| UTM (full scan) |
300 Mbps |
| Firewall (IMIX) |
1 Gbps |
| VPN (IMIX) |
272 Mbps |
| HTTPS (IPS enabled, full scan) |
92 Mbps |
| Antivirus |
623 Mbps |
| IPS (full scan) |
510 Mbps |
| Firewall (UDP 1518) |
3.4 Gbps |
| VPN (UDP 1518) |
880 Mbps |
| Interfaces 10/100/1000 |
5 |
| PoE ports |
N/A |
| I/O interfaces |
1 Serial/2 USB |
| Concurrent connections |
4.3M |
| Concurrent connections (proxy) |
200,000 |
| New connections per second |
18,000 |
| VLANs |
50 |
| WSM licenses (incl) |
0 |
| TDR Host Sensors included |
20 |
| Branch Office VPN |
30 |
| Mobile VPN |
30 |
| Firewall |
Stateful packet inspection, TLS decryption, proxy firewall |
| Application proxies |
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy |
| Threat protection |
DoS attacks, fragmented & malformed packets, blended threats |
| Filtering options |
Browser Safe Search, Google for Business |
| Site to Site VPN |
IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke |
| Remote Access VPN |
IKEv2, IPSec, L2TP, TLS |
| Logging and notifications |
WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 |
| Reporting |
WatchGuard Cloud includes over 100 pre-defined reports, executive summary and visibility tools |
| Security |
Pending: CC EAL4+, FIPS 140-2 |
| Safety |
NRTL/C, CB |
| Network |
IPv6 Ready Gold (routing) |
| Hazardous substance control |
WEEE, RoHS, REACH |
| SD-WAN |
Multi-wan failover, dynamic path selection, jitter/loss/latency measurement |
| Dynamic Routing |
RIP, OSPF, BGP |
| High Availability |
Active/passive, active/active |
| QoS |
802.1Q, DSCP, IP Precedence |
| Traffic Management |
By policy or application |
| IP address assignment |
Static, DHCP (server, client, relay), PPPoE, DynDNS |
| NAT |
Static, dynamic, 1:1, IPSec traversal, policy-based |
| Link aggregation |
802.3ad dynamic, static, active/backup |