STT | Tính năng | Watchguard Firebox T15 |
1 | THROUGHPUT | |
| Firewall | 400 Mbps |
| Firewall (IMIX) | 120 Mbps |
| VPN (UDP 1518) | 150 Mbps |
| VPN (IMIX) | 46 Mbps |
| Antivirus | 120 Mbps |
| IPS (fast/fulscan) | 160 Mbps / 80 Mbps |
| UTM (fast/ ful scan) | 90 Mbps/ 52 Mbps |
2 | CAPACITY | |
| Interface 10/100/1000 | 3 |
| PoE ports | N/A |
| I/O interfaces | 1 SRL/1 USB 2.0 |
| Concurrent connections | 100,000 |
| Concurrent connections (proxy) | 95,000 |
| New connections per second | 2,400 |
| VLANs | 10 |
| WSM licenses (incl) | 0 |
| TDR Host Sensors included | 5 |
| Authenticated users limit | 200 |
3 | VPN TUNNELS | |
| Branch Office VPN | 5 |
| Mobile VPN | 5 |
4 | SECURITY FEATURES | |
| Firewall | Stateful packet inspection, deep packet inspection, proxy firewall |
| Application proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, POP3S, SMTP, IMAP, IMAPS, and Explicit Proxy |
| Threat protection | DoS attacks, fragmented & malformed packets, blended threats & more |
| VoIP | H.323, SIP, call setup and session security |
| Filtering options | Browser Safe Search, Google for Business |
5 | VPN & AUTHENTICATION | |
| Cloud providers | AWS (Static/Dynamic), Azure (Static/Dynamic) |
| Encryption | AES 256-128 bit, 3DES, DES |
| IPSec | SHA-2, IKEv1/v2, IKE pre-shared key, 3rd party cert, Suite B |
| Single sign-on | Windows, Mac OS X, mobile operating systems, RADIUS |
| Authentication | RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, Duo, SMS Passcode |
6 | MANAGEMENT | |
| Logging and notifications | WatchGuard, Syslog, SNMP v2/v3 |
| User interfaces | Centralized console (WSM), Web UI, scriptable CLI |
| Reporting | WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools |
7 | CERTIFICATIONS | |
| Security | Pending: CC EAL4+, FIPS 140-2 |
| Safety | NRTL/C, CB |
| Network | IPv6 Ready Gold (routing) |
| Hazardous substance control | WEEE, RoHS, REACH |
8 | NETWORKING | |
| Routing | Static, SD-WAN Dynamic Path Selection |
| IP address assignment | Static, DHCP (server, client, relay), PPPoE, DynDNS |
| NAT | Static, dynamic, 1:1, IPSec traversal, policy-based |
| Wireless | Optional integrated 802.11b/g/n dual band 2.4 GHz and 5 GHz Wi-Fi module |