Firewall WatchGuard Firebox M470
Firebox M Series |
M470 |
THROUGHPUT |
|
Firewall (UDP 1518) |
19.6 Gbps |
Firewall (IMIX) |
5.6 Gbps |
VPN (UDP 1518) |
5.2 Gbps |
VPN (IMIX) |
1.8 Gbps |
HTTPS (IPS enabled) |
2.0 Gbps |
Antivirus |
3.5 Gbps |
IPS (fast/full scan) |
5.7 / 3.0 Gbps |
UTM (fast/full scan) |
3.1 / 2.1 Gbps |
CAPACITY |
|
Interfaces 10/100/1000 |
8 (optional modules available) |
I/O interfaces |
1 SRL / 2 USB |
Concurrent connections |
3,800,000 |
Concurrent connections (proxy) |
310,000 |
New connections per second |
82,000 |
VLANs |
300 |
WSM licenses (incl) |
4 |
TDR Host Sensors included |
200 |
Authenticated users limit |
Unrestricted |
VPN TUNNELS |
|
Branch Office VPN |
250 |
Mobile VPN |
250 |
SECURITY FEATURES |
|
Firewall |
Stateful packet inspection, deep packet inspection, proxy firewall |
Application proxies |
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, SMTP, IMAPS, POP3S and Explicit Proxy |
Threat protection |
DoS attacks, fragmented & malformed packets, blended threats & more |
VoIP |
H.323, SIP, call setup and session security |
Filtering options |
Browser Safe Search, Google for Business |
VPN & AUTHENTICATION |
|
Cloud providers |
AWS (Static/Dynamic), Azure (Static/Dynamic) |
Encryption |
AES 256-128 bit, 3DES, DES |
IPSec |
SHA-2, IKE v1/v2, IKE pre-shared key, 3rd party cert, Suite B |
Single sign-on |
Windows, macOS, mobile operating systems, RADIUS, SAML 2.0 |
Authentication |
RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, SAML 2.0, SMS Passcode |
MANAGEMENT |
|
Logging and notifications |
WatchGuard, Syslog, SNMP v2/v3 |
User interfaces |
Centralized console (WSM), Web UI, scriptable CLI |
Reporting |
WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools |
CERTIFICATIONS |
|
Security |
CC EAL4+ Pending: ICSA Firewall, ICSA IPSec VPN, FIPS 140-2 |
Safety |
NRTL/C, CB |
Network |
IPv6 Ready Gold (routing) |
Hazardous substance control |
WEEE, RoHS, REACH |
NETWORKING |
|
Routing |
Static, Dynamic (BGP4, OSPF, RIP v1/v2), SD-WAN Dynamic Path Selection |
High Availability |
Active/passive, active/active with load balancing |
QoS |
8 priority queues, DiffServ, modified strict queuing |
IP address assignment |
Static, DHCP (server, client, relay), PPPoE, DynDNS |
NAT |
Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing |
Link aggregation |
802.3ad dynamic, static, active/backup |
Other features |
Port Independence, Multi-WAN failover and load balancing, server load balancing, host header redirection, USB modem as a dedicated interface |