Compare Editions and Detailed Specs
| XTMv Small Office |
XTMv Medium Office |
XTMv Large Office |
XTMv Datacenter |
|
|---|---|---|---|---|
| Throughput and Connections | ||||
| Firewall throughput¹ | 1 Gbps | 2.5 Gbps | 5 Gbps | Unrestricted |
| Virtual Interfaces | 10 | 10 | 10 | 10 |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| Concurrent sessions (bi-directional) |
30,000 | 350,000 | 1,250,000 | 2,500,000 |
| VLAN | 50 | 75 | 400 | 4,000 |
| VPN and Authentication | ||||
| Branch Office VPN | 50 | 600 | 6,000 | 10,000 |
| Mobile VPN with SSL (Incl/Max) | 10/50 | 10/600 | 6,000/6,000 | Unrestricted |
| Mobile VPN with IPSec | 5 | 50 | 800 | Unrestricted |
¹ Throughput rates will vary based on environment & configuration.
Management
- Management Platform
- WatchGuard System Manager (WSM) v.11 or higher²
- Alarms and Notifications
- SNMP v2/v3, Email, Management System Alert
- Server Support
- Logging, Reporting, Quarantine, WebBlocker, Management
- Web UI
- Supports Windows, Mac, Linux, and Solaris OS
- CLI
- Includes direct connect and scripting
² WSM licenses enable drag-and-drop VPN and one-touch virtual appliance updates.
Medium Office, Large Office and Datacenter Editions include 4-device WSM license. Appliances activated online receive an automatic 5-device bonus pack.
Initial WSM licenses are a purchase upgrade for Small Office Edition.
Next-Generation Security
- Firewall
- Stateful packet inspection, deep application inspection, proxy firewall
- Application Proxies
- HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323
- Intrusion Protection
- Blocks DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more
- VoIP
- H.323. SIP, call setup & session security
- Security subscriptions
- Application Control, Reputation Enabled Defense, WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service (available in the Security Bundle)
VPN & Authentication
- Encryption
- DES, 3DES, AES 128-, 192-, 256-bit
- IPSec
- SHA-1, MD5, IKE pre-shared Key, 3rd party cert import
- SSL
- Thin client, Web exchange
- PPTP
- Server & Passthrough
- VPN Failover
- Yes
- Single Sign-On
- Transparent Active Directory Auth.
- XAUTH
- Radius, LDAP, Windows Active Directory
- Other User Authentication
- VASCO, RSA SecurID, web-based, local
Networking
- Operating System
- Fireware XTM / Fireware XTM Pro*
- Hypervisor Support
- VMware vSphere 4.1, 5.0
- IP Address Assignment
- Static, DynDNS, PPPoE, DHCP (server, client, relay)
- Routing
- Static, dynamic (BGP4, OSPF, RIP v1/v2)**, policy-based**
- QoS
- 8 priority queues, diffserv, modified strict queuing
- NAT
- Static, dynamic, 1:1, IPSec NAT traversal, policy-based**, virtual IP for server load balancing**
- Other Networking
- Port independence, multi-WAN failover, multi-WAN load balancing**, transparent/drop-in mode
* Fireware XTM Pro ships with Large Office and Datacenter Editions, and is an easy upgrade for Small Office and Medium Office Editions
** Requires Fireware XTM Pro operating system.
