WatchGuard Firebox M440
WatchGuard Firebox M440
BEST-OF-BREED SECURITY
■ Application-layer content inspection recognizes and blocks threats that stateful packet firewalls
cannot detect.
■ Powerful subscription-based security services boost protection in critical attack areas for
multiple layers of defense. By partnering with leading technology providers, WatchGuard
is able to integrate best-of-breed security components into one NGFW or UTM platform for
stronger security at big cost savings.
– APT Blocker uses a cloud-based sandbox with full system emulation to detect and block
advanced malware and zero day attacks.
– Application Control keeps unproductive, inappropriate, and dangerous applications off-limits.
– Intrusion Prevention Service (IPS ) delivers in-line protection from malicious exploits,
including buffer overflows, SQL injections, and cross-site scripting attacks.
– WebBlocker controls access to sites that host objectionable material or pose security risks.
– Gateway AntiVirus (GAV) scans traffic on all major protocols to stop threats.
– spamBlocker delivers continuous protection from unwanted and dangerous email.
– Reputation Enabled Defense ensures faster, safer web surfing with cloud-based reputation
look-up.
– Data Loss Prevention (DLP) automatically inspects data in motion for corporate policy violations.
■ Multiple VPN choices (IPSec, SSL, L2TP) for secure remote access include support for Android and
Apple iOS devices.
EASY TO MANAGE
■ Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity for immediate preventive or corrective actions.
■ WatchGuard Dimension™, a public and private cloud-ready visibility solution, instantly turns
raw data into security intelligence.
■ Intuitive management console centrally manages all security functions.
■ Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.
HIGHEST UTM PERFORMANCE IN THE INDUSTRY
■ Firewall throughput of up to 6.7 Gbps and UTM throughput of 1.6 Gbps.
■ No need to compromise protection for strong performance or vice versa. Multi-layered,
interlocking security protects the network while throughput remains high.
HIGH PORT DENSITY
■ 8 Power over Ethernet ports make the M440 an ideal Gateway Wireless Controller for
WatchGuard Access Points.
■ 25 1 Gb Ethernet and 2 SFP+ Fiber ports eliminate the need for a separate switch. (SFP+
transceivers available as optional accessory.)
■ Redundant power supplies ensure high availability. (Second power supply is an optional
accessory.)
Specification
STT | Tính năng | Watchguard Firebox M440 |
1 | THROUGHPUT | |
Firewall | 6.7 Gbps | |
VPN | 3.2 Gbps | |
AV | 2.2 Gbps | |
IPS | 2.2 Gbps | |
UTM | 1.6 Gbps | |
2 | CAPACITY | |
Interfaces 10/100/1000 | 25 1G copper (8 with PoE) 2 10G SFP+ | |
I/O interfaces | 1 SRL/2 USB | |
Concurrent connections (bi-directional) | 4,000,000 | |
New connections per second | 62,000 | |
VLANs | 400 | |
Authenticated users limit | Unrestricted | |
3 | VPN TUNNELS | |
Branch Office VPN | 300 | |
Mobile VPN IPSec | 300 | |
Mobile VPN SSL/L2TP | 300 | |
4 | SECURITY FEATURES | |
Firewall | Stateful packet inspection, deep packet inspection, proxy firewall | |
Application proxies | HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3 | |
Threat protection | DoS attacks, fragmented packets, blended threats and more | |
VoIP | H.323, SIP, call setup and session security | |
Filtering options | Browser Safe Search, YouTube for Schools, Google for Business | |
Security subscriptions | APT Blocker, IPS, Gateway AV, WebBlocker, App Control, Data Loss Prevention, Reputation Enabled Defense, Mobile Security, Network Discovery, spamBlocker, Threat Detection & Response | |
5 | VPN & AUTHETICATION | |
Encryption | DES, 3DES, AES 128-, 192-, 256-bit | |
IPSec | SHA-2, IKE pre-shared key, 3rd party cert | |
Single sign-on | Windows, Mac OS X, mobile operating systems, RADIUS | |
Authentication | RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, Duo, SMS Passcode | |
6 | MANAGEMENT | |
Logging and notifications | WatchGuard, Syslog, SNMP v2/v3 | |
User interfaces | Centralized console (WSM), Web UI, scriptable CLI | |
Reporting | WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools | |
7 | CERTIFICATIONS | |
Security | ICSA Firewall, ICSA IPSec VPN | |
Safety | NRTL/C, CB | |
Network | IPv6 Ready Gold (routing) | |
Hazardous substance control | WEEE, RoHS, REACH | |
8 | NETWORKING | |
QoS | 8 priority queues, DiffServ, modified strict queuing | |
IP address assignment | Static, DHCP (server, client, relay), PPPoE, DynDNS | |
NAT | Static, dynamic, 1:1, IPSec traversal, policy-based | |
Other features | Static routing, port Independence, transparent/drop-in mode |
Subscriptions
Product | Total Security Suite | Basic Security Suite |
Intrusion Prevention Service (IPS) | ✓ | ✓ |
App Control | ✓ | ✓ |
WebBlocker | ✓ | ✓ |
spamBlocker | ✓ | ✓ |
Gateway AntiVirus | ✓ | ✓ |
Reputation Enabled Defense (RED) | ✓ | ✓ |
Network Discovery | ✓ | ✓ |
APT Blocker | ✓ | |
Data Loss Protection (DLP) | ✓ | |
Dimension Command | ✓ | |
Threat Detection & Response | ✓ | |
Support | Gold (24×7) | Standard (24×7) |
Specs
System Performance
Firewall throughput | 6.7 Gbps |
Antivirus Throughput | 2.2 Gbps |
Concurrent connections | 4,000,000 |
New connections/sec | 62,000 |
IPS throughput | 2.2 Gbps |
VPN AES-128 Throughput | 3.2 Gbps |
VLANs | 400 |
Authenticated users limit | Unrestricted |
Branch Office VPN | 300 |
Mobile VPN IPSec | 300 |
Mobile VPN IPSec & SSL/L2TP | 300 |
Physical interfaces
GE RJ45 Ports | 25 x 1G cooper |
GE SFP Slots | 8 x PoE, 2 x 10G SFP+ |
I/O ports | 1 SRL / 2 USB |
Dimensions & Enviroment
Mounting | 1U rack mount kit included |
Dimensions Width x Depth x Height (inches) | 17 x 15.25 x 1.75 inches |
Dimensions Height x Width x Length (mm) | 43 x 38 x 4.4 cm |
Weight | 18 lbs (8.2 kg) |
Power supply | 100-250 VAC |
Power Consumption | 62 W |
Heat Dissipation | 211.55 BTU/h |
Operating Temperature | 32-113 F |
Storage Temperature | -40-158 F |
Humidity | 10-85% non-condensing |
Operating Attitude | 0-9843 ft at 95 F |
Certifications | CC EAL4+, FIPS 140-2, NRTL/C, CB, IPv6 Ready Gold (routing), WEEE, RoHS, REACH |