WatchGuard Firebox M470
Up to 19 Gbps Firewall, 5 Gbps VPN, 3.4 Gbps UTM; Basic configuration - 8 Gb Ethernet interfaces, expansion module support

Overview:

Firebox® M470, M570 & M670 firewalls are specifically engineered for midsize and distributed enterprises that are struggling to effectively and affordably secure networks in the face of explosive growth in bandwidth rates, encrypted traffic, video use, and connection speeds. What’s more, the ability to add network modules for greater port density gives you the flexibility to adapt as the network grows and evolves.

Total Network Protection

Every network needs a full arsenal of scanning engines to protect against spyware, viruses, malicious apps, data leakage, botnets and more.

WatchGuard’s award-winning network security platform not only provides the most complete suite of unified security controls on the market today, but we have consistently been the first to offer solutions for addressing new and evolving network threats including ransomware and advanced malware.

Easily Manage Many Appliances

Typically deployed at the corporate headquarters, these appliances serve as the “hub” appliance, responsible for centrally managing and securing all communications between the head office and all remote employee and small business sites. WatchGuard Dimension, which is included at no additional cost, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends, accelerating the ability to set meaningful security policies across the entire network.

Future-proof Your Network

Network environments are more diverse than ever, offering a vast array of options to choose from. With Firebox M470, M570, and M670, IT pros can customize their port configuration with expansion modules to meet current needs, while ensuring the flexibility to adapt as their network evolves. Firebox M470, M570, and M670 include a single slot for an expansion module, with options for 8 x 1 Gb fiber, 4 x 10 Gb fiber, or 8 x 1 Gb copper.

Features & Benefits

• Up to 34 Gbps firewall throughput. Turn on all security scanning engines and still see up to an amazing 5.4 Gbps throughput.
• All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA.
• Gain critical insights about network security, from anywhere and at any time, with WatchGuard Dimension.
• Customize your port configuration to meet current needs, knowing you have the flexibility to adapt as the network evolves. This is how to future-proof your network and eliminate costly rip-and-replace scenarios.
• High availability capabilities ensure maximum uptime. Buy two
  Firebox M470, M570 & M670s for an active/passive high availability pair and receive 50%

Features:

Quick Facts

• Latest generation Freescale multi-core processors provide the power to run all security scanning engines in parallel without causing performance bottlenecks.
• 8 Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections.
• Up to 8 Gbps firewall throughput. Turn on optional security services and still see up to 820 Mbps throughput.
• Nothing could be easier than WatchGuard’s drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Specifications:

Firebox	M470	M570	M670
Throughput
Firewall	19.6 Gbps	26.6 Gbps	34 Gbps
Firewall (IMIX)	5.6 Gbps	7.6 Gbps	11.2 Gbps
VPN (UDP 1518)	5.2 Gbps	5.8 Gbps	7.6 Gbps
VPN (IMIX)	1.8 Gbps	2.0 Gbps	2.6 Gbps
HTTPS (IPS enabled)	2.0 Gbps	3.4 Gbps	4.0 Gbps
Antivirus	3.5 Gbps	5.4 Gbps	6.2 Gbps
IPS (fast/full scan)	5.7/3.0 Gbps	8.0/4.8 Gbps	10.4/5.6 Gbps
UTM (fast/ full scan)	3.1/2.1 Gbps	4.4/3.5 Gbps	5.4/4.2 Gbps
Capacity
Interfaces 10/100/1000*	8 (optional modules available)	8 (optional modules available)	8 (optional modules available)
I/O interfaces	1 SRL/2 USB	1 SRL/2 USB	1 SRL/2 USB
Concurrent connections	3,800,000	8,300,000	8,500,000
Concurrent connections (proxy)	310,000	710,000	920,000
New connections per second	82,000	115,000	140,000
VLANs	300	500	750
WSM licenses (incl)	4	4	4
TDR Host Sensors included	250	250	250
Authenticated users limit	Unrestricted	Unrestricted	Unrestricted
VPN TUNNELS
Branch Office VPN	250	500	750
Mobile VPN	250	500	750
Security Features
Firewall	Stateful packet inspection, deep packet inspection, proxy firewall
Application proxies	HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, SMTP, IMAP, and Explicit Proxy
Threat protection	DoS attacks, fragmented & malformed packets, blended threats & more
VoIP	H.323, SIP, call setup and session security
Filtering options	Browser Safe Search, Google for Business
VPN & Authentication
Cloud providers	AWS (Static/Dynamic), Azure (Static/Dynamic)
Encryption	AES 256-128 bit, 3DES, DES
IPSec	SHA-2, IKEv1/v2 , IKE pre-shared key, 3rd party cert
Single sign-on	Windows, Mac OS X, mobile operating systems, RADIUS
Authentication	RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, Duo, SMS Passcode
Management
Logging and notifications	WatchGuard, Syslog, SNMP v2/v3
User interfaces	Centralized console (WSM), Web UI, scriptable CLI
Reporting	WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools
Certifications
Security	Pending: ICSA Firewall, ICSA IPSec VPN , CC EAL4+,FIPS 140-2
Safety	NRTL/C, CB
Network	IPv6 Ready Gold (routing)
Hazardous substance control	WEEE, RoHS, REACH
Networking
Routing	Static, Dynamic (BGP4, OSPF, RIP v1/v2), Policy-based routing
High Availability	Active/passive, active/active with load balancing
QoS	8 priority queues, DiffServ, modified strict queuing
IP address assignment	Static, DHCP (server, client, relay), PPPoE, DynDNS
NAT	Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing
Link aggregation	802.3ad dynamic, static, active/backup
Other features	Port Independence, Multi-WAN failover and load balancing, server load balancing, host header redirection

Physical And Power Specifications
Product Dimensions	16.85” x 12.6” x 1.73” (42.8 x 32 x 4.4 cm)
Shipping Dimensions	22” x 21” x 5” (55.9 x 53.3 x 12.7 cm)
Shipping Weight	18 lbs (8.17 kg)
AC Power	100-240 VAC Autosensing
Power Consumption	U.S. 75 Watts (max), 256 BTU/hr (max)
Rack Mountable	1U rack mount kit included
ENVIRONMENT	OPERATING	STORAGE
Temperature	32° F to 104° F 0° C to 40° C	14° F to 158° F -10° C to 70° C
Relative Humidity	5% to 90% non-condensing	5% to 90% non-condensing
Altitude	0 to 9,843 ft at 95° F (3,000 m at 35° C)	0 to 15,000 ft at 95° F (4,570 m at 35° C)
MTBF	51,644 hours @ 77° F (25° C)

Options & Upgrades:

WatchGuard Security Services

WatchGuard offers the most comprehensive portfolio of network security services, from traditional IPS, GAV, application control, spam blocking, and web filtering to more advanced services for protecting against advanced malware, ransomware, and the loss of sensitive data. WatchGuard also offers a full suite of network visibility and management services.

Fundamental Security Services

Advanced Security Services

One Appliance, One Package, Total Security

Simplicity is our mission at WatchGuard and that mission extends beyond how the product is built to how it is packaged. While all of our services are offered à la carte, we have worked to develop two packages that simplify the decision-making process. The Total and Basic Security Suite packages are available on our Firebox T and M Series appliances, as well as our Firebox Cloud and FireboxV virtual models.

• The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, GAV, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as, our standard 24x7 support.
• The Total Security Suite includes all services offered with the Basic Security Suite plus advanced malware protection, data loss protection, enhanced network visibility capabilities, a secure access portal, and the ability to take action against threats right from Dimension, our network visibility platform.

Documentation:

Download the WatchGuard Firebox M470, M570 & M670 Datasheet (PDF).