WatchGuard® Products at a glance X10e* Firebox® X Edge X20e* X55e* X550e Firewall throughput** 100 Mbps 100 Mbps 100 Mbps 390 Mbps VPN throughput** 35 Mbps 35 Mbps 35 Mbps 200 Mbps Interfaces 10/100 6 6 6 – Interfaces 10/100/1000 – – – Serial ports 1 1 15 (upgrade to 20) Concurrent sessions 6,000 VLAN support 20/50† Security zones Firebox® X Core™ X750e XTM 830 XTM 10 XTM 1050 4 Gbps 5 Gbps 10 Gbps 1.4 Gbps 1.7 Gbps 2 Gbps – – – 10 10 10 12 (optional - 4 fiber) 1 1 1 1 1 unrestricted unrestricted unrestricted unrestricted unrestricted unrestricted 750,000 1,000,000 500,000 750,000 1,000,000 2,500,000 200 200 400 200 300 400 500 8 8 8 8 10 10 10 12 100/100 600/600 750/750 750/750 750/750 1,000/1,000 2,000/2,000 6,000/6,000 7,000/7,000 X1250e X5500e 1 Gbps 1.5 Gbps 2.0+ Gbps 260 Mbps 260 Mbps 400 Mbps – – – 4 8 8 1 1 1 30 unrestricted unrestricted 8,000 10,000 25,000 20/50† 50 2 2 5/5 15/15 Firebox® X Peak™ X6500e X8500e XTM 810 2.3 Gbps 2.3 Gbps 3 Gbps 600 Mbps 600 Mbps 1 Gbps – – – 8 8 8 (optional - 4 fiber)*** 1 1 1 unrestricted unrestricted unrestricted 75,000 200,000 500,000 75 75 75 2 4 8 25/25 35/45 XTM 8 XTM 820 Throughput and Connections Nodes supported (LAN IPs) VPN Tunnels (incl/max) Branch Office VPN Mobile VPN IPSec 1/11 5/25 5/55 25/75 50/100 400/400 600/600 600/600 600/600 600/2,000 700/6,000 800/8,000 15,000/15,000 Mobile VPN SSL 1/11† 1/25† 55/55 1/75† 1/300† 1/500† 1,000/1,000 4,000/4,000 6,000/6,000 1,000/1,000 4,000/4,000 6,000/6,000 15,000/15,000 Security Features Standard features Stateful packet firewall, deep application inspection, application proxies on HTTP, HTTPS, SMTP, FTP, DNS, TCP, and POP3 / Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats and more / Protocol anomaly detection, behavior analysis, pattern matching / Static and dynamic blocked sources list / Time-based rules / Instant messaging and P2P allow/deny / VoIP: H.323 and SIP, call setup and session security Security Subscriptions WebBlocker URL and web content filtering with HTTP and HTTPS inspection / spamBlocker with virus outbreak detection and full-featured spam quarantine / Gateway AntiVirus with anti-spyware and virus quarantine / Intrusion Prevention Service for protocol and application-based attacks / Renewable in 1-year, 2-year, and 3-year subscriptions User Authentication Transparent Active Directory Authentication (single sign-on) / XAUTH for Radius, LDAP, Windows Active Directory / VASCO / RSA SecurID® / Web-based, local Wireless Security Wireless LAN 802.11b/g – available with the wireless versions of the Firebox X Edge models* – – – – – – – – – – Wireless WAN Available with purchase and deployment of WatchGuard® 3G Extend wireless bridge accessory / Supports over 50 cellular modem cards and ISP plan options / USB model includes CE certification – – – – – – – – – – optional optional optional included included included included included included included Advanced OS Fireware® XTM Pro optional optional included Networking Features Standard NAT: static, dynamic, 1:1, IPSec traversal, policy-based PAT / Traffic shaping and QoS: 8 priority queues, DiffServ, modified strict queuing / IP address assignment: static, DynDNS, PPPoE, DHCP (server, client, relay) / Port independence / VLAN support / VPN failover / WAN failover+ / Multi-WAN failover + / Transparent/drop-in mode Advanced OS WAN failover / Multi-WAN failover / Multi-WAN load balancing / Policy-based routing Management Software All WatchGuard XTM appliances and all Firebox X Edge, Core, and Peak e-Series appliances can be managed with the user’s choice of: command line interface with direct connects and scripting, web UI for access to management tools from anywhere, and WatchGuard System Manager (WSM) / WSM provides interactive real-time monitoring and logging for network-wide system status at a glance / Includes drag-and-drop VPN creation and rich historical reporting Logging and Reporting Multi-appliance log aggregation / HTML and PDF reports / SQL log database / Encrypted log channel / SNMP v2 & v3 / Syslog High availability (active/passive, and active/active for clustering) / Dynamic routing (OBG, OSPF, RIPv1,v2) / Policy-based routing / Multi-WAN load sharing / Multi-WAN load balancing / Virtual IP for server load balancing Support and Maintenance LiveSecurity® Service Firebox X appliances have initial 90-day or 1-year LiveSecurity subscription; renewable in 1-year, 2-year, and 3-year subscriptions Provides hardware warranty with advance hardware replacement, software updates, technical support with targeted 4-hour response time, and threat alerts – Gold-level service available for 24/7 support with 1-hour response time WatchGuard XTM appliances have initial 1-year , 2-year, and 3-year LiveSecurity subscriptions available – Gold-level service available for 24/7 support with 1-hour response time *All Edge appliances are available in a wireless version, under the model numbers X10e-W, X20e-W, and X55e-W **Throughput rates will vary depending on environment and configuration ***Firebox X Peak 8500-e is also available with fiber interface support under model number X8500e-F + †Available with upgrade to Fireware XTM Pro advanced OS X10e, X10e-W, X20e, and X20e-W models require upgrade to Fireware XTM Pro ©2009 WatchGuard Technologies, Inc. WatchGuard Security Appliances When companies need proven firewall and network security solutions, they turn to WatchGuard. We provide excellent reliability, service, support, and innovation for our customers, with a range of products to suit specific business requirements. The WatchGuard® Story Since 1996, WatchGuard Technologies has provided more than half a million security appliances to hundreds of thousands of customers worldwide. The award-winning WatchGuard Firebox X family of unified threat management (UTM) security appliances delivers the industry’s WatchGuard® XTM 1050 Headquarters/Data Centers - up to 10,000 users Firebox® X Core™ Small & Mid-Size Regional Offices - up to 300 users The XTM 1050 is a high-speed network security appliance that delivers enterprise-grade performance and protection at an affordable price. 10 Gbps firewall throughput and 12 Gigabit Ethernet ports combine with advanced networking features including clustering and high availability (active/ active) to handle high-volume network traffic securely. Includes a suite of flexible management tools that allows IT administrators to manage security through an intuitive centralized console, a command line interface, and web UI. Firebox X Core UTM solutions are ideal for growing businesses. Easily upgrade to a higher model in the line for more capacity and performance, move up to an advanced OS, and add powerful security subscriptions with simple license keys. WatchGuard® XTM Series 8 Main Office/Headquarters - up to 5,000 users and expert guidance and support. Our newest family of products – WatchGuard® XTM – provides fully extensible, enterprise-grade network security at an affordable price, while our WatchGuard® SSL appliances allow secure remote access from anywhere, anytime. All products are backed by LiveSecurity® Service, a high-value support WatchGuard® SSL 100 Anytime, Anywhere Access Appliances The WatchGuard® SSL 100 is an affordable, easy-to-use secure remote access appliance that provides reliable client and clientless connectivity to corporate data and resources, so users stay productive from anywhere, anytime. XTM 8 Series appliances are part of our growing family of WatchGuard XTM solutions that deliver a new class of performance-driven security. With up to 5 Gbps firewall throughput and 10 Gigabit Ethernet ports, these solutions provide flexible management tools and advanced networking features for maximum efficiency and network uptime. Model upgradeability ensures the best ROI in the industry. Firebox® X Edge Small & Branch Offices, Wireless Hotspots - up to 55 users Firebox® X Peak™ Main Office/Headquarters - up to 1,000 users Firebox X Edge is a stand-alone firewall and VPN security appliance for small businesses, remote offices, and telecommuters. Available in both wired and wireless versions, it’s the ideal endpoint solution for connecting a secure VPN tunnel back to a WatchGuard XTM or Firebox X appliance. Firebox X Peak is the high performer of our Firebox X family of appliances, with up to 2.3 Gbps firewall throughput and eight Gigabit Ethernet ports. It combines strong security, efficient management tools, and advanced networking features for the threat protection and reliability a mid-size network requires. best combination of strong, multi-layered security, high performance, 3G Extend Cellular Connectivity for WatchGuard Appliances It’s easy to add 3G wireless connectivity to a Firebox X Edge appliance to maximize equipment uptime and ROI with this handy accessory. Address: 505 Fifth Avenue South, Suite 500, Seattle, WA 98104 • Web: www.watchguard.com • U.S. Sales: 1.800.734.9905 • International Sales: 1.206.613.0895 No express or implied warranties are provided for herein. All specifications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. ®2009 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, Firebox, Fireware, Core, Peak, and LiveSecurity are either trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners. Part No. WGCE66606_120209 and maintenance program. The WatchGuard commitment to performance and value gives our customers enterprise-grade protection in a cost-effective, extensible solution. Boost Protection in Critical Attack Areas Easy to Upgrade WatchGuard firewalls are built on robust “Layer 7” content inspection technology, which is fundamentally more secure than stateful packet filtering. Integrated security subscriptions deliver even more layers of protection, without requiring additional hardware purchases. Subscriptions include: • spamBlocker with virus outbreak detection • WebBlocker for URL filtering on HTTP and HTTPS • Gateway AntiVirus with anti-spyware • Intrusion Prevention Service to block attacks that comply with standard protocols but carry malicious content As business needs grow, it’s easy to protect your security investment. Add new capabilities to enhance protection or upgrade to a higher model in the line for more performance or capacity using a simple downloadable license key. Buy the Bundle and Get the Works The easiest, most cost-effective way to have complete network protection is with the UTM Bundle. An exceptional value, the Bundle includes: • Choice of WatchGuard XTM or Firebox X appliance • Full suite of security subscriptions* • LiveSecurity Service* for support and maintenance * One-year, two-year, and three-year subscription packages available Expert Guidance and Support LiveSecurity Service from WatchGuard provides technical support with a targeted four-hour response time, and a hardware warranty that covers advance hardware replacement. It includes free software updates so code is always up to date. Concise threat alerts are delivered with clear instructions on how to reduce or eliminate new threats and link directly to vendor patches to save time. Ground-breaking security education tools include videos and podcasts. No other security vendor does as much to educate customers in the role of security-savvy network administrator. ©2009 WatchGuard Technologies, Inc.