Free Consultant
Sales HCM - Hà Nội
Hỗ trợ kỹ thuật

WatchGuard Firebox M440 Firewall

Comprehensive Protection with High Port Density

WatchGuard Firebox M440 Firewall

WatchGuard Firebox M440 Overview:

The Firebox M440 incorporates the same strong security, high performance and flexible management tools that distinguish our other UTM and NGFW solutions, but this model delivers especially robust port density with twenty-five 1Gb Ethernet ports and two 10 Gb SFP+ (fiber) ports. Eight of the ports provide Power over Ethernet (PoE), which is ideal for WatchGuard Access Points.

Because it's rich in independent ports, the Firebox M440 is an excellent platform for defining different network segments, which industry experts acknowledge as the best practice for securing and protecting data. WatchGuard makes it easy to define policy and add security services for each segment. The new policy map feature in WatchGuard Dimension™, which comes standard on all M440 appliances, provides excellent visibility to the traffic in each segment.

  • Comprehensive Protection - Best-of-breed security services boost protection in critical attack areas, including gateway AV, URL and web content filtering, intrusion prevention, app control, and spam blocking.
  • Real-time Visibility - A suite of big-data style visibility and reporting tools are included at no additional cost. Use the Policy Map dashboard to quickly find active and misconfigured policies and drill down as needed.
  • High Port Density - Includes 25 1Gb ports (8 of which have PoE) and 2 10Gb ports
  • Outstanding Performance - Up to 6.7 Gbps firewall throughput and 3.2 Gbps VPN throughput. Turn on optional security services and still see an amazing 1.6 Gbps throughput. WatchGuard leads the industry in performance when those critical services are enabled.
  • 3 Ways to Manage Your Appliance - You have the power to choose how you manage your WatchGuard appliance, including WatchGuard System Manager, the command line interface, and a web UI for access from anywhere, anytime.
  • Quick and Secure Setup - Take advantage of innovative features like drag-and-drop VPN creation and RapidDeploy technology to make fast work of extending your network.
  • Advanced Networking - Intuitive management console enables quick copying of corporate policy across multiple appliances.
  • Remote Connectivity Options - Includes SSL and IPSec VPN for flexibility in remote access with support for Apple iOS devices such as the iPhone, iPad, and iPod touch.
  • Application Control - Control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.


Best-of-Breed Security:

  • Application-layer content inspection recognizes and blocks threats that stateful packet firewalls cannot detect.
  • Powerful subscription-based security services boost protection in critical attack areas for multiple layers of defense. By partnering with leading technology providers, WatchGuard is able to integrate best-of-breed security components into one NGFW or UTM platform for stronger security at big cost savings.
    • APT Blocker uses a cloud-based sandbox with full system emulation to detect and block advanced malware and zero day attacks.
    • Application Control keeps unproductive, inappropriate, and dangerous applications off-limits.
    • Intrusion Prevention Service (IPS) delivers in-line protection from malicious exploits, including buffer overflows, SQL injections, and cross-site scripting attacks.
    • WebBlocker controls access to sites that host objectionable material or pose security risks.
    • Gateway AntiVirus (GAV) scans traffic on all major protocols to stop threats.
    • spamBlocker delivers continuous protection from unwanted and dangerous email.
    • Reputation Enabled Defense ensures faster, safer web surfing with cloud-based reputation look-up.
    • Data Loss Prevention (DLP) automatically inspects data in motion for corporate policy violations.
  • Multiple VPN choices (IPSec, SSL, L2TP) for secure remote access include support for Android and Apple iOS devices.

Easy To Manage:

  • Interactive, real-time monitoring and reporting - at no additional charge - give an unprecedented view into network security activity for immediate preventive or corrective actions.
  • WatchGuard Dimension™, a public and private cloud-ready visiblity solution, instantly turns raw data into security intelligence.
  • Intuitive management console centrally manages all security functions.
  • Drag-and-drop Branch Office VPN setup - three clicks and your remote office is connected.

Highest UTM Performance In The Industry:

  • Firewall throughput of up to 6.7 Gbps and UTM throughput of 1.6 Gbps.
  • No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.

Highest Port Density:

  • 8 Power over Ethernet ports make the M440 an ideal Gateway Wireless Controller for WatchGuard Access Points.
  • 25 1 Gb Ethernet and 2 SFP+ Fiber ports eliminate the need for a separate switch. (SFP+ transceivers available as optional accessory.)
  • Redundant power supplies ensure high availability. (Second power supply is an optional accessory.)


WatchGuard Firebox M440 Rear View

WatchGuard Firebox M440 Detailed Specs
Firewall Throughput 6.7 Gbps
VPN Throughput 3.2 Gbps
AV Throughput 2.2 Gbps
IPS Throughput 2.2 Gbps
UTM Throughput 1.6 Gbps
Interfaces 25 1G copper (8 with PoE), 2 10G SFP+
I/O Interfaces 1 SRL/1 USB
VLANs 400
Concurrent connections (bi-directional) 4,000,000
New connections per second 62,000
Authenticated users limit Unrestricted
VPN Tunnels
Branch Office VPN 300
Mobile VPN IPSec 200
Mobile VPN SSL/L2TP 200
Firewall Stateful packet inspection, deep packet inspection, proxy firewall
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Threat Protection DoS attacks, fragmented packets, blended threats and more
VoIP H.323, SIP, call setup and session security
Filtering options Browser Safe Search, YouTube for Schools
Security Subscriptions Application Control, IPS, WebBlocker, GAV, Data Loss Prevention, spamBlocker, Reputation Enabled Defense, APT Blocker
VPN & Authentication
Encryption DES, 3DES, AES 128-, 192-, 256-bit
IPSec SHA-1, SHA-2, MD5, IKE pre-shared key, 3rd party cert
Single Sign-On Supports Windows, Mac OS X, mobile operating systems
Authentication RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database
Logging and notifications WatchGuard System Manager v11.7 or higher
User interfaces SNMP v2/v3, Email, Mgmt. System Alert
Reporting Logging, Reporting, Quarantine, WebBlocker, Management
Security Pending: ICSA Firewall, ICSA IPSec VPN
Safety NRTL/C, CB
Network IPv6 Ready Gold (routing)
Hazardous substance control WEEE, RoHS, REACH
QoS 8 priority queues, DiffServ, modified strict queuing
IP Address Assignment Static, DHCP (server, client, relay), PPPoE, DynDNS
NAT Static, dynamic, 1:1, IPSec traversal, policy-based
Other Features Static routing, port Independence, transparent/drop-in mode
Product Dimensions 17” x 15.25” x 1.75”  (43 x 38 x 4.4 cm)
Shipping Dimensions 18” x 21” x 5.25” (45.7 x 53.3 x 13.3 cm)
Weight 18 lbs (8.2 Kg)
AC Power 100-250 VAC Autosensing
Power Consumption U.S. 62 Watts (211.55 BTU/hr) (max)
Power over Ethernet 802.3at - 25W per port
Rack Mountable 1U rack mount kit included
Temperature 32° F to 113° F (0° C to 45° C) -40° F to 158° F (-40° C to 70° C)
Relative Humidity 10% to 85% non-condensing 10% to 95% non-condensing
Altitude 0 to 9,843 ft at 95° F (3,000 m at 35° C) 0 to 15,000 ft at 95° F (4,570 m at 35° C)
MTBF 65,000 hours at 77° F (25° C )

Models Comparison:

WatchGuard Firebox M440 Models Comparison
WatchGuard® Model  Firebox M440 XTM 535 XTM 545
Ideal For Small to mid-size business Main offices / headquarters looking for security in an all-in-one solution, engineered with room for growth Main offices / headquarters that require enterprise-grade performance and powerful security with flexible, centralized management
Model Upgradeable N/A to XTM 545 N/A
Interfaces 25: 10/100/1000 (8 with PoE)
2: 10G SFP+ Fiber
6: 10/100/1000 and 1:10/100 6: 10/100/1000 and 1:10/100
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more) X X X
Wireless Models Only N/A N/A N/A
User Authentication with transparent Windows authentication X X X
Firewall Throughput 6.7 Gbps 3 Gbps 3.5 Gbps
VPN Throughput 3.2 Gbps 550 Mbps 750 Mbps
AV Throughput 2.2 Gbps 1.8 Gbps 2 Gbps
IPS Throughput 2.2 Gbps 2.4 Gbps 2.8 Gbps
UTM Throughput 1.6 Gbps 1.4 Gbps 1.7 Gbps
Concurrent Sessions*
4,000,000 100,000 350,000
VPN Tunnels
Branch Office VPN Tunnels (Max.) 300 200 600
Mobile VPN with SSL/L2TP (Incl/Max) 200 300 600
Mobile VPN with IPSec Client Licenses (Bundled) 200 300 1,000
Mobile VPN with IPSec Tunnels (Max.) 200 300 1,000
VPN Authentication X X X
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates. 4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack. 4-device WatchGuard System Manager license included with purchase. 4-device WatchGuard System Manager license included with purchase.
Networking Features
Dynamic NAT X X X
Static NAT X X X
One to One NAT X X X
VLAN 400 300 400
Policy-Based Routing X X X
WAN Failover X X X
Multi-WAN Load Balancing X X X
Server Load Balancing X X X
Traffic Management/QoS X X X
High Availability Active/Active or Active/Passive X X X
Dynamic Routing X X X
VoIP (SIP and H.323) Support X X X
Additional Security Subscriptions
Application Control Optional Optional Optional
Data Loss Prevention Optional Optional Optional
Reputation Enabled Defense Optional Optional Optional
spamBlocker with Virus Outbreak Detection Optional Optional Optional
Gateway AntiVirus
Intrusion Prevention Service (IPS)
Optional Optional Optional
WebBlocker with HTTPS URL filtering Optional Optional Optional
LiveSecurity® Service Live Security Plus with 24/7 support included with Security Bundle Live Security Plus with 24/7 support included with Security Bundle Live Security Plus with 24/7 support included with Security Bundle

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.

Options & Upgrades:


Security Subscriptions


Data Loss Prevention (DLP)Data Loss Prevention (DLP)
XTM DLP prevents data breaches by scanning text and common file types to detect sensitive information. A predefined library of over 200 rules for 18 countries makes creating and updating corporate data policies as easy as point and click.


Application ControlApplication Control
Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth.


Reputation Enabled DefenseReputation Enabled Defense
Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead.
WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks.
spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry.
Gateway AntiVirusGateway AntiVirus
Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time.

Intrusion Prevention ServiceIntrusion Prevention Service
Intrusion Prevention Service works hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

LiveSecurity ServiceLiveSecurity Service
LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.


Nhà phân phối chính thức thiết bị Tường Lửa WatchGuard tại Việt Nam