Datasheet reCoMMenDeD For MiDSiZe BuSineSSeS

WatchGuard XTM 8 Series appliances are nextgeneration firewalls (NGFWs) that deliver a new class of performance-driven security. With up to

6.5 Gbps firewall throughput and security features including full HTTPS inspection and VoIP support, businesses no longer need to compromise on security to meet increasing network demands.

Why Buy a next-generation FireWall?

WatchGuard’s NGFW products provide true linespeed security inspection on all traffic. In addition, the NGFW line can deliver application control and intrustion prevention; connects offices via unique drag-and-drop VPN; connects people via SSL and

IPSec VPN; and gives businesses unparalleled visibility into real-time and historical user, network, and security activities.

With WatchGuard’s 8 Series NGFW, businesses can define, enforce, and audit strong security and acceptable use policies, resulting in increased employee productivity and less risk to critical intellectual property or customer data.

“We are extremely satisfied with

Watchguard...

switching to a single provider has made our internal

it department’s work considerably easier.

”

Martin Kron

Head of IT and Central Service

Novoferm GmbH

WatchGuard ® XTM 8 Series

With a next-generation xtM 8 SerieS FireWall, your netWork iS:

SeCure

■

Content inspection at the application layer recognizes and blocks threats that stateful packet firewalls cannot detect.

■

Wide-ranging proxy protection provides robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS,

TCP/UDP.

■

Application Control, an essential component of true next-generation security, is an easy-to-deploy security subscription that keeps unproductive, inappropriate, and dangerous applications off-limits.

■

Intrusion Prevention Service, another fundamental element of next-generation protection, is available via subscription to stop attacks that comply with standard protocols but carry malicious content.

FaSt and eFFiCient

■

Up to 6.5 Gbps firewall throughput and up to 1.7 Gbps VPN throughput keep data moving.

■

Ten 1GgE ports support high-speed LAN backbone infrastructures and gigabit WAN connections.

■

Active/active high availability with load balancing ensures maximum network uptime.

■

Scriptable CLI supports interoperability and allows easy integration into existing infrastructure.

■

Interactive, real-time monitoring and reporting – at no additional charge – give an unobstructed view into network security activity so you can take immediate preventive or corrective actions.

■

Intuitive management console centrally manages all security functions.

■

Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.

■

Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

FlexiBle

■

WAN and VPN failover provide redundancy for increased reliability.

■

Multiple VPN choices deliver flexibility in remote access. Includes IPSec, SSL, and support for iOS devices such as iPhone, iPad, and iPod touch.

■

To maximize port utilization, any of the 10 ports can be configured as Trusted, External, or DMZ.

SCalaBle

■

Add powerful security subscriptions to block spam, control dangerous and inappropriate application usage and web surfing, prevent network intrusions, and stop viruses, spyware, and other malware at the gateway.

■

Upgrade to a higher model within the line for more performance and capacity with a simple license key.

PrePareD For toMorroW’S ChallengeS

■

Multi-layered, interlocking security protects the network while throughput remains high. No need to compromise protection for strong performance or vice versa.

■

Advanced networking features ensure reliability and the flexibility to meet changing business requirements.

■

Secure remote connectivity keeps mobile workforce online and productive.

■

Monitoring and reporting tools, included at no extra cost, support industry and regulatory compliance, with drill-down functions that make it easy to pinpoint specific activities.

WatchGuard® Technologies, Inc.

xtM 8 SerieS

XTM 810 throughPut & CoNNeCtioNs

Firewall throughput* 4.5 Gbps

VPN throughput*

AV throughput*

IPS throughput*

UTM throughput*

Interfaces 10/100/1000

I/O interfaces

1 Gbps

2 Gbps

2.1 Gbps

1.3 Gbps

10 copper

1 Serial

2 USB

Unrestricted Nodes supported (LAN IPs)

Concurrent connections

(bi-directional)

New connections per second

500,000

35,000

VLANs bridging, tagging, routed mode

Authenticated users limit

500

4,000

VPN tuNNels

Branch Office VPN

Mobile VPN IPSec (incl/max)

Mobile VPN SSL seCurity Features

Firewall

1,000

600/2,000

1,000

Application proxies

Threat protection

VoIP

Security subscriptions

820

5.5 Gbps

1.4 Gbps

2.1 Gbps

2.4 Gbps

1.3 Gbps

10 copper

1 Serial

2 USB

Unrestricted

750,000

35,000

500

5,000

2,000

700/6,000

4,000

830/830-F

6.5 Gbps

1.7 Gbps

2.3 Gbps

2.7 Gbps

1.4 Gbps

10 copper**

1 Serial

2 USB

Unrestricted

1,000,000

35,000

500

6,000

6,000

800/8,000

6,000

Stateful packet inspection, deep packet inspection, proxy firewall

HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3

Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats, and more

H.323, SIP, call setup and session security

Application Control, Intrusion Prevention Service,

Gateway AntiVirus, Reputation Enabled Defense,

WebBlocker, spamBlocker

VPN & autheNtiCatioN

Encryption

IPSec

VPN failover

SSL

PPTP

Single sign-on

XAUTH

Other user authentication

DES, 3DES, AES 128-, 192-, 256-bit

SHA-1, MD5, IKE pre-shared key, 3rd party cert import

Yes

Thin client, Web exchange

Server and Passthrough

Transparent Active Directory Authentication

RADIUS, LDAP, Secure LDAP, Windows Active Directory

VASCO, RSA SecurID, web-based, local, Microsoft

Terminal Services and Citrix

MaNageMeNt

Management platform

Alarms and notifications

Server support

Web UI

Command line interface

WatchGuard System Manager (WSM) v11 or higher

SNMP v2/v3, Email, Management System Alert

Logging, Reporting, Quarantine, WebBlocker, Management

Supports Windows, Mac, Linux, OS

Includes direct connect and scripting staNdard NetworkiNg

QoS

IP address assignment

8 priority queues, DiffServ, modified strict queuing

Static, DHCP (server, client, relay), PPPoE, DynDNS

CertiFiCatioNs

Security

Safety

Network

ICSA Firewall, ICSA IPSec VPN, CC EAL4+

Review Pending: FIPS 140-2

NRTL/C, CB

IPv6 Ready Gold (routing)

Control of hazardous substances WEEE, RoHS, REACH

PoWereD By FireWare

®

xtM Pro

Every WatchGuard XTM 8 Series appliance ships with the Pro version of the Fireware XTM operating system, providing the advanced networking features that demanding networks require.

NetworkiNg Features

Routing

High Availability

NAT

Other Features

Fireware XtM Pro

Static

Dynamic (BGP4, OSPF, RIP v1/v2)

Policy-based

Active/passive, active/active with load balancing

Static, dynamic, 1:1, IPSec traversal, policy-based

Virtual IP for server load balancing

Port Independence, Multi-WAN failover

Transparent/drop-in mode,

Multi-WAN load balancing, Server load balancing

DiMenSionS anD PoWer

Product Dimensions

Shipping Dimensions

16.0” x 16.9” x 1.75” (40.7 x 43.0 x 4.4 cm)

21.26” x 22.25” x 5.12” (54.0 x 56.6 x 13.0 cm)

Shipping Weight

AC Power

Power Consumption

Rack Mountable

environMent

Temperature

Relative Humidity

Altitude

MTBF

19.5 lbs (8.85 Kg)

100-240 VAC Autosensing

U.S. 215 Watts (max), 734 BTU/hr (max)

1U rack mount kit included oPeratiNg

32° F to 113° F

0° C to 45° C storage

-40° F to 158° F

-40° C to 70° C

10% to 85% non-condensing

0 to 9,843 ft at 95° F

(3,000 m at 35° C)

50,174 hours @ 77° F (25° C)

10% to 95% non-condensing

0 to 15,000 ft at 95° F

(4,570 m at 35° C )

exPert guiDanCe anD SuPPort

An initial subscription to LiveSecurity® Service is included with every

XTM 8 Series appliance. LiveSecurity provides hardware warranty with advance hardware replacement, 12/5 or 24/7 technical support, software updates, and concise threat alerts.

next-generation SeCurity CoMeS BunDleD

Protect your network with the next generation of security technology.

The 8 Series NGFW Bundle includes choice of XTM 8 Series appliance, plus Application Control, Intrusion Prevention Service, and LiveSecurity Plus with 24/7 tech support. Or choose the XTM Security Bundle, with appliance, all six security subscriptions, and LiveSecurity Plus. An excellent value when you buy together and save.

* Throughput rates will vary based on environment and configuration. Contact your WatchGuard reseller or call WatchGuard directly (1.800.734.9905) for help determining the right model for your network.

** XTM 830 appliances are available with 6 copper and 4 fiber 10/100/1000 interfaces under the model number XTM 830-F.

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 www.watchguard.com

No express or implied warranties are provided for herein. All specifications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. © 2012 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, Fireware, and LiveSecurity are registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners. Part No. WGCE66650_101712