with 24/7 tech support. Or choose
the XTM Security Bundle, with appliance, all six security
subscriptions, and LiveSecurity Plus. An excellent value
when you buy together and save.
*Throughput rates will vary based on environment and configuration. Contact your WatchGuard reseller or call WatchGuard directly (1.800.734.9905) for help determining the right model for your network.
**XTM 830 appliances are available with 6 copper and 4 fiber 10/100/1000 interfaces under the model number XTM 830-F.
U.S. SALES 1.800.734.9905
International Sales +1.206.613.0895www.watchguard.com
No express or implied warranties are provided for herein. All specifications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. © 2012 WatchGuard Technologies, Inc. All rights reserved. WatchGuard,
the WatchGuard logo, Fireware, and LiveSecurity are registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners. Part No. WGCE66650_080212