Datasheet

WatchGuard ® XTM 2 Series

With a Next-GeNeratioN WatchGuard xtM 2 SerieS appliaNce, your NetWork iS: recoMMeNded For SMall BuSiNeSSeS, reMote oFFiceS, aNd WireleSS hotSpotS

WatchGuard XTM 2 Series appliances deliver a new class of performance-driven security. Network protection is stronger than ever, with full HTTPS inspection, VoIP support, and optional application control. All models have three 1-Gigabit Ethernet ports for faster link speeds, and optional wireless capabilities include dual-band 802.11n technology for greater wireless speed and responsiveness.

An XTM 2 Series appliance can be used as a stand-alone security solution for a small business, and makes an ideal endpoint for connecting a secure VPN tunnel back to a WatchGuard XTM or WatchGuard

Firebox network.

“We made the decision to

go with WatchGuard

because one appliance would

give us all the security, control, reporting, and visibility

we needed.”

Justin Brake

Manager of IT Services

Wireless Express

Secure

■

Application-layer content inspection identifies & blocks threats that stateful packet firewalls can’t detect.

■

Wide-ranging proxy protection provides robust security on HTTP/HTTPS, FTP, SMTP, POP3, DNS, TCP/

UDP.

■

Security subscriptions boost protection in critical attack areas for complete unified threat management: blocking spam, controlling dangerous web surfing, preventing network intrusions, and stopping viruses, spyware, and other malware at the gateway.

■

Optional Application Control keeps unproductive and dangerous applications off-limits.

eFFicieNt

■

Interactive, real-time monitoring and reporting – at no extra charge – give an unprecedented view into network security activity, so you can take immediate preventive or corrective actions.

■

Intuitive management console centralizes configurations and streamlines remote management.

■

Three 1-GbE interfaces allow faster link speeds, which is particularly useful for trusted LAN.

■

Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

FlexiBle

■

Call setup security for VoIP means you don’t need to “wire around the firewall” to take advantage of the big cost savings that VoIP can generate.

■

WAN and VPN failover increase performance, redundancy, and reliability.

■

Multiple VPN choices deliver flexibility in remote access. Includes IPSec, SSL, and support for iOS devices such as iPhone, iPad, and iPod touch.

■

Advanced networking features, like transparent bridge mode and dynamic routing support, allow you to add security without needing to change existing network infrastructure.

Wired or WireleSS – your choice

■

Wireless models include optional dual-band 802.11n technology for much more responsive wireless network connection and expanded range. Allows users to access 2.4 GHz or less crowded

5 GHz band.

■

Three distinct security zones give administrators precise control over Internet access privileges for different user groups.

■

Wireless guest services segment the Internet for customers/guests.

capaBle

■

Multi-layered, interlocking security protects the network.

■

Secure remote connectivity keeps mobile workforce productive.

■

Intuitive, centralized management gives you the control you need to manage efficiently.

■

Choice of wired or wireless models to suit your specific business requirements.

■

Monitoring and reporting tools, included at no extra cost, support industry and regulatory compliance, with drill-down functions that make it easy to pinpoint specific activities.

WatchGuard Technologies, Inc.

XTM 2 Series

XTM 21/21-W XTM 22/22-W XTM 23/23-W thrOughput & COnneCtiOnS

Firewall throughput * 110 Mbps 150 Mbps 195 Mbps

VPN throughput *

XTM throughput *

Interfaces 10/100

Interfaces 10/100/1000

I/O interfaces

Nodes supported (LAN IPs)

35 Mbps

18 Mbps

3 copper

3 copper

2 USB

Unrestricted

55 Mbps

30 Mbps

3 copper

3 copper

2 USB

Unrestricted

55 Mbps

40 Mbps

3 copper

3 copper

2 USB

Unrestricted

Concurrent connections

(bi-directional)

Local user auth. DB limit

Model upgradeable

10,000

100

Yes

20,000

200

Yes

30,000

200

No

Wireless Available

Vpn tunnelS (inCl/max)

Branch Office VPN

Mobile VPN IPSec

Mobile VPN SSL

SeCurity FeatureS

Firewall

Application proxies

Threat protection

VoIP

Security Subscriptions

802.11a/b/g/n

5

1/11

1/11

802.11a/b/g/n

20

5/25

1/25

802.11a/b/g/n

50

5/55

55/55

Stateful packet inspection, deep application inspection, application proxies

HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3

Blocks spyware, DoS attacks, fragmented & malformed packets, blended threats, and more

H.323. SIP, call setup and session security

Application Control, WebBlocker, spamBlocker, Gateway

AntiVirus, Intrusion Prevention, Reputation Enabled Defense

Vpn & authentiCatiOn

Encryption

IPSec

VPN failover

SSL

PPTP

Single sign-on

XAUTH

Other user authentication

DES, 3DES, AES 128-, 192-, 256-bit

SHA-1, IKE pre-shared key, 3rd party cert

Yes

Thin client, Web exchange

Server and Passthrough

Transparent Active Directory Authentication

Radius, LDAP, Windows Active Directory

VASCO, RSA SecurID, web-based, local

802.1X for XTM 2 Series wireless management

Management platform

Alarms and notifications

Server support

Web UI

Command Line Interface

WatchGuard System Manager (WSM)

SNMP v2/v3, Email, Management System Alert

Logging and Reporting with Server Health status, Quarantine,

WebBlocker, Management

Supports Windows, Mac, Linux, and Solaris OS

Includes direct connect and scripting

Standard netWOrking

QoS 8 priority queues, DiffServ, modified strict queuing

IP Address Assignment

NAT

Static, DynDNS, PPPoE, DHCP (server, client, relay)

Static, dynamic, 1:1, IPSec traversal, policy-based

CertiFiCatiOnS

Security ICSA, FIPS 140-2 and EAL4+ in progress

Safety

Network

NRTL/C, CB

IPv6 Ready Gold (routing)

Hazardous Substance Control WEEE, RoHS, REACH

SuppOrt & maintenanCe

LiveSecurity® Service Hardware warranty, 12/5 technical support with 4-hour response time, software updates, threat alerts

Initial 90-day or 1-year, 2-year, and 3-year subscriptions available

Networking

Routing

SSL

VLAN support

Other Features

Fireware® XTM

Static

1 SSL tunnel available

20

Port Independence

Transparent/drop-in mode

Fireware XTM Pro**

Dynamic (BGP4, OSPF,

RIP v1/2), Policy-based

Maximum number of

SSL tunnels available

50

Multi-WAN failover

Multi-WAN load balancing

diMeNSioNS aNd poWer

Product Dimensions - Wired 6.1” x 7.5” x 1.25” (15.5 x 19.0 x 3.2 cm)

Product Dimensions - Wireless

(antennae up)

Shipping Dimensions

Shipping Weight - Wired

Shipping Weight - Wireless

7.75” x 10.75” x 5” (19.7 x 27.3 x 12.7 cm)

10.75” x 13.25” x 3.4” (27.3 x 33.7 x 8.6 cm)

3.2 lbs (1.45 Kg)

3.6 lbs (1.6 Kg)

AC Power

Power Consumption - Wired

100-240 VAC Autosensing

U.S. 23.33 Watts (80 BTU/hr)

Power Consumption - Wireless U.S. 24.0 Watts (82 BTU/hr)

Rack Mountable No (wall mount bracket included)

eNviroNMeNt

Operating

Temperature 32° F to 104° F

0° C to 40° C

Relative Humidity

Altitude

MTBF

10% to 85% non-condensing

0 to 9,843 ft @ 95° F

(3,000 m @ 35° C)

Wired

129,955 hours @ 104° F

(40° C )

StOrage

-40° F to 158° F

-40° C to 70° C

10% to 95% non-condensing

0 to 15,000 ft @ 95° F

(4,570 m @ 35° C)

WireleSS

103,612 hours @ 104° F

(40° C )

Antennae (on wireless models only)

Power Supply

Network Interfaces Reset Button

USB Ports

Buy the BuNdle aNd Get the WorkS!

Get everything you need for complete unified threat management at a great price with the Security Bundle. Includes choice of any 2 Series appliance (wired or wireless), plus Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Reputation Enabled Defense,

Intrusion Prevention Service, and LiveSecurity Service for support and maintenance.

* Throughput rates will vary based on environment and configuration.

Contact your authorized WatchGuard reseller or call WatchGuard directly

(1.800.734.9905) for help determining the right model for your network.

** Fireware XTM Pro advanced OS is standard on XTM 23 and 23-W, and is a purchase upgrade for all other 2 Series models.

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 www.watchguard.com

No express or implied warranties are provided for herein. All specifications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. © 2011 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, Fireware, and LiveSecurity are either trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners. Part No. WGCE66650_110911