WatchGuard Firebox T20 User Manual
DATASHEET
FIREBOX T20
Available with optional integrated wireless module
Up to 1.7 Gbps rewall throughput, 5 x 1Gb ports, 10 Branch Oce VPNs
ENTERPRISEGRADE SECURITY FOR THE SMALL AND HOME OFFICES
Designed to protect enterprise users where they connect – in the small oce/home oce – Firebox T20 allows businesses to
extend powerful network security to the remote workforce. With more features than any other small form-factor UTM rewall in its
class, Firebox T20 is a cost-eective security powerhouse that delivers enterprise-grade security in small package.
The Firebox T20 packs a powerful UTM rewall into a small form-factor tabletop box that can easily t
into my home oce. All the same security features as my corporate rewall in a unit sized for small
oces with centralized management.
~ Neil Holme, Owner, Impact Business Technology
PROTECT WHERE YOU CONNECT
WatchGuard Firebox T20 is a small form-factor appliance that brings big security to any
environment your users connect. Perfect for home and small oce networks, Firebox
T20 is a cost-eective security powerhouse that delivers a complete and industry-best
set of threat management solutions including gateway antivirus, content and URL
ltering, antispam, intrusion prevention, and application control, all in an easy-to-manage
package.
QUICK AND SIMPLE DEPLOYMENT
WatchGuard RapidDeploy makes it possible to eliminate much of the labor involved in
setting up a Firebox to work for your network – all without having to leave your oce.
RapidDeploy is a powerful, Cloud-based deployment and conguration tool that comes
standard with WatchGuard Firebox appliances. Local sta simply connect the device for
power and the Internet, the Internet, and the appliance simply connects to the Cloud for
all its conguration settings.
AUTOMATION TO THE CORE
WatchGuard Firebox T-series appliances are designed with automation to the core,
allowing your IT team to do more with less. The WatchGuard Automation Core makes it
possible to deploy from the Cloud, block threats, update signatures, and detect and kill
malware, all without lifting a nger.
FEATURES & BENEFITS
• 5 Gigabit Ethernet ports support
high-speed LAN backbone
infrastructures & gigabit WAN
connections.
• Wi-Fi capable Firebox T20-W
supports the 802.11ac Wi-Fi
standard, ensuring fast speeds for
your users.
• All logging and reporting
functions included with
purchase, with over 100
dashboards and reports
including PCI and HIPAA.
NETWORK OPTIMIZATION WITH SDWAN
Firebox T20 makes network optimization easy. With integrated SD-WAN, you can decrease
your use of expensive MPLS or 4G/LTE connections and inspect trac from home/small
oces while improving the resiliency and performance of your network.
WatchGuard Technologies, Inc.U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com
Firebox T20/20-W
THROUGHPUT
1
TECHNICAL SPECIFICATIONS
UTM (full scan)2 154 Mbps
Firewall (IMIX) 510 Mbps
VPN (IMIX) 140 Mbps
HTTPS (IPS enabled, full scan) 50 Mbps
Antivirus 328 Mbps
IPS (full scan) 271 Mbps
Firewall (UDP 1518) 1.7 Gbps
VPN (UDP 1518) 485 Mbps
CAPACITY
Interfaces 10/100/1000 5
I/O interfaces 1 Serial/2 USB
Concurrent connections 1.3 M
Concurrent connections (proxy) 100,000
New connections per second 8,500
VLANs 10
WSM licenses (incl) 0
TDR Host Sensors included 5
VPN TUNNELS
Branch Oce VPN
Mobile VPN
10
10
SECURITY FEATURES
Firewall
Application proxies
Threat protection
Filtering options
Stateful packet inspection, TLS decryption, proxy
rewall
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS,
IMAPS and Explicit Proxy
DoS attacks, fragmented & malformed packets,
blended threats
Browser Safe Search, Google for Business
VPN
Site to Site VPN
Remote Access VPN
IKEv2, IPSec, Policy and Route Based Tunnels, TLS
hub and spoke
IKEv2, IPSec, L2TP, TLS
VISIBILITY
Logging and notications
Reporting
CERTIFICATIONS
Security
Safety
Network
Hazardous substance control
WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3
WatchGuard Cloud includes over 100 pre-dened
reports, executive summary and visibility tools
Pending: CC EAL4+, FIPS 140-2
NRTL/CB
IPv6 Ready Gold (routing)
WEEE, RoHS, REACH
NETWORKING
SD-WAN
Dynamic Routing
High Availability
QoS
Trac Management
IP address assignment
NAT
Link aggregation
Multi-wan failover, dynamic path selection, jitter/
loss/latency measurement
RIP, OSPF, BGP
Active/passive, active/active
802.1Q, DSCP, IP Precedence
By policy or application
Static, DHCP (server, client, relay), PPPoE, DynDNS
Static, dynamic, 1:1, IPSec traversal, policy-based
802.3ad dynamic, static, active/backup
LEDs
USB
Network Interfaces
Power Switch
PHYSICAL AND POWER SPECIFICATIONS
Product Dimensions
Shipping Dimension
Product Weight
Shipping Weight
Power Consumption
Power
ENVIRONMENT
Temperature
Relative Humidity
Altitude
MTBF
8” x 8.5” x 1.7” (203.2 x 215.9 x 43.2 mm)
12.1”x 10.2”x 7.2” (308x261x181 mm)
1.94 lbs (0.88 kg)
T20-W: 1.98 lbs (0.9 kg)
4.1 lbs (1.86 kg)
24 Watts
100-240 VAC Autosensing
OPERATING STORAGE
32° F to 104° F
0° C to 40° C
10% to 85%
non-condensing
0 to 9,843 ft at 95° F
(3,000 m at 35° C)
1,101,388 hours
-40° F to 158° F
-40° C to 70° C
10% to 85%
non-condensing
0 to 15,000 ft at 95° F
(4,570 m at 35° C)
STRONG SECURITY AT EVERY LAYER
Uniquely architected to be the industry’s smartest, fastest, and most
eective network security products, WatchGuard solutions deliver
in-depth defenses against advanced malware, ransomware, botnets,
trojans, viruses, drive-by downloads, data loss, phishing and much
more. Total and Basic Security Suite packages are available on all
Firebox solutions.
Product Support
Stateful Firewall
VPN
SD-WAN
Intrusion Prevention Service (IPS)
App Control
WebBlocker
spamBlocker
Gateway AntiVirus
Reputation Enabled Defense (RED)
Network Discovery
APT Blocker
Threat Detection & Response
DNSWatch
Access Portal*
IntelligentAV*
WatchGuard Cloud Visibility
Data Retention
Support
*Not available on T15 or T20 appliances
Standard (24x7)
For details, talk to your authorized WatchGuard reseller or visit
www.watchguard.com.
1
Throughput rates are determined using multiple ows through multiple ports and will vary depending on environment
and conguration. Max rewall throughput tested via direct connection using 1518 byte UDP frame based on RFC 2544
methodology. All testing performed on Fireware version 12.6.1.
2
UTM throughput is measured using HTTP trac with AV, IPS, and Application Control enabled, and does not account for
all security services available on the appliance.
TOTAL SECURITY
30 Days
Gold (24x7)
Basic Security
1 Day
Standard (24x7)
No express or implied warranties are provided for herein. All specications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. © 2020 WatchGuard Technologies, Inc. All rights reserved.
WatchGuard, the WatchGuard logo, Firebox, DNSWatch and IntelligentAV are trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners.
Part No. WGCE67326_052820
WatchGuard Technologies, Inc.U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com
Loading...