DATASHEET
FIREBOX T40
Available with optional integrated wireless radio
Up to 3.4 Gbps rewall throughput, 5 x 1Gb ports, 30 Branch Oce VPNs
ENTERPRISEGRADE SECURITY FOR BRANCH OFFICES AND RETAIL ENVIRONMENTS
WatchGuard Firebox T40 tabletop appliances bring enterprise-level network security to those small oce/branch oce and
small retail environments. These appliances are small-footprint, cost-eective security powerhouses that deliver all the features
present in WatchGuard’s higher-end UTM appliances, including all security capabilities such as AI-powered anti-malware, threat
correlation and DNS-ltering.
We are deeply impressed by the outstanding performance of this tabletop device. This device, having
one PoE+ port for powering a phone or access point, is an excellent choice for connecting home oces
or smaller branch oces.
~ Bernd Och, CEO, BOC IT-Security GmbH
BIG SECURITY IN A SMALL APPLIANCE
With the Total Security Suite, WatchGuard’s Firebox includes a complete and industrybest set of threat management solutions including gateway antivirus, content and URL
ltering, antispam, intrusion prevention, application control, Cloud sandboxing, and
endpoint protections, all in an easy-to-manage package.
QUICK AND SIMPLE DEPLOYMENT
WatchGuard RapidDeploy makes it possible to eliminate much of the labor involved in
setting up a Firebox to work within your existing network – all without having to leave
your oce. RapidDeploy is a powerful, Cloud-based deployment and conguration tool
that comes standard with WatchGuard Firebox appliances. Local sta simply connect the
device for power and the Internet, the Internet, and the appliance simply connects to the
Cloud for all its conguration settings.
INTEGRATED POWER OVER ETHERNET POE+
Integrated support for PoE+ means you can avoid running separate power cables to
peripheral devices like security cameras, VoIP phones or wireless access points.
AUTOMATION TO THE CORE
WatchGuard Firebox T Series appliances are designed with automation to the core,
allowing your IT team to do more with less. The WatchGuard Automation Core makes it
possible to deploy from the Cloud, block threats, update signatures, and detect and kill
malware, all without lifting a nger.
FEATURES & BENEFITS
• 5 Gigabit Ethernet ports support
high-speed LAN backbone
infrastructures & gigabit WAN
connections.
• Integrated PoE+ port for
powering peripheral devices.
• Wi-Fi capable Firebox T40-W
supports the 802.11ac Wi-Fi
standard, ensuring fast speeds for
your users.
• All logging and reporting
functions included with
purchase, with over 100
dashboards and reports
including PCI and HIPAA.
NETWORK OPTIMIZATION WITH SDWAN
Firebox T40 makes network optimization easy. With integrated SD-WAN, you can decrease
your use of expensive MPLS or 4G/LTE connections and inspect trac from small oces
while improving the resiliency and performance of your network.
WatchGuard Technologies, Inc.U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com
Firebox T40/40-W
THROUGHPUT
1
TECHNICAL SPECIFICATIONS
UTM (full scan)2 300 Mbps
Firewall (IMIX) 1 Gbps
VPN (IMIX) 272 Mbps
HTTPS (IPS enabled, full scan) 92 Mbps
Antivirus 623 Mbps
IPS (full scan) 510 Mbps
Firewall (UDP 1518) 3.4 Gbps
VPN (UDP 1518) 880 Mbps
CAPACITY
Interfaces 10/100/1000 5
I/O interfaces 1 Serial/2 USB
Concurrent connections 4.3 M
Concurrent connections (proxy) 200,000
New connections per second 18,000
VLANs 50
WSM licenses (incl) 0
TDR Host Sensors included 20
VPN TUNNELS
Branch Oce VPN
Mobile VPN
30
30
SECURITY FEATURES
Firewall
Application proxies
Threat protection
Filtering options
Stateful packet inspection, TLS decryption,
proxy rewall
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS,
IMAPS and Explicit Proxy
DoS attacks, fragmented & malformed packets,
blended threats
Browser Safe Search, Google for Business
VPN
Site to Site VPN
Remote Access VPN
IKEv2, IPSec, Policy and Route Based Tunnels,
TLS hub and spoke
IKEv2, IPSec, L2TP, TLS
VISIBILITY
Logging and notications
Reporting
CERTIFICATIONS
Security
Safety
Network
Hazardous substance control
WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3
WatchGuard Cloud includes over 100 pre-dened
reports, executive summary and visibility tools
Pending: CC, FIPS 140-2
NRTL/CB
IPv6 Ready Gold (routing)
WEEE, RoHS, REACH
NETWORKING
SD-WAN
Dynamic Routing
High Availability
QoS
Trac Management
IP address assignment
NAT
Link aggregation
Multi-wan failover, dynamic path selection, jitter/
loss/latency measurement
RIP, OSPF, BGP
Active/passive, active/active
802.1Q, DSCP, IP Precedence
By policy or application
Static, DHCP (server, client, relay), PPPoE, DynDNS
Static, dynamic, 1:1, IPSec traversal, policy-based
802.3ad dynamic, static, active/backup
LEDs
USB
Network Interfaces
Power Switch
PHYSICAL AND POWER SPECIFICATIONS
Product Dimensions
Shipping Dimension
Product Weight
Shipping Weight
Power Consumption
Power
ENVIRONMENT
Temperature
Relative Humidity
Altitude
MTBF
8” x 8.5” x 1.7” (203.2 x 215.9 x 43.2 mm)
12.1”x 10.2”x 7.2” (308x261x181 mm)
1.94 lbs (0.88 kg)
T40-W: 1.98 lbs (0.9 kg)
4.1 lbs (1.86 kg)
25 Watts (no PoE)
60 Watts (PoE)
100-240 VAC Autosensing
OPERATING STORAGE
32° F to 104° F
0° C to 40° C
10% to 85%
non-condensing
0 to 9,843 ft at 95° F
(3,000 m at 35° C)
157,751 hours
-40° F to 158° F
-40° C to 70° C
10% to 85%
non-condensing
0 to 15,000 ft at 95° F
(4,570 m at 35° C)
STRONG SECURITY AT EVERY LAYER
Uniquely architected to be the industry’s smartest, fastest, and most
eective network security products, WatchGuard solutions deliver
in-depth defenses against advanced malware, ransomware, botnets,
trojans, viruses, drive-by downloads, data loss, phishing and much
more. Total and Basic Security Suite packages are available on all
Firebox solutions.
Product Support
Stateful Firewall
VPN
SD-WAN
Intrusion Prevention Service (IPS)
App Control
WebBlocker
spamBlocker
Gateway AntiVirus
Reputation Enabled Defense (RED)
Network Discovery
APT Blocker
Threat Detection & Response
DNSWatch
Access Portal*
IntelligentAV*
WatchGuard Cloud Visibility
Data Retention
Support
*Not available on T15 or T20 appliances
Standard (24x7)
For details, talk to your authorized WatchGuard reseller or visit
www.watchguard.com.
1
Throughput rates are determined using multiple ows through multiple ports and will vary depending on environment
and conguration. Max rewall throughput tested via direct connection using 1518 byte UDP frame based on RFC 2544
methodology. All testing performed on Fireware version 12.6.1.
2
UTM throughput is measured using HTTP trac with AV, IPS, and Application Control enabled, and does not account for
all security services available on the appliance.
TOTAL SECURITY
30 Days
Gold (24x7)
Basic Security
1 Day
Standard (24x7)
No express or implied warranties are provided for herein. All specications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. ©2020 WatchGuard Technologies, Inc. All rights reserved.
WatchGuard, the WatchGuard logo, Firebox, DNSWatch and IntelligentAV are trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners.
Part No. WGCE67327_052820
WatchGuard Technologies, Inc.U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com