Free Consultant
Hỗ trợ tại Hà Nội
Hỗ trợ tại TP.HCM
Hỗ trợ kỹ thuật
Bộ phận kinh doanh

WatchGuard XTM 33

Extensible Threat Management for Growing Businesses

WatchGuard XTM 33

WatchGuard XTM 33 Series Overview:

Introducing the WatchGuard XTM 3 Series! The newest member of the XTM family is a powerhouse performer for small businesses that want next-generation security features and fast firewall/VPN throughput at a small-business price.

The XTM 3 Series appliances include a suite of flexible management tools to give small businesses the tools they need to stay on top of network activity. They also include the Pro version of Fireware XTM operating system for advanced networking features, including VLAN support, multi-WAN load balancing, and dynamic routing. Real-time monitoring and rich reporting are included at no extra cost.

Keep traffic movingKeep traffic moving
The XTM 3 Series provides up to 1.4 Gbps firewall throughput, 240 Mbps VPN throughput, and up to seven 1-Gigabit Ethernet ports to support high-speed LAN backbone infrastructures and gigabit WAN connections.

Layer on protectionLayer on protection
WatchGuard offers six security subscriptions for its next-generation XTM 3 Series solution, so businesses can build up protection where they need it most. Subscriptions can be purchased individually or bundled together for even greater savings.

Wireless security with guest accessWireless security with guest access
Everyone loves wireless. With dual-band 802.11/n, the XTM 33-W model delivers reliable wireless connectivity while allowing you to provide controlled Internet access to guest users without compromising security

Application ControlApplication Control
Control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.

VPN setup in secondsVPN setup in seconds
Nothing could be easier than our drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

3 ways to manage your appliance3 ways to manage your appliance
Choose to use the management tool that suits your work style and the task at hand. Options include our feature-rich intuitive centralized console, a command line interface, or web UI for access from anywhere, anytime.

Fireware XTM ProFireware XTM Pro included
The Pro version of our Fireware XTM OS is included with purchase for advanced networking features like policy-based routing, dynamic routing, multi-WAN load balancing, and VLAN support.

Remote connectivity optionsRemote connectivity options
Includes SSL and IPSec VPN for flexibility in remote access, with support for Apple iOS devices such as the iPhone, iPad, and IPod touch.

Reporting made easyReporting made easy
Monitoring and reporting tools, included at no extra cost, support industry and regulatory compliance with drill-down functions that make it easy to pinpoint specific activities.

Faster, safe web surfingFaster, safe web surfing
Add a simple subscription to Reputation Enabled Defense to your XTM solution and your organization will have faster web performance and even stronger security – with no additional hardware to buy.

Green securityGreen security
Our firewalls are designed with efficiency in mind, consuming very little energy. Compare our power consumption to other security products and see how WatchGuard can make your data center more energy efficient. Green up your network with WatchGuard.


Best-of-Breed Security

  • Application-layer content inspection recognizes & blocks threats that stateful packet firewalls cannot detect.
  • Powerful subscription-based security services boost protection in critical attack areas for multiple layers of defense. By partnering with leading technology providers, WatchGuard is able to integrate best-of-breed security components into one UTM platform for stronger security at big cost savings.
    • Application Control keeps unproductive, inappropriate, and dangerous applications off-limits.
    • Intrusion Prevention Service (IPS ) delivers in-line protection from malicious exploits, including buffer overflows, SQL injections, and cross-site scripting attacks.
    • WebBlocker controls access to sites that host objectionable material or pose network
    • security risks.
    • Gateway AntiVirus (GAV) scans traffic on all major protocols to stop threats.
    • spamBlocker delivers continuous protection from unwanted and dangerous email.
    • Reputation Enabled Defense ensures faster, safer web surfing with cloud-based reputation look-up.
    • Data Loss Prevention (DLP) automatically inspects data in motion for corporate policy violations.
  • Advanced networking features, such as dynamic routing and link aggregation, allow you to add security without needing to change existing network infrastructure.
  • Multiple VPN choices (IPSec, SSL, L2TP) for secure remote access include support for Android and Apple iOS devices.

Easy to Manage

  • Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
  • WatchGuard Dimension, a public and private cloud-ready visibility solution, instantly turns raw data into security intelligence.
  • Intuitive management console centrally manages all security functions.
  • WAN and VPN failover provide redundancy for increased reliability.
  • Extend best-in-class UTM security to the WLAN by adding WatchGuard’s Wireless Access Points.
  • Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Highest UTM Performance in the Industry

  • Firewall throughput of up to 1.4 Gbps and UTM throughput of up to 298 Mbps to keep traffic moving.
  • No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.
  • Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections.

Wired or Wireless - Your Choice

  • The XTM 33-W is a wireless model that includes optional dual-band 802.11/n technology for much more responsive wireless network connection and expanded range. Allows users to access 2.4 GHz or less crowded 5 GHz band.
  • Multiple security zones give administrators precise control over Internet access privileges for different user groups.
  • Wireless guest services segment the Internet for customers/guests.

Detailed Specifications:



  XTM 33/33-W XTM 330
Throughput and Connections
Firewall throughput* 850 Mbps 1.4 Gbps
VPN throughput* 100 Mbps 240 Mbps
AV throughput* 175 Mbps 340 Mbps
IPS throughput* 328 Mbps 640 Mbps
UTM throughput* 146 Mbps 298 Mbps
Interfaces 10/100/1000 5 copper 7 copper
I/O interfaces 1 USB / 1 Serial 2 USB / 1 Serial
Nodes supported (LAN IPs) Unrestricted Unrestricted
Concurrent sessions 
40,000 40,000
New Connections per Second 3,800 5,500
VLANs (bridging, tagging, routed mode) 75 75
Authenticated users limit 500 500
VPN tunnels
Branch Office VPN 50 50
Mobile VPN IPSec (incl/max) 5/55 5/55
Mobile VPN SSL/L2TP (included/max) 55 55
PPTP 50 50
Dimensions and Power
Product dimensions - wired models 6.1" x 7.5" x 1.25" (15.5 x 19.0 x 3.2 cm) 11.25" x 17" x 1.75" (28.6 x 43.2 x 4.5 cm)
Product dimensions - wireless model 7.75" x 10.75" x 5" (19.7 x 27.3 x 12.7 cm) N/A
Shipping dimensions 10.75" x 13.25" x 3.4" (27.3 x 33.7 x 8.6 cm) 18" x 21" x 5.25" (45.7 x 53.3 x 13.3 cm)
Power consumption – wired models U.S. 23.33 Watts (80 BTU/hr) U.S. 50 Watts (171 BTU/hr)
Power consumption – wireless model U.S. 24.0 Watts (82 BTU/hr) N/A
Shipping weight 3.2 lbs (1.45 Kg) / 3.6 lbs (1.6 Kg) 16.1 lbs (7.3 Kg)
AC power 100-240 VAC Autosensing 100-240 VAC Autosensing
Form factor Tabletop (wall mount kit included) Rack Mount (IU rack mount kit included)
Firewall Stateful packet inspection, deep packet inspection, proxy firewall
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Threat Protection Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats and more
VoIP H.323. SIP, call setup & session security
Security subscriptions Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service, Reputation Enabled Defense (available in the Security Bundle)
VPN & Authentication
Encryption DES, 3DES, AES 128-, 192-, 256-bit
IPSec SHA-1, MD5, IKE pre-shared Key, 3rd party cert import
SSL Thin client
L2TP Works with native OS clients
PPTP Server & Passthrough
VPN Failover Yes
Single Sign-On Transparent Active Directory Auth.
XAUTH Radius, LDAP, Windows Active Directory
Other User Authentication VASCO, RSA SecurID, web-based, local
Operating System Fireware® XTM Pro**
IP Address Assignment Static, DynDNS, PPPoE, DHCP (server, client, relay)
Routing Static, dynamic (BGP4, OSPF, RIP v1/v2), policy-based
Link Aggregation 802.3ad dynamic, static, active/backup
QoS 8 priority queues, diffserv, modified strict queuing
High Availability Active/passive, active/active with load balancing
NAT Static, dynamic, 1:1, IPSec NAT traversal, policy-based
Other Networking Port independence, multi-WAN failover, multi-WAN load balancing, transparent/drop-in mode

**Server load balancing is not available for XTM 3 Series appliances.

Management Platform WatchGuard System Manager (WSM) v.11 or higher
4-device WatchGuard System Manager license included with purchase
Alarms and Notifications SNMP v2/v3, Email, Management System Alert
Server Support Logging, Reporting, Quarantine, WebBlocker, Management
Web UI Supports Windows, Mac, Linux, and Solaris OS
CLI Includes direct connect and scripting
Security Certifications ICSA Firewall, ICSA VPN, CC EAL4+
FIPS 140-2
Safety Certifications NRTL/C, CB
Hazardous Substance Compliance WEEE, RoHS, REACH
Network IPv6 Ready Gold (routing)
*Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.

Compare Models:

WatchGuard Model XTM 33/33-W XTM 330
Ideal For Remote offices, small businesses that need an easy-to-manage solution at a great price. Available in wired and wireless models. Small businesses that want the next-generation of network security combined with fast throughput and advanced networking features.
Model Upgradeable N/A N/A
Interfaces 5: 10/100/1000 7: 10/100/1000
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323 HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more) X X
Wireless Models Only 802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services N/A
User Authentication with transparent Windows authentication X X
Firewall Throughput** 850 Mbps 1.4 Gbps
VPN Throughput** 100 Mbps 240 Mbps
AV Throughput** 175 Mbps 340 Mbps
IPS Throughput** 328 Mbps 640 Mbps
UTM Throughput** 146 Mbps 298 Mbps
Concurrent Sessions*
40,000 40,000
VPN Tunnels
Branch Office VPN Tunnels (Max.) 50 50
Mobile VPN with SSL (Incl/Max) 55 55
Mobile VPN with IPSec Client Licenses (Bundled) 5 5
Mobile VPN with IPSec Tunnels (Max.) 5/55 5/55
VPN Authentication X X
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates. 4-device WatchGuard System Manager license included with purchase. 4-device WatchGuard System Manager license included with purchase.
Networking Features
Dynamic NAT X X
Static NAT X X
One to One NAT X X
VLAN 50 75
Policy-Based Routing X X
WAN Failover X X
Multi-WAN Load Balancing X X
Server Load Balancing N/A N/A
Traffic Management/QoS X X
High Availability Active/Active or Active/Passive X X
Dynamic Routing X X
VoIP (SIP and H.323) Support X X
Additional Security Subscriptions
Application Control Optional Optional
Reputation Enabled Defense Optional Optional
spamBlocker with Virus Outbreak Detection Optional Optional
Gateway AntiVirus/
Intrusion Prevention Service (IPS)
Optional Optional
WebBlocker with HTTPS URL filtering Optional Optional
LiveSecurity® Service 1-year and 3-year subscriptions available 1-year and 3-year subscriptions available

* Concurrent sessions here represent the number of bi-directional connections.
** Throughput rates will vary based on environment & configuration.

Options & Upgrades:


Data Loss Prevention (DLP)Data Loss Prevention (DLP)
XTM DLP prevents data breaches by scanning text and common file types to detect sensitive information. A predefined library of over 200 rules for 18 countries makes creating and updating corporate data policies as easy as point and click.


Application ControlApplication Control
Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth.


Reputation Enabled DefenseReputation Enabled Defense
Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead.
WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks.
spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry.
Gateway AntiVirusGateway AntiVirus
Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time.

Intrusion Prevention ServiceIntrusion Prevention Service
Intrusion Prevention Serviceworks hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

LiveSecurity ServiceLiveSecurity Service
LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.


Nhà phân phối chính thức thiết bị Tường Lửa WatchGuard tại Việt Nam