Free Consultant
Sales HCM - Hà Nội
Hỗ trợ kỹ thuật

WatchGuard Firebox M5600 Firewall

Ideal for large, distrubuted enterprise and data center

WatchGuard Firebox M5600

WatchGuard Firebox M4600 & M5600 Overview:

The Firebox M4600 and M5600 provide enterprise-grade security and industry-leading price/performance, with the ability to customize port configurations. Ideal as a hub appliance for headquarters with many remote locations to secure, the M4600 and M5600 give IT pros maximum flexibility to meet their specific network requirements.

WatchGuard Firebox M4600

WatchGuard Firebox M5600

The Firebox M4600 & M5600 Series are recommended for corporate datacenters and distributed enterprises.

Optional Modules:

Choose the network interface modules that support your ideal M4600 or M5600 deployment:

4 x 10 Gb Fiber Module 8 x 1 Gb Fiber Module 8 x 1 Gb Copper Module
4 x 10 Gb Fiber      8 x 1 Gb Fiber 8 x 1 Gb Copper




Best-In-Class Security:

  • Application-layer content inspection recognizes and blocks threats that stateful packet firewalls cannot detect.
  • Powerful subscription-based security services boost protection in critical attack areas for multiple layers of defense. By partnering with leading technology providers, WatchGuard is able to integrate best-in-class security components into one platform for stronger security at big cost savings.
  • Advanced networking features, such as dynamic routing and link aggregation, allow you to add security without needing to change existing network infrastructure.
  • Multiple VPN choices (IPSec, SSL, L2TP) for secure remote access include support for Android and Apple iOS devices.

Easy to Manage:

  • WatchGuard Dimension™, a public and private cloud-ready visibility solution, instantly turns raw data into security intelligence.
  • Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
  • Intuitive management console centrally manages all security functions.
  • WAN and VPN failover provide redundancy for increased reliability.
  • Extend best-in-class UTM (Unifed Threat Management) security to the WLAN by adding WatchGuard’s Wireless Access Points.
  • Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.
  • Redundant hot-swappable power supply is included to help ensure maximum uptime.


WatchGuard Firebox M4600 & M5600 Detailed Specs


Firebox M4600

Firebox M5600

Configuration: base + 4 x 10 Gb interfaces base + 4 x 10 Gb interfaces
Firewall Throughput* 40 Gbps 60 Gbps
VPN Throughput* 10 Gbps 10 Gbps
AV Throughput* 9 Gbps 12 Gbps
IPS Throughput* 13 Gbps 18 Gbps
UTM Throughput* 8 Gbps 11 Gbps
Interfaces Installed 8 x 1G 8 x 1 Gb and 4 x 10 Gb
I/O Interfaces 1 serial/2 USB 2 serial/2 USB
Concurrent connections (bi-directional) 7.5 million 12.7 million
New connections per second 160,000 240,000
VLANs 1,000 Unlimited
Authenticated users limit Unrestricted Unrestricted
VPN Tunnels
Branch Office VPN 5,000 Unlimited
Mobile VPN IPSec 10,000 Unlimited
Mobile VPN SSL/L2TP 10,000 Unlimited
Firewall Stateful packet inspection, deep packet inspection, proxy firewall
Application Proxies HTTP, HTTPS, SMTP, POP3, TCP-UDP, FTP, DNS
Threat Protection DoS attacks, fragmented & malformed packets, blended threats & more
VoIP H.323, SIP, call setup and session security
Filtering options Browser Safe Search, YouTube for Schools
Security Subscriptions Application Control, Intrusion Prevention Service, WebBlocker, Data Loss Prevention, Gateway AntiVirus, spamBlocker, Reputation Enabled Defense, APT Blocker
VPN & Authentication
Encryption DES, 3DES, AES 128-, 192-, 256-bit
IPSec SHA-1, SHA-2, MD5, IKE pre-shared key, 3rd party cert
Single Sign-On Supports Windows, Mac OS X, mobile operating systems
Authentication RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database
Logging and notifications WatchGuard, Syslog, SNMP v2/v3
User interfaces Centralized console (WSM), Web UI, scriptable CLI
Reporting WatchGuard Dimension includes 70 pre-defined reports, executive summary and visibility tools
Security Pending: ICSA Firewall, ICSA IPSec VPN, CC EAL4+, FIPS 140-2
Safety NRTL/C, CB
Network IPv6 Ready Gold (routing)
Hazardous substance control WEEE, RoHS, REACH
Routing Static, Dynamic (BGP, OSPF, RIP), Policy-based VPN
High Availability Active/passive, active/active with load balancing
QoS 8 priority queues, DiffServ, modified strict queuing
IP Address Assignment Static, DHCP (server, client, relay), PPPoE, DynDNS
NAT Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing
Link aggregation 802.3ad dynamic, static, active/backup
Other Features Port Independence, Multi-WAN failover and load balancing, server load balancing, transparent/drop-in mode
Product Dimensions 17” x 1.8” x 18.5” (431 x 44 x 468 mm) 17.4” x 1.8” x 22 (438 x 44 x 580 mm)
Shipping Dimensions 32” x 8.9” x 23” (795 x 225 x 595 mm) 23.5” x 8.9” x 31” (595 x 225 x 795 mm)
Shipping Dimensions 10G Module 6.3” x 3.2” x 12” (160 x 80 x 300 mm)
Weight 38 lb (17 kg) 46 lb (21 kg)
Shipping Weight Module .44 lb (.2 kg)
AC Power 100-240 VAC Autosensing
Power Consumption U.S. 75 Watts (max), 256 BTU/hr (max)
Rack Mountable Sliding rack rails included
Environment Operating Storage
Temperature 32° F to 104° F 0° C to 40° C -40° F to 158° F -40° C to 70° C
Relative Humidity 10% to 85% non-condensing 10% to 95% non-condensing
Altitude 0 to 9,843 ft at 95° F (3,000 m at 35° C) 0 to 15,000 ft at 95° F (4,570 m at 35° C)
MTBF 50,843 hours @ 77° F (25° C) 68,879 hours @ 77° F (25° C)
MTBF Module 3,863,276 hours @ 77° F (25° C)

*Throughput rates are dependent on network interface modules selected for your M4600 or M5600 deployment.

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration. Max firewall throughput tested using 1518 byte UDP packets based on RFC 2544 methodology.

Options & Upgrades:


Security Subscriptions


Data Loss Prevention (DLP)Data Loss Prevention (DLP)
XTM DLP prevents data breaches by scanning text and common file types to detect sensitive information. A predefined library of over 200 rules for 18 countries makes creating and updating corporate data policies as easy as point and click.


Application ControlApplication Control
Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth.


Reputation Enabled DefenseReputation Enabled Defense
Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead.
WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks.
spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry.
Gateway AntiVirusGateway AntiVirus
Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time.

Intrusion Prevention ServiceIntrusion Prevention Service
Intrusion Prevention Service works hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

LiveSecurity ServiceLiveSecurity Service
LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.


Nhà phân phối chính thức thiết bị Tường Lửa WatchGuard tại Việt Nam