WatchGuard Firebox T15/T15-W

Protect Where You Connect

WatchGuard Firebox T15 Overview:

The WatchGuard Firebox® T15 allows enterprise network security pros to build a new perimeter – one that matches the reality of today's distributed work style.

The Firebox T15 delivers complete enterprise-level network security. Ideal for small office/home office and small retail environments, it can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard's RapidDeploy™ technology enable administrators to quickly set up a T15 device at remote locations so businesses can ensure that they protect everywhere they connect. It sustains up to 200 Mbps firewall throughput and 55 Mbps UTM throughput, and includes three 1-Gigabit Ethernet ports. WatchGuard Dimension™, which provides real-time visibility into network activity and security events, is included at no additional cost.

Comprehensive protection Delivers full-strength threat management to safeguard intellectual property, data, confidential records and more.	Simple configuration Cloud-based RapidDeploy™ capability instantly self-configures the appliance and begins reporting back to the administrator's central console.
Real-time visibility A suite of big-data style visibility and reporting tools are included that instantly isolate and distill key security issues and trends.	Web UI Anywhere, anytime Web UI allows IT to directly manage all security functions on the appliance.
Central management Intuitive management console enables quick copying of corporate policy across multiple appliances.	Home office Ideal for use to create secure perimeters around home office environments.
Compliance reporting Built-in reports for PCI and HIPAA mean one-click access to the data you need to ensure compliance requirements are covered.	Layer on protection Powerful security services that boost protection in critical attack areas include URL filtering, Application Control, Data Loss Prevention, and more.

Features:

Best-of-Breed Security

Application-layer content inspection recognizes and blocks threats that stateful packet firewalls cannot detect.
Powerful subscription-based security services boost protection in critical attack areas for multiple layers of defense. By partnering with leading technology providers, WatchGuard is able to integrate best-of-breed security components into one Unified Threat Management platform for stronger security at big cost savings.
- Application Control keeps unproductive, inappropriate, and dangerous applications off-limits.
- Intrusion Prevention Service (IPS ) delivers in-line protection from malicious exploits, including buffer overflows, SQL injections, and cross-site scripting attacks.
- WebBlocker controls access to sites that host objectionable material or pose network security risks.
- Gateway AntiVirus (GAV) scans traffic on all major protocols to stop threats.
- spamBlocker delivers continuous protection from unwanted and dangerous email.
- Reputation Enabled Defense ensures faster, safer web surfing with cloud-based reputation look-up.
- Data Loss Prevention (DLP) automatically inspects data in motion for corporate policy violations.
Multiple VPN choices (IPSec, SSL, L2TP) for secure remote access include support for Android and Apple iOS devices.

Easy To Manage

Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
WatchGuard Dimension™, a public and private cloud-ready visibility solution, instantly turns raw data into security intelligence.
RapidDeploy™ technology enables quick, secure configuration at remote locations without technical staff on-site.
Intuitive management console centrally manages all security functions.
Extend best-in-class UTM security to the WLAN by adding WatchGuard’s Wireless Access Points.
Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Highest UTM Performance In The Industry

Firewall throughput of up to 200 Mbps and UTM throughput of 55 Mbps to keep traffic moving.
No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.
Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections.

Specifications:

Models Comparison:

WatchGuard Firebox T15/T15W Models Comparison
WatchGuard® Model	Firebox T15/T15W	XTM 25/25W	XTM 26/26-W
Ideal For	Small office/home office and small retail environments; and large businesses that need to extend UTM-level protection to remote workers. Available in wired and wireless models.	Remote offices, small businesses that need an affordable solution that easily upgrades to accommodate growth. Available in wired and wireless models.	Remote offices, small business, wireless hotspots that want an affordable, all-in-one security solution. Available in wired and wireless models.
Hardware
Model Upgradeable	N/A	N/A	N/A
Interfaces	3 1GbE	5 1GbE	5 1GbE
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP-UDP, POP3, POP3S, SIP, H.323	HTTP, HTTPS, SMTP, FTP, DNS, TCP-UDP, POP3, POP3S, SIP, H.323	HTTP, HTTPS, SMTP, FTP, DNS, TCP-UDP, POP3, POP3S, SIP, H.323
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only	802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services	802.11ac, WPA, WPA2, WEP, Wireless Guest Services	802.11ac, WPA, WPA2, WEP, Wireless Guest Services
User Authentication with transparent Windows authentication
Performance
Firewall Throughput	400 Mbps	240 Mbps	540 Mbps
VPN Throughput	100 Mbps	40 Mbps	60 Mbps
AV Throughput	120 Mbps	95 Mbps	142 Mbps
IPS Throughput	160 Mbps	100 Mbps	226 Mbps
UTM Throughput	90 Mbps	80 Mbps	108 Mbps
Concurrent Sessions* (bi-directional)	50,000	10,000	30,000
VPN Tunnels
Branch Office VPN Tunnels (Max.)	5	10	40
Mobile VPN with SSL/L2TP (Incl/Max)	5/5	1/11***	1/25***
Mobile VPN with IPSec Client Licenses (Bundled)	5	5	5
Mobile VPN with IPSec Tunnels (Max.)	5	10	40
VPN Authentication
Management
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates.	WatchGuard System Manager Device Upgrade license required.	WatchGuard System Manager Device Upgrade license required.	WatchGuard System Manager Device Upgrade license required.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN	10	20, upgradeable to 50 with Fireware® XTM Pro upgrade	20, upgradeable to 50 with Fireware® XTM Pro upgrade
SD-WAN Dynamic Path Selection		Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
WAN Failover	N/A	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
Multi-WAN Load Balancing	N/A	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
Server Load Balancing	N/A	N/A	N/A
Traffic Management/QoS
High Availability Active/Active or Active/Passive	N/A	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
Dynamic Routing	N/A	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
VoIP (SIP and H.323) Support
Additional Security Subscriptions
Application Control	Optional	Optional	Optional
Data Loss Prevention	Optional	Optional	Optional
Reputation Enabled Defense	Optional	Optional	Optional
spamBlocker with Virus Outbreak Detection	Optional	Optional	Optional
Gateway AntiVirus Intrusion Prevention Service (IPS)	Optional	Optional	Optional
WebBlocker with HTTPS URL filtering	Optional	Optional	Optional
LiveSecurity® Service	1-year and 3-year subscriptions available	1-year and 3-year subscriptions available	1-year and 3-year subscriptions available

*Concurrent sessions here represent the number of bi-directional connections.

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.

***Maximum requires purchase upgrade to Fireware XTM Pro

Options & Upgrades:

Security Subscriptions

Data Loss Prevention (DLP) XTM DLP prevents data breaches by scanning text and common file types to detect sensitive information. A predefined library of over 200 rules for 18 countries makes creating and updating corporate data policies as easy as point and click.	Application Control Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth.
Reputation Enabled Defense Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead.	WebBlocker WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks.
spamBlocker spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry.	Gateway AntiVirus Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time.
Intrusion Prevention Service Intrusion Prevention Service works hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.	LiveSecurity Service LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.