| STT | Tính năng | Watchguard Firebox T35 |
| 1 | THROUGHPUT | |
| Firewall | 940 Mbps |
| Firewall (IMIX) | 480 Mbps |
| VPN (UDP 1518) | 560 Mbps |
| VPN (IMIX) | 168 Mbps |
| Antivirus | 325 Mbps |
| IPS (fast/full scan) | 573 / 300 Mbps |
| UTM (fast/ full scan) | 278 / 203 Mbps |
| 2 | CAPACITY | |
| Interfaces 10/100/1000* | 5 |
| I/O interfaces | 1 SRL/2 USB |
| PoE ports | 1 |
| Concurrent connections | 1.3 M |
| Concurrent connections (proxy) | 135,000 |
| New connections per second | 6,800 |
| VLANs | 50 |
| WSM licenses (incl) | 0 |
| TDR Host Sensors included | 20 |
| Authenticated users limit | 200 |
| 3 | VPN TUNNELS | |
| Branch Office VPN | 25 |
| Mobile VPN | 25 |
| 4 | SECURITY FEATURES | |
| Firewall | Stateful packet inspection, deep packet inspection, proxy firewall |
| Application proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, POP3S, SMTP, IMAP, IMAPS, and Explicit Proxy |
| Threat protection | DoS attacks, fragmented & malformed packets, blended threats & more |
| VoIP | H.323, SIP, call setup and session security |
| Filtering options | Browser Safe Search, Google for Business |
| 5 | VPN & AUTHETICATION | |
| Cloud providers | AWS (Static/Dynamic), Azure (Static/Dynamic) |
| Encryption | AES 256-128 bit, 3DES, DES |
| IPSec | SHA-2, IKEv1/v2, IKE pre-shared key, 3rd party cert, Suite B |
| Single sign-on | Windows, Mac OS X, mobile operating systems, RADIUS |
| Authentication | RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, SMS Passcode |
| 6 | MANAGEMENT | |
| Logging and notifications | WatchGuard, Syslog, SNMP v2/v3 |
| User interfaces | Centralized console (WSM), Web UI, scriptable CLI |
| Reporting | WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools |
| 7 | CERTIFICATIONS | |
| Security | Pending: CC EAL4+, FIPS 140-2 |
| Safety | NRTL/C, CB |
| Network | IPv6 Ready Gold (routing) |
| Hazardous substance control | WEEE, RoHS, REACH |
| 8 | NETWORKING | |
| Routing | Static, SD-WAN Dynamic Path Selection |
| IP address assignment | Static, DHCP (server, client, relay), PPPoE, DynDNS |
| NAT | Static, dynamic, 1:1, IPSec traversal, policy-based |
| Wireless | Optional integrated 802.11ac dual band 2.4 GHz and 5 GHz Wi-Fi module |
| Other features | Server load balancing, static routing, port Independence, transparent/drop-in mode |
