Firebox ® X

Hardware Guide

Firebox® X500, Firebox® X700,

Firebox® X1000, Firebox® X2500

Copyright and Patent Information

Copyright© 1998 - 2004 WatchGuard Technologies, Inc. All rights reserved.

WatchGuard, the WatchGuard logo, Firebox LiveSecurity, and any other mark listed as a trademark in the “Terms of Use” portion of the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies, Inc. and/or it’s subsidiaries in the United States and/or other courtries. All other trademarks are the property of their respective owners.

Printed in the United States of America.

Part No: 1311-001

U.S. Patent Nos. 6,493,752; 6,597,661; D473,879. Other Patents Pending.

Notice to Users

Information in this guide is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc.

ii

Limited Hardware Warranty

This Limited Hardware Warranty (the "Warranty") applies to the enclosed Firebox hardware product, not including any associated software which is licensed pursuant to a separate enduser license agreement and warranty (the "Product"). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. ("WatchGuard") and you agree as set forth below or on the reverse side of this card, as applicable:

1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the "Warranty Period"): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specifications.

This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other than WatchGuard except for the replacement or inclusion of specified components authorized in and performed in strict accordance with documentation provided by WatchGuard; or (ii) damaged or destroyed by accidents, power spikes or similar events or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release

Limited Hardware Warranty

WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof.

2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in

Section 1 above, WatchGuard will, following receipt of the product you claim is defective and at its option, either (a) repair the Product, or (b) replace the Product; provided, that you will be responsible for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard.

WatchGuard shall not be responsible for return of or damage to any software, firmware, information or data contained in, stored on, or integrated with any returned Products.

3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF

WATCHGUARD, AND YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE

EXCLUSIVE AND IN SUBSTITUTION FOR, AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE

ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD AND

ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST WATCHGUARD,

EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY

NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY

IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY

IMPLIED WARRANTY ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR

USAGE OF TRADE, ANY WARRANTY OF NONINFRINGEMENT, ANY WARRANTY OF

UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR

REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE,

PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT

LIABILITY OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY

FOR LOSS OR DAMAGE TO, OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT).

4. LIMITATION AND LIABILITY. WATCHGUARD’S LIABILITY (WHETHER ARISING IN CONTRACT

(INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND

STRICT LIABILITY AND FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN

NO EVENT EXCEED THE PURCHASE PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE

TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. IN NO EVENT WILL

WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER ARISING IN CONTRACT

(INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND

STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY

INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT

LIMITATION LOSS OF PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION

WITH THIS WARRANTY OR THE USE OF OR INABILITY TO USE THE PRODUCT, EVEN IF

WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS SHALL BE

TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.

5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of

Washington, U.S.A., without reference to its choice of law rules. The provisions of the 1980

United Nations Convention on Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or associated documentation to any country to which such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid provision shall be modified

Hardware Guide iii

or partially enforced to the maximum extent permitted by law to effectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the

Product, and supersedes any prior purchase order, communications, advertising or representations concerning the Product AND BY USING THE PRODUCT YOU AGREE TO THESE

TERMS. IF THE PRODUCT IS BEING USED BY AN ENTITY, THE INDIVIDUAL INDICATING

AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS AND WARRANTS THAT

(A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF OF THE

ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS

THE FULL POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND

PERFORM ITS OBLIGATIONS UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE

PERFORMANCE OF THE ENTITY’S OBLIGATIONS UNDER THE WARRANTY DO NOT VIOLATE

ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY. No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard.

iv

Declaration of Conformity

Declaration of Conformity

Hardware Guide v

FCC Certification

This device has been tested and found to comply with limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. Operation is subject to the following two conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause undesired operation.

CE Notice

The CE symbol on your WatchGuard Technologies equipment indicates that it is in compliance with the Electromagnetic Compatibility (EMC) directive and the Low Voltage Directive (LVD) of the European Union (EU).

Industry Canada

This Class A digital apparatus meets all requirements of the Canadian Interference-Causing Equipment Regulations.

Cet appareil numerique de la classe A respecte toutes les exigences du

Reglement sur le materiel broulleur du Canada.

vi

VCCI Notice Class A ITE

VCCI Notice Class A ITE

Hardware Guide vii

viii

Contents

Limited Hardware Warranty ............................................ ii

Declaration of Conformity ............................................... v

FCC Certification ............................................................. vi

CE Notice ......................................................................... vi

Industry Canada .............................................................. vi

VCCI Notice Class A ITE ................................................ vii

Package Contents ............................................................2

Hardware Specifications .................................................3

Environmental Requirements .........................................3

Hardware Description ......................................................4

Firebox® X front panel

............................................. 4

Firebox® X rear view

................................................ 6

Hardware Guide ix

x

Hardware Guide

The WatchGuard® Firebox® X is the world’s first key-upgradeable integrated security appliance. Its Intelligent Layered Security architecture delivers multiple layers of protection that work together to detect and block threats from attacking your network. Stateful firewall, VPN, intrusion prevention, application filtering, spam blocking, and content filtering are all integrated into a single appliance and managed through a common interface.

The Firebox X is a superior security device designed with the future in mind. This platform has a streamlined 1 U form factor, increased processing power, higher memory and port count compared to existing Firebox devices. There is an LCD display and front panel controls that allow access to status information without going to the management station. The Firebox X even has an external hard drive bay for storage expandability in future applications.

As your security requirements grow, the Firebox X platform is fully upgradeable to a higher performing model by simply entering a license key. Additionally, you can purchase a license key to activate additional network ports and high availability functionality to support your network and reliability requirements. As new security services become available for the Fire-

Hardware Guide 1

box X to combat against future threats, a simple download and license key is all that is needed to enable your Firebox X to provide added layers of defense.

The Firebox X is a rack-mountable device that is easily installed into your network. For information on installing the Firebox X, see the Firebox QuickStart Guide or the “Getting Started” chapter in the User Guide.

Thank you for choosing the Firebox X to protect your network.

We look forward to serving your security needs through these dynamic times.

Package Contents

The package should contain the following:

• Firebox X device

• 3 straight-through Ethernet cables (green)

• 1 cross-over Ethernet cable (red)

• 1 serial cable (blue)

• 1 DB9 adapter

• 1 rack-mounting kit

• WatchGuard System Manager CD

• Firebox X documentation pack

• LiveSecurity

®

Service activation card

• License key

• Warranty card

2

Hardware Specifications

Hardware Specifications

The following table shows the specific hardware specifications for the Firebox X.

Processor

Memory - Flash

Memory - RAM

Network interfaces

Serial ports

Power supply

Dimensions

Weight

Intel Pentium III class processor

64 Mbyte

256 Mbyte

6x10/100

1 DB9

100-240 VAC

Autosensing

D=9.5”

W=16.75”

H=1.75”

9.2 lbs

Environmental Requirements

WatchGuard recommends physically installing a Firebox X device under the following conditions:

• Securely rack-mounted

• Placed in a secured environment, such as a locked LAN room, or similar space, to prevent physical compromise by unprivileged personnel

• Connected to conditioned power to prevent damage caused by power spikes and other power fluctuations

Hardware Guide 3

The following table shows other environmental requirements.

Operating temperature

Operating humidity

Non-operating temperature

Non-operating humidity

0 – 40 degrees Celsius (+32 – 104 degrees Fahrenheit)

10% – 85%

–40 – 70 degrees Celsius

10% - 95%

Non-condensing at 55 degrees Celsius

(131 degrees Fahrenheit)

7 – 28 Hz 0.001 to 0.01 G2 per Hz Non-operating random vibration

Acoustic noise

Operating mechanical shock

50 dBA at 20 – 25 degrees Celsius

20.0 G with 11 msec diration, 1/2 sine wave

Hardware Description

Firebox® X front panel

The following photograph shows the entire front view.

4

Hardware Description

The photograph below shows a close-up of the left side of the indicator panel. From the left, the indicators are as follows:

Hardware Guide

Front Panel Display

The LCD screen displays Firebox X status information.

Use the buttons to change the information that appears.

LCD Console Buttons

Use the buttons to scroll through the following information:

Up

Right

Down

Left

Firebox Model Number

Sys A or Sys B status

Armed or Disarmed status

Load average

Memory usage

Firebox uptime

Time of last change to configuration file

External IP address

Default Gateway

If you press and hold the Up button within ten seconds after powering on, the Firebox X boots into SysB mode.

Power

A yellow LED (light-emitting diode) indicates that the power is on.

Arm/Disarm

A green LED indicates the Firebox is armed. A red LED indicates the Firebox is disarmed.

Serial port (Console)

An DB9 connector for the serial port. This port has a cover that you need to remove to access the port.

5

6

The photograph below shows a close-up of the right side of the indicator panel. From the left, the indicators and connections are as follows.

Interface ports

The six ports have standard RJ45 connectors and are labeled External (0), 1, 2, 3, 4, and 5. Each port has a corresponding LED located above the interface ports.

Interface ports 3, 4, and 5 are not active at this time and are reserved for future use.

LED

The six pairs of LEDs are labeled 0, 1, 2, 3, 4, and 5, and they correspond to the interface ports below.

The LEDs show the link and connection speed of the interface. When the interface runs at 100 Mbit, the top

LED is green. When the interface runs at 10 Mbit, the bottom LED is green.

Hard Drive Bay

Reserved for future use. Do not remove the empty insert unless directed as part of a future upgrade or option.

Firebox® X rear view

The rear view of the Firebox X has the AC receptacle and power switch.

Hardware Description

AC Receptacle

Accepts the detachable AC power cord supplied with the Firebox X. The power supply for the Firebox X is a

WatchGuard standard auto-sensing AC power supply.

Power Switch

Turns the Firebox X on or off.

Hardware Guide 7

8