Overview:
Available with optional integrated wireless module Up to 1.7 Gbps firewall throughput, 5 x 1Gb ports, 10 Branch Office VPNs
WatchGuard Firebox T20 protects small office, home office and retail environments with complete enterprise-level network security that is easy to deploy and manage. Offering optional web filtering, intrusion prevention, antivirus and more. It can be used as a stand-alone solution or centrally managed from corporate headquarters. Flexible management tools and WatchGuard’s RapidDeploy technology enable administrators to quickly set up the Firebox T20 at remote locations so businesses can ensure that they protect where they connect. Firebox T20 provides 1.7 Gbps firewall throughput and five 1-Gigabit Ethernet ports. WatchGuard Dimension provides visibility into network activity and security events at no additional cost. Wireless models are available.
ENTERPRISE-GRADE SECURITY FOR THE SMALL AND HOME OFFICES
Designed to protect enterprise users where they connect – in the small office/home office – Firebox T20 allows businesses to extend powerful network security to the remote workforce. With more features than any other small form-factor UTM firewall in its class, Firebox T20 is a cost-effective security powerhouse that delivers enterprise-grade security in small package.
The Firebox T20 packs a powerful UTM firewall into a small form-factor tabletop box that can easily fit
into my home office. All the same security features as my corporate firewall in a unit sized for small
offices with centralized management.
~ Neil Holme, Owner, Impact Business Technology
PROTECT WHERE YOU CONNECT
WatchGuard Firebox T20 is a small form-factor appliance that brings big security to any
environment your users connect. Perfect for home and small office networks, Firebox
T20 is a cost-effective security powerhouse that delivers a complete and industry-best
set of threat management solutions including gateway antivirus, content and URL
filtering, antispam, intrusion prevention, and application control, all in an easy-to-manage
package.
QUICK AND SIMPLE DEPLOYMENT
WatchGuard RapidDeploy makes it possible to eliminate much of the labor involved in
setting up a Firebox to work for your network – all without having to leave your office.
RapidDeploy is a powerful, Cloud-based deployment and configuration tool that comes
standard with WatchGuard Firebox appliances. Local staff simply connect the device for
power and the Internet, the Internet, and the appliance simply connects to the Cloud for
all its configuration settings.
AUTOMATION TO THE CORE
WatchGuard Firebox T-series appliances are designed with automation to the core,
allowing your IT team to do more with less. The WatchGuard Automation Core makes it
possible to deploy from the Cloud, block threats, update signatures, and detect and kill
malware, all without lifting a finger.
NETWORK OPTIMIZATION WITH SD-WAN
Firebox T20 makes network optimization easy. With integrated SD-WAN, you can decrease
your use of expensive MPLS or 4G/LTE connections and inspect traffic from home/small
offices while improving the resiliency and performance of your network.
FEATURES AND BENEFITS
- 5 Gigabit Ethernet ports support
high-speed LAN backbone
infrastructures & gigabit WAN
connections.
- Wi-Fi capable Firebox T20-W
supports the 802.11ac Wi-Fi
standard, ensuring fast speeds for
your users.
- All logging and reporting
functions included with
purchase, with over 100
dashboards and reports
including PCI and HIPAA.
Specifications:
Firebox T Series |
T20/ T20-W |
UTM (full scan) |
154 Mbps |
Firewall (IMIX) |
510 Mbps |
VPN (IMIX) |
140 Mbps |
HTTPS (IPS enabled, full scan) |
50 Mbps |
Antivirus |
328 Mbps |
IPS (full scan) |
271 Mbps |
Firewall (UDP 1518) |
1.7 Gbps |
VPN (UDP 1518) |
485 Mbps |
Interfaces 10/100/1000 |
5 |
PoE ports |
N/A |
I/O interfaces |
1 Serial/2 USB |
Concurrent connections |
1.3M |
Concurrent connections (proxy) |
100,000 |
New connections per second |
8,500 |
VLANs |
10 |
WSM licenses (incl) |
0 |
TDR Host Sensors included |
5 |
Authenticated users limit |
200 |
Branch Office VPN |
10 |
Mobile VPN |
10 |
Firewall |
Stateful packet inspection, TLS decryption, proxy firewall |
Application proxies |
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy |
Threat protection |
DoS attacks, fragmented & malformed packets, blended threats |
Filtering options |
Browser Safe Search, Google for Business |
Site to Site VPN |
IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke |
Remote Access VPN |
IKEv2, IPSec, L2TP, TLS |
Logging and notifications |
WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 |
Reporting |
WatchGuard Cloud includes over 100 pre-defined reports, executive summary and visibility tools |
Security |
Pending: CC EAL4+, FIPS 140-2 |
Safety |
NRTL/C, CB |
Network |
IPv6 Ready Gold (routing) |
Hazardous substance control |
WEEE, RoHS, REACH |
SD-WAN |
Multi-wan failover, dynamic path selection, jitter/loss/latency measurement |
Dynamic Routing |
RIP, OSPF, BGP |
High Availability |
Active/passive, active/active |
QoS |
802.1Q, DSCP, IP Precedence |
Traffic Management |
By policy or application |
IP address assignment |
Static, DHCP (server, client, relay), PPPoE, DynDNS |
NAT |
Static, dynamic, 1:1, IPSec traversal, policy-based |
Link aggregation |
802.3ad dynamic, static, active/backup |
Product Dimensions |
8” x 8.5” x 1.7” (203.2 x 215.9 x 43.2 mm) |
Shipping Dimensions |
12.1” x 10.2” x 7.2” (308x261x181 mm) |
Product Weight |
1.94 lbs (0.88 kg)
T20-W: 1.98 lbs (0.9 kg) |
Shipping Weight |
4.1 lbs (1.86 kg) |
Power Consumption |
24 Watts |
AC Power |
100-240 VAC Autosensing |
Temperature |
32° F to 104° F 0° C to 40° C |
-40° F to 158° F -40° C to 70° C |
Relative Humidity |
10% to 85% non-condensing |
10% to 85% non-condensing |
Altitude |
0 to 9,843 ft at 95° F (3,000 m at 35° C) |
0 to 15,000 ft at 95° F (4,570 m at 35° C) |
MTBF |
1,101,388 hours |
STRONG SECURITY AT EVERY LAYER
Uniquely architected to be the industry’s smartest, fastest, and most
effective network security products, WatchGuard solutions deliver
in-depth defenses against advanced malware, ransomware, botnets,
trojans, viruses, drive-by downloads, data loss, phishing and much
more. Total and Basic Security Suite packages are available on all
Firebox solutions.
Options & Upgrades:
WatchGuard Security Services
WatchGuard offers the most comprehensive portfolio of network security services, from traditional IPS, GAV, application control, spam blocking, and web filtering to more advanced services for protecting against advanced malware, ransomware, and the loss of sensitive data. WatchGuard also offers a full suite of network visibility and management services.
Fundamental Security Services
Intrusion Prevention Service (IPS)
IPS uses continually updated signatures to scan traffic on all major protocols to provide realtime protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows.
Reputation Enabled Defense Service (RED)
A powerful, cloud-based reputation lookup service that protects web users from malicious sites and botnets, while dramatically improving web processing overhead.
Network Discovery
A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network so you can easily see where you may be at risk.
WebBlocker URL Filtering
In addition to automatically blocking known malicious sites, WebBlocker’s granular content and URL filtering tools enable you to block inappropriate content, conserve network bandwidth, and increase employee productivity.
Application Control
Selectively allow, block, or restrict access to applications based on a user’s department, job function, and time of day and to then see, in real-time, what’s being accessed on your network and by whom.
Gateway Antivirus (GAV)
Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats – including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by.
spamBlocker
Real-time spam detection for protection from outbreaks. Our spamBlocker is so fast and effective, it can review up to 4 billion messages per day.
Advanced Security Services
APT Blocker - Advanced Malware Protection
APT Blocker uses an awardwinning next-gen sandbox to detect and stop the most sophisticated attacks including ransomware, zero day threats and other advanced malware.
Data Loss Prevention
This service prevents accidental or malicious data loss by scanning text and common file types to detect sensitive information attempting to leave the network.
Access Portal
Access Portal provides central location for access to cloud-hosted applications, and secure, clientless access to internal resources with RDP and SSH.
Threat Detection and Response
Correlate network and endpoint security events with enterprise-grade threat intelligence to detect, prioritize and enable immediate action to stop malware attacks. Improve visibility by evolving your existing security model to extend past prevention, to now include correlation, detection and response.
DNSWatch
Reduce malware infections by detecting and blocking malicious DNS requests, redirecting users to a safe page with information to reinforce security best practices.
Dimension Command
Dimension translates data collected from all appliances across your network into actionable network and threat intelligence. Dimension Command gives you the power to take action to mitigate those threats instantly, from one central console.
One Appliance, One Package, Total Security
Simplicity is our mission at WatchGuard and that mission extends beyond how the product is built to how it is packaged. While all of our services are offered à la carte, we have worked to develop two packages that simplify the decision-making process. The Total and Basic Security Suite packages are available on our Firebox T and M Series appliances, as well as our Firebox Cloud and FireboxV virtual models.
- The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, GAV, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as, our standard 24x7 support.
- The Total Security Suite includes all services offered with the Basic Security Suite plus advanced malware protection, data loss protection, enhanced network visibility capabilities, a secure access portal, and the ability to take action against threats right from Dimension, our network visibility platform.