Datasheet

WatchGuard

®

XTM 8 Series

Recommended for main offi ce/ headquarters with up to 5,000 users

WatchGuard XTM 8 Series appliances deliver a new class of performancedriven security. With up to 5 Gbps firewall throughput and security features including full HTTPS inspection and VoIP support, enterprises with up to 5,000 users no longer need to compromise on security to meet increasing network demands.

Why buy an all-in-one solution?

An all-in-one XTM network security solution integrates complete protection while slashing the time and cost associated with managing multiple single-point security products. All security capabilities work together for a holistic, comprehensive approach to network security. Your IT staff has more time to focus on other areas of network administration, and your business saves money on support and hardware costs.

“We are extremely satisfi ed with

WatchGuard... switching to a department’s work

considerably easier.”

Martin Kron

Head of IT and Central Service

Novoferm GmbH

With a WatchGuard

®

XTM 8 Series solution, your network is:

SECURE

Application-layer content inspection recognizes & blocks threats that stateful packet fi rewalls cannot detect.

Wide-ranging proxy protection comes from robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.

A suite of security subscriptions boost protection in critical attack areas for complete threat management.

Includes integrated SSL VPN for simple, anywhere-anytime network access.

FAST and EFFICIENT

Up to 5 Gbps fi rewall throughput and up to 1.7 Gbps VPN throughput keep data moving.

Even with all XTM security subscriptions enabled, throughput can reach an industry-leading 1.3 Gbps.

Ten Gigabit Ethernet ports support high-speed LAN backbone infrastructures and gigabit WAN connections.

Active/active high availability with load balancing ensures maximum network uptime.

Scriptable CLI supports interoperability and allows easy integration into existing infrastructure.

Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.

Intuitive management console centrally manages all security functions.

Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.

Drag-and-drop Branch Offi ce VPN setup – three clicks and your remote offi ce is connected.

FLEXIBLE

Call setup security for VoIP means you don’t need to “wire around the fi rewall” to take advantage of the big cost savings that VoIP can generate.

WAN and VPN failover increase performance, redundancy, and reliability.

Multiple VPN choices for fl exibility in remote access.

To maximize port utilization, any of the ten ports can be confi gured as Internal, External, or Optional.

Advanced networking features like transparent bridge mode and multicast over VPN allow you to add security without needing to change existing network infrastructure.

SCALABLE

Upgrade to a higher model within the line for more performance and capacity with a simple license key.

Add powerful security subscriptions to block spam, control dangerous and inappropriate web surfi ng, prevent network intrusions, and stop viruses, spyware, trojans, and other malware at the gateway.

PREPARED FOR TOMORROW’S CHALLENGES

No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.

Advanced networking features ensure reliability and the fl exibility to meet changing business requirements.

Secure remote connectivity keeps mobile workforce online and productive.

Security and reporting tools, included at no extra cost, support industry and regulatory compliance.

Earth-friendly technology

WatchGuard® Technologies, Inc.

XTM 8 Series

Throughput & Connections

Firewall throughput*

VPN throughput*

Aggregate XTM throughput*

Interfaces 10/100/1000

I/O interfaces

Nodes supported (LAN IPs)

Concurrent sessions

VLANs bridging, tagging, routed mode

Local user database

XTM 810

3 Gbps

1 Gbps

900 Mbps

10 copper

1 Serial

2 USB

Unrestricted

500,000

200

400

XTM 820

4 Gbps

1.4 Gbps

1.1 Gbps

10 copper

1 Serial

2 USB

Unrestricted

750,000

300

500

XTM 830

5 Gbps

1.7 Gbps

1.3 Gbps

10 copper

1 Serial

2 USB

Unrestricted

1,000,000

400

600

Powered by Fireware

®

XTM Pro

Every WatchGuard XTM 8 Series appliance ships with the Pro version of the Fireware ® XTM operating system, providing the advanced networking features that demanding networks require.

Fireware XTM Pro Networking Features

Routing Static

Dynamic (BGP4, OSPF, RIP v1/v2)

Policy-based

High Availability Active/passive, active/active with load balancing

NAT

Other Features

Static, dynamic, 1:1, IPSec traversal, policy-based

Virtual IP for server load balancing

Port Independence, Multi-WAN failover

Transparent/drop-in mode

Multi-WAN load balancing, Server load balancing

VPN Tunnels

Branch Offi ce VPN

Mobile VPN IPSec (incl/max)

Mobile VPN SSL

PPTP

Security Features

Firewall

1,000

600/2,000

1,000

50

2,000

700/6,000

4,000

50

6,000

800/8,000

6,000

50

Application proxies

Threat protection

VoIP

Security subscriptions

Stateful packet inspection, deep packet inspection, proxy fi rewall

HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3

Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats, and more

H.323. SIP, call setup and session security

WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion

Prevention Service (available with the Security Bundle)

VPN & Authentication

Encryption

IPSec

VPN failover

SSL

PPTP

Single sign-on

XAUTH

Other user authentication

Management

Management platform

Alarms and notifi cations

Server support

Web UI

Command line interface

DES, 3DES, AES 128-, 192-, 256-bit

SHA-1, MD5, IKE pre-shared key, 3rd party cert import

Yes

Thin client, Web exchange

Server and Passthrough

Transparent Active Directory Authentication

Radius, LDAP, Windows Active Directory

VASCO, RSA SecurID, web-based, local

WatchGuard System Manager (WSM) v11 or higher

SNMP v2/v3, Email, Management System Alert

Logging, Reporting, Quarantine, WebBlocker, Management

Supports Windows, Mac, Linux, and Solaris OS

Includes direct connect and scripting

Standard Networking

QoS

IP address assignment

8 priority queues, Diff Serv, modifi ed strict queuing

Static, DynDNS, PPPoE, DHCP (server, client, relay)

Support and Maintenance

LiveSecurity® Service Hardware warranty, 10/5 technical support with 4-hour response time, software updates, threat alerts

Certifi cations

Security

Safety

ICSA, FIPS, EAL4 in progress

NRTL/C, CB

Control of hazardous substances WEEE, RoHS, REACH

* Throughput rates will vary based on environment & confi guration

Power Supply

Dimensions and Power

Product Dimensions

Shipping Dimensions

Shipping Weight

AC Power

Power Consumption

Rack Mountable

On/Off Switch

Network Interfaces

Cooling Fans

1.75” x 16.9” x 16.0” (44 x 430 x 407 mm)

5.12” x 22.5” x 21.26” (130 x 566 x 540 mm)

19.5 lbs (8.8 Kg)

100-240 VAC Autosensing

U.S. 215 Watts (max), 734 BTU (max)

Yes (1U rack mount)

Buy the Bundle and Get the Works!

Get everything you need for complete threat management at a great price with the Security Bundle. Includes choice of XTM 8 Series appliance, plus WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion

Prevention Service, and LiveSecurity ® Service with 24/7 tech support.

How to Order the Security Bundle

WatchGuard XTM 8 Series

Security Bundle SKUs

XTM 810 Security Bundle

XTM 820 Security Bundle

XTM 830 Security Bundle

Appliance with 1-year subscriptions

WG810031

WG820031

WG830031

Power Lights

LCD Navigation Buttons

Serial Port

Appliance with 2-year subscriptions

WG810032

WG820032

WG830032

LCD Display

Appliance with 3-year subscriptions

WG810033

WG820033

WG830033

Address: 505 Fifth Avenue South, Suite 500, Seattle, WA 98104 • Web: www.watchguard.com • U.S. Sales: 1.800.734.9905 • International Sales: +1.206.613.0895

No express or implied warranties are provided for herein. All specifi cations are subject to change and expected future products, features or functionality will be provided on an if and when available basis. ®2009 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, Fireware, and LiveSecurity are either trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners. Part No. WGCE66650_122209

WatchGuard® Technologies, Inc.