Firewall WatchGuard Firebox M4600
|
Firebox M Series |
M4600 |
|
THROUGHPUT |
|
|
Firewall throughput |
40 Gbps |
|
VPN throughput |
10 Gbps |
|
AV throughput |
9 Gbps |
|
IPS throughput |
13 Gbps |
|
UTM throughput |
8 Gbps |
|
Interfaces (installed) |
8 x 1Gb |
|
I/O interfaces |
1 serial / 2 USB |
|
Concurrent connections (bi-directional) |
7.5 million |
|
New connections per second |
160,000 |
|
VLANs |
1,000 |
|
Authenticated users limit |
Unrestricted |
|
VPN TUNNELS |
|
|
Branch Office VPN |
5,000 |
|
Mobile VPN IPSec |
10,000 |
|
Mobile VPN SSL/L2TP |
10,000 |
|
SECURITY FEATURES |
|
|
Firewall |
Stateful packet inspection, deep packet inspection, proxy firewall |
|
Application proxies |
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, POP3S, SMTP, IMAPS, Explicit Proxy |
|
Threat protection |
DoS attacks, fragmented & malformed packets, blended threats & more |
|
VoIP |
H.323, SIP, call setup and session security |
|
Filtering options |
Browser Safe Search, YouTube for Schools, Google for Business |
|
VPN & AUTHENTICATION |
|
|
Encryption |
DES, 3DES, AES 128-, 192-, 256-bit |
|
IPSec |
SHA-2, IKEv1/v2 , IKE pre-shared key, 3rd party cert, Suite B |
|
Single sign-on |
Windows, macOS, mobile operating systems, RADIUS, SAML 2.0 |
|
Authentication |
RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, SAML 2.0, SMS Passcode |
|
MANAGEMENT |
|
|
Logging and notifications |
WatchGuard, Syslog, SNMP v2/v3 |
|
User interfaces |
Centralized console (WSM), Web UI, scriptable CLI |
|
Reporting |
WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools |
|
CERTIFICATIONS |
|
|
Security |
CC EAL4+ Pending: ICSA Firewall, ICSA IPSec VPN, FIPS 140-2 |
|
Safety |
NRTL/C, CB |
|
Network |
IPv6 Ready Gold (routing) |
|
Hazardous substance control |
WEEE, RoHS, REACH |
|
NETWORKING |
|
|
Routing |
Static, Dynamic (BGP, OSPF, RIP), SD-WAN Dynamic Path Selection, VPN |
|
High Availability |
Active/passive, active/active with load balancing |
|
QoS |
8 priority queues, DiffServ, modified strict queuing |
|
NAT |
Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing |
|
Link aggregation |
802.3ad dynamic, static, active/backup |
|
Other features |
Port Independence, Multi-WAN failover and load balancing, server load balancing, transparent/drop-in mode, USB modem as a dedicated interface |