| STT | Tính năng | Watchguard Firebox M670 |
| 1 | THROUGHPUT | |
| Firewall | 34 Gbps |
| Firewall (IMIX) | 11.2 Gbps |
| VPN (UDP 1518) | 7.6 Gbps |
| VPN (IMIX) | 2.6 Mbps |
| HTTPS (IPS enabled) | 4.0 Gbps |
| AntiVirus | 6.2 Gbps |
| IPS (fast/full scan) | 10.4/5.6 Gbps |
| UTM (fast/full scan) | 5.4/4.2 Gbps |
| 2 | CAPACITY | |
| Interfaces 10/100/1000* | 8 (optional modules available) |
| I/O interfaces | 1 SRL/2 USB |
| Concurrent connections | 8,500,000 |
| Concurrent connections (proxy) | 920,000 |
| New connections per second | 140,000 |
| VLANs | 750 |
| WSM licenses (incl) | 4 |
| TDR Host Sensors included | 250 |
| Authenticated users limit | Unrestricted |
| 3 | VPN TUNNELS | |
| Branch Office VPN | 750 |
| Mobile VPN | 750 |
| 4 | SECURITY FEATURES | |
| Firewall | Stateful packet inspection, deep packet inspection, proxy firewall |
| Application proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, SMTP, IMAPS, POP3S and Explicit Proxy |
| Threat protection | DoS attacks, fragmented & malformed packets, blended threats & more |
| VoIP | H.323, SIP, call setup and session security |
| Filtering options | Browser Safe Search, Google for Business |
| 5 | VPN & AUTHETICATION | |
| Cloud providers | AWS (Static/Dynamic), Azure (Static/Dynamic) |
| Encryption | AES 256-128 bit, 3DES, DES |
| IPSec | SHA-2, IKEv1/v2, IKE pre-shared key, 3rd party cert, Suite B |
| Single sign-on | Windows, macOS, mobile operating systems, RADIUS, SAML 2.0 |
| Authentication | RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, SAML 2.0, SMS Passcode |
| 6 | MANAGEMENT | |
| Logging and notifications | WatchGuard, Syslog, SNMP v2/v3 |
| User interfaces | Centralized console (WSM), Web UI, scriptable CLI |
| Reporting | WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools |
| 7 | CERTIFICATIONS | |
| Security | CC EAL4+ Pending: ICSA Firewall, ICSA IPSec VPN, FIPS 140-2 |
| Safety | NRTL/C, CB |
| Network | IPv6 Ready Gold (routing) |
| Hazardous substance control | WEEE, RoHS, REACH |
| 8 | NETWORKING | |
| Routing | Static, Dynamic (BGP4, OSPF, RIP v1/v2), SD-WAN Dynamic Path Selection |
| High Availability | Active/passive, active/active with load balancing |
| QoS | 8 priority queues, DiffServ, modified strict queuing |
| IP address assignment | Static, DHCP (server, client, relay), PPPoE, DynDNS |
| NAT | Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing |
| Link aggregation | 802.3ad dynamic, static, active/backup |
| Other features | Port Independence, Multi-WAN failover and load balancing, server load balancing, host header redirection, USB modem as a dedicated interface |
