XTM 850, 860, 870, 870-F

WatchGuard

XTM 800 Series

Hardware Guide

SL8AE14

Copyright and Patent Information

Copyright© 1998–2013 WatchGuard Technologies, Inc. All rights reserved.

WatchGuard, the WatchGuard logo, LiveSecurity, and any other mark listed as a trademark in the “Terms of Use” portion of the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies,

Inc. and/or its subsidiaries in the United States and/or other countries. All other trademarks are the property of their respective owners.

Printed in the United States of America.

Part Number: 275-4225-001 Rev B

Revised: August 29, 2013

U.S. Patent Nos. 6,493,752; 6,597,661; D473,879. Other Patents Pending.

Complete copyright, trademark, patent, and licensing information can be found in the WatchGuard product documentation. You can find this document online at: http://www.watchguard.com/help/documentation/

Notice to Users

Information in this guide is subject to change without notice. Updates to this guide are posted at: http://www.watchguard.com/help/documentation/hardware.asp

Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc.

ABOUT WATCHGUARD

WatchGuard offers affordable, all-in-one network and content security solutions that provide defense-in-depth and help meet regulatory compliance requirements. The

WatchGuard XTM line combines firewall, VPN, GAV, IPS, spam blocking and URL filtering to protect your network from spam, viruses, malware, and intrusions. The new

XCS line offers email and web content security combined with data loss prevention.

WatchGuard extensible solutions scale to offer right-sized security ranging from small businesses to enterprises with 10,000+ employees. WatchGuard builds simple, reliable, and robust security appliances featuring fast implementation and comprehensive management and reporting tools. Enterprises throughout the world rely on our signature red boxes to maximize security without sacrificing efficiency and productivity.

For more information, please call 206.613.6600 or visit www.watchguard.com

.

ADDRESS

505 Fifth Avenue South

Suite 500

Seattle, WA 98104

SUPPORT

www.watchguard.com/support

U.S. and Canada +877.232.3531

All Other Countries +1.206.521.3575

SALES

U.S. and Canada +1.800.734.9905

All Other Countries +1.206.613.0895

ii WatchGuard XTM 800 Series

Hardware Specifications

WatchGuard® XTM security appliances deliver unparalleled unified threat management, superior performance, ease of use, and value for your growing network. Our security subscriptions give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-based exploits, and blended threats.

From firewall and VPN protection to secure remote access, WatchGuard XTM devices support a broad range of network environments.

This guide introduces the XTM 800 Series, a series of RoHS-compliant (lead-free) hardware products offered by WatchGuard.

WatchGuard’s XTM 800 Series devices use dynamic, multi-layered security to proactively protect your network. The XTM 800 Series has the reliability, redundancy, traffic management, and interface density that demanding, high-speed networks require.

You can upgrade an XTM 800 Series device to a higher model in the XTM 800 Series line for more capacity and performance with a simple software license key.

Fireware XTM OS

XTM 800 Series devices support WatchGuard’s next generation UTM OS—Fireware® XTM. Each XTM 800 Series device includes Fireware XTM with a Pro upgrade and delivers exceptional protection against today's sophisticated threats to make sure that your business stays connected. Fireware XTM with a Pro upgrade offers additional advanced networking capabilities. For more information on the features of the Fireware XTM

OS, see the current Fireware XTM WatchGuard System Manager Help or Fireware XTM Web UI Help .

Hardware Guide 1

2

Hardware Specifications

Package Contents

 XTM 800 Series appliance

 Quick Start Guide

 Hardware warranty card

 LiveSecurity® Service activation card

 1 straight-through Ethernet cable (green)

 1 cross-over Ethernet cable (red)

 1 serial cable with an RJ-45 connector (console cable)

 1 power cord

 4 rubber pads for the bottom of the device

 1 rack-mounting kit

About Your Hardware

Hardware Specifications

Processor

Memory: Flash

Memory: RAM

Hard Drive

Power supply

Dimensions

Weight

XTM 800 Series

Intel Xeon CPU

2 GB

16 GB

250 GB

100–240 VAC, 1.2A MAX, 50/60 Hz, Autosensing

D=16.5” (42 cm) total depth; includes front handles

D=15.75” (40 cm) rack mount depth; does not include front handles

W=19” (48.2 cm) with rack mount ears

W=17” (43.18 cm) without rack mount ears

H=1.75” (4.45 cm)

15.0 lbs (6.8 Kg) — XTM 850, 860, 870 with rack mount ears

15.4 lbs (7.0 Kg) — XTM 870-F with rack mount ears

WatchGuard XTM 800 Series

Hardware Specifications

Interface Specifications

 14x 1000Base-T, 100Base-TX, or 10 Base-T (10/100/1000Mbps), RJ45 connector Network interfaces

XTM 850, 860, 870

Network interfaces

XTM 870-F

I/O interfaces

 6x 1000Base-T, 100Base-TX, or 10 Base-T (10/100/1000Mbps), RJ45 connector

 8x 1G SFP fiber ports o

Duplex LC connectors o o o

1000Base-SX

850 nm multimode

Avago AFBR-5710PZ SFP modules included

 2 USB

 1 RJ45 Serial

Environmental Requirements

To safely install your XTM 800 Series device, we recommend that you:

 Install it in a network rack

 Put it in a secure area, such as a locked room, to keep the device from people who do not have permission to use it

 Connect it to a conditioned power supply to prevent damage from sudden power changes

Other environmental requirements:

Operating temperature

Operating relative humidity

Non-operating temperature

Non-operating relative humidity

0 – 40°C (32 – 104°F)

10% - 85% Non-condensing

–40 – 70°C (–40 – 158°F)

5% – 90% Non-condensing

Hardware Guide 3

Hardware Specifications

Hardware Description

Front View

The front of the device.

A close-up of the front right side of the device.

4

LCD indicator panel

Device status information appears on the LCD screen. Press the buttons below the screen to change the information that appears on the screen.

LCD console buttons

Press the LCD console buttons to see status information and start recovery procedures. To boot the device in safe mode, press and hold the down arrow button when you power on the device.

For detailed information about the LCD indicator panel and the LCD console buttons, see “Use the

LCD Interface” on page 10.

Power ( )

When the device is powered on, the power indicator is green.

Arm/Disarm

When the device is armed, this indicator is green. When the device is disarmed, this indicator is red.

Storage ( )

When there is activity on the hard drive or the compact flash, this indicator is yellow.

Serial port

An RJ45 connector for the serial interface. is located to the right of the LCD screen. You can connect to this serial interface to log in to the Fireware XTM command line interface.

For more information about the command line interface, see the current Fireware XTM Command Line

Interface Reference.

Dual USB interfaces

Connect a USB storage device to use for USB backup and restore, or to store a support snapshot.

For more information about USB functions, see the current WatchGuard System Manager Help or

Fireware XTM Web UI Help .

WatchGuard XTM 800 Series

Hardware Specifications

All network interfaces are located on the front of the device.

From the left, the indicators and connectors are:

Network interfaces — XTM 850, 860, 870

XTM 800 Series devices have a total of 14 network interfaces. For the XTM 850, 860, and 870, all network interfaces have standard RJ45 connectors and are labeled 0, 1,2, 3…13.

Network interfaces — XTM 870-F

The six interfaces on the left have standard RJ45 connectors and are labeled 1, 2, 3, 4, 5, 6. The eight network interfaces on the right have fiber connectors and are labeled 6, 7, 8, ... 13.

Indicators for RJ45 interfaces

At the top of each RJ45 interface, there are two indicators. The indicator at the left of the interface is the activity indicator for that interface. The indicator at the right shows the connection speed for that interface.

Indicator

Activity (upper left)

Connection Speed

(upper right)

Indicator color

Yellow

Not lit

Blinks

(speed of blink increases as the data flow increases)

Not lit

Interface Status

Power on, link is established

Power off, no connections

Data sent and received

Operates at 10 Mbps

Green

Yellow

Operates at 100 Mbps

Operates at 1000 Mbps

Hardware Guide 5

Hardware Specifications

Network interfaces on XTM 870-F:

Activity indicator on fiber interfaces

On the XTM 870-F, interfaces 6 – 13 are fiber interfaces. The activity indicators are arranged in pairs between the fiber interfaces. For each pair of indicators, the top indicator shows the status of the interface to the left, and the bottom indicator shows the status of the interface to the right

9

10

11

12

13

Interface

6

7

8

Indicator Location

Top indicator between interfaces 6 and 8

Top indicator between interfaces 7 and 9

Bottom indicator between interfaces 6 and 8

Bottom indicator between interfaces 7 and 9

Top indicator between interfaces 10 and 12

Top indicator between interfaces 11and 13

Bottom indicator between interfaces 10 and 12

Bottom indicator between interfaces 11 and 13

Indicator Color

Yellow

Blinks

Indicator Behavior

Power on, link is established

Data sent and received

6 WatchGuard XTM 800 Series

Rear View

The AC receptacle, power switch, and fans are located on the rear of the device.

Hardware Specifications

Fans

The fans decrease the internal temperature of the device. The fans start at maximum RPM when the device is powered on. The device continually adjusts the fan speed based on the external temperature and device CPU load.

AC receptacle

Accepts a detachable AC power cord supplied with the device. The power supply for the device is a

WatchGuard standard auto-sensing AC power supply.

Power switch

Controls the power supplied to the device.

Caution

You must always disconnect the power supply before you remove the cover of the XTM 800

Series device.

Rack Mount Instructions

Each WatchGuard XTM 800 Series device is shipped with a rack mount kit. When you install the XTM 800 Series device in a rack, make sure you consider:

Elevated Operating Ambient Temperature

If you install the device in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Make sure the ambient temperature of the rack environment is within the certified operating range specified in this Hardware Guide.

Reduced Air Flow

When you install the XTM 800 Series device in a rack, make sure that the amount of air flow required for safe operation of the equipment is not compromised.

Mechanical Loading

When you mount the XTM 800 Series device in the rack, avoid hazardous conditions caused by uneven mechanical loading.

Circuit Overloading

Make sure you connect the XTM 800 Series device to the power supply circuit to make sure there is no overloading of the circuits, and no impact on overcurrent protection and supply wiring.

Reliable Grounding

Make sure all rack-mounted equipment is correctly grounded. For example, use power strips instead of direct connections to the branch circuit.

Hardware Guide 7

8

Hardware Specifications

Safety Notices

All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Read these instructions carefully before you operate the product, and refer to them as needed for continued safe operation of your product.

Product Safety Certification

The WatchGuard product is safety certified for these standards: o o o

CAN/CSA C22.2 No.60950-1-07

IEC 60950-1, Second Edition

UL 60950-1, Second Edition

Safety Warning

o o o o o o

Do not place objects on the power cord.

Do not obstruct the ventilation openings. These openings prevent overheating of the XTM device.

Never push objects of any kind into slots or openings on this equipment. If you make contact with a voltage point or short out a part, it can result in fire or electrical shock.

If the equipment is supplied with a three-conductor AC power cable, the power cable must be plugged in to an approved three-contact electrical outlet with the grounding wire connected to an electrical ground (safety ground) at the power outlet.

When you remove or install an appliance, follow the general installation safety instructions provided in this Hardware Guide to avoid injury or damage to the device.

The lithium battery used in the security appliance may not be replaced by the user. Return the appliance to a WatchGuard authorized service center for replacement with the same or equivalent type recommended by the manufacturer. If, for any reason, the battery or security appliance must be disposed of, do so following the battery manufacturer’s instructions.

WatchGuard XTM 800 Series

Hardware Specifications

Sicherheitshinweise

Alle WatchGuard Produkte wurden entwickelt und getestet um die strikten Sicherheitsrichtlinien zu erfüllen.

Diese Richtlinien beinhalten Produktsicherheit Freigaben und andere weltweite Sicherheitsstandards.

Vor Inbetriebnahme des Produktes lesen Sie die Anleitung sorgfältig durch und bei Bedarf beziehen Sie sich auf sie für einen dauerhaft sicheren Betrieb Ihres Produktes.

Produktsicherheit und Zertifizierung

Das WatchGuard Produkt ist für folgende Normen Sicherheitszertifiziert: o o o

CAN/CSA C22.2 No.60950-1-07

IEC 60950-1, Second Edition

UL 60950-1, Second Edition

Sicherheitswarnung

o o o o o o

Legen Sie keine Gegenstände auf das Netzkabel.

Sorgen Sie dafür, dass die Öffnungen der Ventilation zu keinem Zeitpunkt verschlossen, verstopft oder anderweitig blockiert sind. Die Ventilation verhindert ein Überhitzen des XTM

Gerätes.

Stecken Sie niemals Gegenstände irgendwelcher Art in Schlitze oder Öffnungen des Gerätes.

Wenn Sie Kontakt mit einem spannungsführenden Punkt oder ein Bauteil kurzschließen, kann es zu einem Brand oder elektrischen Schlag führen.

Falls dieses Gerät mit einem Schutzkontaktnetzkabel ausgeliefert wird, verwenden Sie ausschließlich nur dieses an einer dafür vorgesehenen Netzsteckdose.

Um Verletzungen oder Schäden am Gerät zu vermeiden, befolgen Sie vor dem Entfernen oder

Installieren des Gerätes die im Hardware Guide zur Verfügung gestellten allgemeinen

Installations- und Sicherheitshinweise.

Die in dem Gerät verwendete Lithium-Batterie kann nicht vom Verbraucher getauscht werden.

Bei Bedarf senden Sie das Gerät an einen WatchGuard Autorisierten Service-Center, um diesen

Tausch mit einer vom Hersteller empfohlenen gleichen oder eines gleichwertigen Typs durchführen zu lassen. Entsorgen Sie die Batterie, bzw. das Gerät gemäß Ihren örtlichen

Entsorgungsbestimmungen.

Hardware Guide 9

Hardware Specifications

Use the LCD Interface

You can use the LCD interface and buttons for different operations.

The XTM 800 Series device can operate in three modes:

Normal Mode

This is the normal operating mode for the device. The XTM 800 Series device boots from the Fireware

XTM OS and operates with the rules set in the configuration file you have saved to the device.

Safe Mode

You can use safe mode to get access to an XTM 800 Series device when you cannot connect to the device in normal mode. You can also use safe mode to reset device passphrases when you do not know or have forgotten them. To recover the device when you start it in safe mode, you must use the

WSM Quick Setup Wizard or the Web Setup Wizard.

You must start the XTM 800 Series device in safe mode to use the Quick Setup Wizards. In safe mode, the device runs Fireware XTM and is configured with factory-default IP addresses. When you put the device in safe mode, the license files and certificates are saved. You can then use the saved files if you reconfigure a device with one of the setup wizards.

To start an XTM 800 Series device in safe mode, press and hold the down arrow button on the device front panel when you power on the device. Hold down the button until “Safe Mode Starting” appears on the LCD screen. When the device is in safe mode, the model number followed by the word “Safe” appears on the LCD screen and the factory default IP address for Eth1 is 10.0.1.1/24.

Recovery Mode

You can start your WatchGuard XTM device in recovery mode if you want the WSM Quick Setup

Wizard to force a Fireware XTM v11.x OS installation regardless of the version that is currently installed. When you start the device in recovery mode, the Quick Setup Wizard installs a new OS image and removes all existing configuration settings and feature keys.

To start an XTM 800 Series device in recovery mode, press and hold the up arrow button on the device front panel when you power on the device. Hold down the button until “Recovery Mode starting” appears on the LCD screen. In recovery mode, the Eth1 interface uses the factory default IP address

10.0.1.1/24, and the device is ready to be discovered by the WSM Quick Setup Wizard.

For more information about how to use safe mode and recovery mode, see the WatchGuard System Manager

Help or User Guide .

10 WatchGuard XTM 800 Series

Hardware Specifications

LCD Keypad Button Control

Below the LCD screen, there are four arrow buttons.

Up Arrow

Press this button to increase the value of a selected item, or move up in a group menu.

Down Arrow

Press this button to decrease the value of a selected item, or move down in a group menu.

Left Arrow

This is the “selection” or “Enter” button. Press it to confirm your menu selections and select different options.

Right Arrow

Press this button to move between fields in the LCD display. You can use it like the “TAB” key in a

Windows dialog box.

Hardware Guide 11

Hardware Specifications

Use the LCD Interface in Normal Mode

The XTM 800 Series device automatically boots in normal mode, unless you specifically put it in safe mode. To operate, the device uses the installed Fireware XTM OS and the rules in the configuration file you have saved to the device.

You can use the four arrow buttons to see information about the device on the LCD screen. In normal mode, you use the buttons to navigate the hierarchical LCD interface menu.

In normal mode, the LCD interface menu includes these items:

Hardware Monitor

XTM device model number

XTM device serial number

CPU temperature

CPU temperature and system temperature

CPU fan status

Case cooling fan speeds for the four device fans

Voltage

CPU core voltage, the battery voltage, and the 3.3V power supply voltage

Configuration Information

IP addresses and subnet masks assigned to each interface on the device

Default gateway

Appliance Software Information

OS type

Fireware XTM build number

Uptime

Time interval since the device was last restarted

Time interval since a configuration was saved to the device

Load

Load average, shows the average system load for the past 1, 5, and 15 minutes

Memory usage

Current memory use on the XTM 800 Series device

To navigate the LCD interface menu:

 To move forward through the list of categories, press the Right Arrow button.

 To move up and down in the menu and see information in a category, press the Up Arrow and Down

Arrow buttons.

To stop the auto-cycle of the LCD screen, press any button.

12 WatchGuard XTM 800 Series

Hardware Specifications

Example

To see the CPU temperature of the XTM 800 Series device on your LCD screen:

1. Press the Right Arrow button to scroll through options until Hardware Monitor appears.

2. Press the Down Arrow button to see the options below that menu item.

3. Press the Right Arrow button to scroll through the items in the Hardware Monitor menu until

CPU temperature appears.

4. Press the Up Arrow button to return to the main category level.

Hardware Guide 13

Hardware Specifications

14 WatchGuard XTM 800 Series

Legal and Regulatory Information

Limited Hardware Warranty

This Limited Hardware Warranty (the “Warranty”) applies to the enclosed hardware product, not including any associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the “Product”). BY USING

THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. (“WatchGuard”) and you agree as set forth below or on the reverse side of this card, as applicable:

1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the "Warranty Period"):

(a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specifications.

This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other than

WatchGuard except for the replacement or inclusion of specified components authorized in, and performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed by force majeure events, accidents, power spikes or similar events, or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof.

2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above, WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any

Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any software, firmware, information or data contained in, stored on, or integrated with any returned Products.

3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND YOUR REMEDIES,

SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR, AND YOU HEREBY WAIVE,

DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD AND ALL

OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW

OR OTHERWISE, WITH RESPECT TO ANY NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT

LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED

WARRANTY ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF

NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY,

RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR

IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY, AND ANY

Hardware Guide 15

Legal and Regulatory Information

OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO, OR CAUSED BY OR CONTRIBUTED TO BY,

THE PRODUCT).

4. LIMITATION AND LIABILITY. WATCHGUARD'S LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY),

TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY)

WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE PRICE PAID BY YOU FOR SUCH PRODUCT.

THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE

LIABLE TO YOU OR ANY THIRD PARTY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING

ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER

OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS

OF PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR

INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.

5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington, U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on Contracts for the

International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or use of the product or associated documentation to any country to which such transfer would be prohibited by the U.S.

Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product, and supersedes any prior purchase order, communications, advertising or representations concerning the Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY

AN ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS AND

WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF OF THE ENTITY

AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL POWER, CORPORATE OR

OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS UNDER THE WARRANTY AND; (C) THE

WARRANTY AND THE PERFORMANCE OF THE ENTITY'S OBLIGATIONS UNDER THE WARRANTY DO NOT VIOLATE ANY

THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY. No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard.

16 WatchGuard XTM 800 Series

Declaration of Conformity

Legal and Regulatory Information

Hardware Guide 17

Legal and Regulatory Information

FCC Certification

This device has been tested and found to comply with limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. Operation is subject to the following two conditions:

This device may not cause harmful interference.

This device must accept any interference received, including interference that may cause undesired operation.

CE Notice

The CE symbol on your WatchGuard Technologies equipment indicates that it is in compliance with the

Electromagnetic Compatibility (EMC) directive and the Low Voltage Directive (LVD) of the European

Union (EU).

Industry Canada

This Class A digital apparatus meets all requirements of the Canadian Interference-Causing Equipment

Regulations.

Cet appareil numerique de la classe A respecte toutes les exigences du Reglement sur le materiel broulleur du

Canada.

Korea Notice

사용자안내문

(User Information)

기 종 별

A 급 기기

( 업무용 방송통신기자재 )

사 용 자 안 내 문

이 기기는 업무용 (A 급 )

전자파적합기기로서 판매자 또는

사용자는 이 점을 주의하시기 바라며 ,

가정외의 지역에서 사용하는 것을

목적으로 합니다 .

18 WatchGuard XTM 800 Series

Legal and Regulatory Information

VCCI Notice Class A ITE

CAUTION: DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED. REPLACE ONLY WITH THE SAME

OR EQUIVALENT TYPE RECOMMENDED BY THE MANUFACTURER. DISPOSE OF USED BATTERIES ACCORDING

TO THE MANUFACTURER’S INSTRUCTIONS.

ATTENTION: IL Y A DANGER D’EXPLOSION S’IL Y A REMPLACEMENT INCORRECT DE LA BATTERIE, REMPLACER

UNIQUEMENT AVEC UNE BATTERIE DU MÊME TYPE OU D’UN TYPE ÉQUIVALENT RECOMMANDÉ PAR LE

CONSTRUCTEUR. METTRE AU REBUT LES BATTERIES USAGÉES CONFORMÉMENT AUX INSTRUCTIONS DU

FABRICANT.

Hardware Guide 19

Legal and Regulatory Information

People’s Republic of China Electronic Industry Standard

This table is presented in accordance with SJ/T11364-2006, Marking for Control of Pollution Caused by

Electronic Information Products, implemented in November 2006.

RoHS Statement

The member states of the European Union approved directive 2002/95/EC, Restrictions of Hazardous

Substances (“RoHS directive”‘) that became valid on July 1, 2006. It states that all new electrical and electronic equipment put on the market within the member states must not contain certain hazardous materials. The

XTM 800 Series complies with the European Union’s R0HS directive 2002/95/EC and similar regulations that may be adopted by other countries for European Sales.

20 WatchGuard XTM 800 Series

Legal and Regulatory Information

WEEE Statement

WEEE is a general set of requirements dictated in the EU Directive 2002/96/EC. This Directive mandated that member EU countries enact regulations governing the Waste of Electrical and Electronic Equipment (WEEE).

The Directive, and its individual transpositions into specific country laws and legislation, is aimed at the reduction of WEEE through reuse, recovery, and recycling of WEEE.

WatchGuard is working in partnership with our European Union (EU) distribution partners to ensure that our products are in compliance with the WEEE statutes, and that the recovery of our product per the specific EU country legislative requirements is seamless for our product’s end users. If you have a WatchGuard product that is at its end of life and needs to be disposed of, please contact WatchGuard Customer Care Department at:

U.S. Customers: 877.232.3531

International Customers: +1.206.613.0456

WatchGuard is reasonably confident that our products do not contain any substances or hazardous materials presently banned by any legislation, and do not present a risk due to hazardous materials. WEEE recovery professionals should also note that these products do not have any materials that are of particular high value in their individual form.

REACH Certificate of Compliance

The new EU chemicals policy REACH ( R egistration, E valuation, A uthorization and restriction of Ch emicals) came into effect on June 1st 2007. REACH is Europe's new chemicals legislation, which is applicable in all 27

EU Member States as well as the EFTA European Economic Area (EEA). REACH creates a new system for gathering information, assessing risks to human health and the environment, and authorizing or restricting the marketing and use of chemicals produced or supplied in the EEA. REACH has an impact on EEA producers and importers of finished products and users of chemicals in the course of industrial or professional activities.

WatchGuard supports the overall REACH objective of improving the protection of human health and the environment and will meet all applicable REACH requirements. WatchGuard is strongly committed to working with our customers and supply chain to define and implement the REACH requirements and ensure a smooth transition to compliance.

One of the REACH requirements is that manufacturers and importers have the duty to register substances they are producing or importing. In accordance with the regulations, the products of WatchGuard do not need to be registered for the following reasons:

1. WatchGuard does not import more than 1 metric ton per year of a substance as defined by REACH.

2. WatchGuard products are non-chemical products that are not designed to release any substance under normal and reasonably predictable application.

3. Our products do not contain the listed substances at more than 0.1% by weight of the whole product/part.

Hardware Guide 21

Legal and Regulatory Information

Licensing

Some components of the WatchGuard System Manager software are distributed with source code covered under one or more third party or open source licenses. You can find full licensing information in the product documentation on our public web site at www.watchguard.com/help/documentation. We include below the full text of the GNU General Public License.

To get the source code covered by this license, contact WatchGuard Technical Support at:

United States or Canada: 877.232.3531

All other countries: +1.360.482.1083

You can download the source code at no charge. If you request the material be sent to you on CD-ROM, there is a $35 charge for administration and shipping.

22 WatchGuard XTM 800 Series

Legal and Regulatory Information

GNU General Public License (GPL)

Each of the following programs are wholly or partially licensed under the GPL: ARPTables, bpalogin, bridgeutils, busybox, ebtables, glibc, hostapd, iproute, ipset, iptables, iputils, linux, nmap, ppp, pptpd, rp-pppoe, wireless_tools, wpa_supplicant.

Specific copyright information for the above software, if any, can be found in subsequent pages of this chapter.

GNU GENERAL PUBLIC LICENSE

Version 2, June 1991

Copyright © 1989, 1991 Free Software Foundation, Inc.

51 Franklin Street, Fifth Floor

Boston, MA 02110-1301, USA

Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

Preamble

The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software

Foundation's software and to any other program whose authors commit to using it. (Some other Free

Software Foundation software is covered by the GNU Library General Public License instead.) You can apply it to your programs, too.

When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things.

To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it.

For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code.

And you must show them these terms so they know their rights.

We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software.

Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations.

Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all.

The precise terms and conditions for copying, distribution and modification follow.

Hardware Guide 23

Legal and Regulatory Information

Terms and Conditions for Copying, Distribution, and Modification

1. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The “Program”, below, refers to any such program or work, and a “work based on the Program” means either the

Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language.

(Hereinafter, translation is included without limitation in the term “modification”.) Each licensee is addressed as “you”.

Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does.

2. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program.

You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:

 You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change.

 You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.

 If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.)

These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.

Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program.

In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.

3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:

24 WatchGuard XTM 800 Series

Legal and Regulatory Information

 Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

 Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

 Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.)

The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.

If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code.

4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.

5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the

Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it.

6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License.

7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason

(not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this

License and any other pertinent obligations, then as a consequence you may not distribute the

Hardware Guide 25

Legal and Regulatory Information

Program at all. For example, if a patent license would not permit royalty-free redistribution of the

Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program.

If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances.

It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.

This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.

8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License.

9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.

Each version is given a distinguishing version number. If the Program specifies a version number of this

License which applies to it and “any later version”, you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation.

10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free

Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this.

Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.

26 WatchGuard XTM 800 Series

Legal and Regulatory Information

NO WARRANTY

1. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM,

TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE

COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY

OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS

TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE

DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

2. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY

COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE

PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL,

SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE

THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED

INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO

OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED

OF THE POSSIBILITY OF SUCH DAMAGES.

Hardware Guide 27

Legal and Regulatory Information

28 WatchGuard XTM 800 Series