Overview:
Available with optional integrated wireless radio Up to 3.4 Gbps firewall throughput, 5 x 1Gb ports, 30 Branch Office VPNs
WatchGuard Firebox T40, engineered for today’s fast Internet connections, delivers enterprise-level security to small and midsize businesses. It includes five 1-Gigabit Ethernet and one PoE+ port to power peripheral devices such as security cameras or wireless access points. The T40 can be used as a stand-alone security solution or centrally managed from corporate headquarters, with RapidDeploy technology to make remote deployment easy. Flexible management tools give administrators access to security capabilities from an intuitive console, scriptable CLI, and web UI. WatchGuard Cloud, which provides deep, real-time visibility into network activity and security events, is included with both the Basic and Total Security Suites.
ENTERPRISE-GRADE SECURITY FOR BRANCH OFFICES AND RETAIL ENVIRONMENTS
WatchGuard Firebox T40 tabletop appliances bring enterprise-level network security to those small office/branch office and
small retail environments. These appliances are small-footprint, cost-effective security powerhouses that deliver all the features
present in WatchGuard’s higher-end UTM appliances, including all security capabilities such as AI-powered anti-malware, threat
correlation and DNS-filtering.
We are deeply impressed by the outstanding performance of this tabletop device. This device, having
one PoE+ port for powering a phone or access point, is an excellent choice for connecting home offices
or smaller branch offices.
~ Bernd Och, CEO, BOC IT-Security GmbH
BIG SECURITY IN A SMALL APPLIANCE
With the Total Security Suite, WatchGuard’s Firebox includes a complete and industrybest set of threat management solutions including gateway antivirus, content and URL
filtering, antispam, intrusion prevention, application control, Cloud sandboxing, and
endpoint protections, all in an easy-to-manage package.
QUICK AND SIMPLE DEPLOYMENT
WatchGuard RapidDeploy makes it possible to eliminate much of the labor involved in
setting up a Firebox to work within your existing network – all without having to leave
your office. RapidDeploy is a powerful, Cloud-based deployment and configuration tool
that comes standard with WatchGuard Firebox appliances. Local staff simply connect the
device for power and the Internet, the Internet, and the appliance simply connects to the
Cloud for all its configuration settings.
INTEGRATED POWER OVER ETHERNET (POE+)
Integrated support for PoE+ means you can avoid running separate power cables to
peripheral devices like security cameras, VoIP phones or wireless access points.
AUTOMATION TO THE CORE
WatchGuard Firebox T Series appliances are designed with automation to the core,
allowing your IT team to do more with less. The WatchGuard Automation Core makes it
possible to deploy from the Cloud, block threats, update signatures, and detect and kill
malware, all without lifting a finger.
NETWORK OPTIMIZATION WITH SD-WAN
Firebox T40 makes network optimization easy. With integrated SD-WAN, you can decrease
your use of expensive MPLS or 4G/LTE connections and inspect traffic from small offices
while improving the resiliency and performance of your network.
FEATURES & BENEFITS
- 5 Gigabit Ethernet ports support
high-speed LAN backbone
infrastructures & gigabit WAN
connections.
- Integrated PoE+ port for
powering peripheral devices.
- Wi-Fi capable Firebox T40-W
supports the 802.11ac Wi-Fi
standard, ensuring fast speeds for
your users.
- All logging and reporting
functions included with
purchase, with over 100
dashboards and reports
including PCI and HIPAA.
Specifications:
Firebox T Series |
T40/ T40-W |
UTM (full scan) |
300 Mbps |
Firewall (IMIX) |
1 Gbps |
VPN (IMIX) |
272 Mbps |
HTTPS (IPS enabled, full scan) |
92 Mbps |
Antivirus |
623 Mbps |
IPS (full scan) |
510 Mbps |
Firewall (UDP 1518) |
3.4 Gbps |
VPN (UDP 1518) |
880 Mbps |
Interfaces 10/100/1000 |
5 |
PoE ports |
N/A |
I/O interfaces |
1 Serial/2 USB |
Concurrent connections |
4.3M |
Concurrent connections (proxy) |
200,000 |
New connections per second |
18,000 |
VLANs |
50 |
WSM licenses (incl) |
0 |
TDR Host Sensors included |
20 |
Branch Office VPN |
30 |
Mobile VPN |
30 |
Firewall |
Stateful packet inspection, TLS decryption, proxy firewall |
Application proxies |
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy |
Threat protection |
DoS attacks, fragmented & malformed packets, blended threats |
Filtering options |
Browser Safe Search, Google for Business |
Site to Site VPN |
IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke |
Remote Access VPN |
IKEv2, IPSec, L2TP, TLS |
Logging and notifications |
WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 |
Reporting |
WatchGuard Cloud includes over 100 pre-defined reports, executive summary and visibility tools |
Security |
Pending: CC EAL4+, FIPS 140-2 |
Safety |
NRTL/C, CB |
Network |
IPv6 Ready Gold (routing) |
Hazardous substance control |
WEEE, RoHS, REACH |
SD-WAN |
Multi-wan failover, dynamic path selection, jitter/loss/latency measurement |
Dynamic Routing |
RIP, OSPF, BGP |
High Availability |
Active/passive, active/active |
QoS |
802.1Q, DSCP, IP Precedence |
Traffic Management |
By policy or application |
IP address assignment |
Static, DHCP (server, client, relay), PPPoE, DynDNS |
NAT |
Static, dynamic, 1:1, IPSec traversal, policy-based |
Link aggregation |
802.3ad dynamic, static, active/backup |
Product Dimensions |
8” x 8.5” x 1.7” (203.2 x 215.9 x 43.2 mm) |
Shipping Dimensions |
12.1” x 10.2” x 7.2” (308x261x181 mm) |
Product Weight |
1.94 lbs (0.88 kg)
T40-W: 1.98 lbs (0.9 kg) |
Shipping Weight |
4.1 lbs (1.86 kg) |
Power Consumption |
25 Watts (no PoE)
60 Watts (PoE) |
AC Power |
100-240 VAC Autosensing |
Temperature |
32° F to 104° F 0° C to 40° C |
-40° F to 158° F -40° C to 70° C |
Relative Humidity |
10% to 85% non-condensing |
10% to 85% non-condensing |
Altitude |
0 to 9,843 ft at 95° F (3,000 m at 35° C) |
0 to 15,000 ft at 95° F (4,570 m at 35° C) |
MTBF |
157,751 hours |
STRONG SECURITY AT EVERY LAYER
Uniquely architected to be the industry’s smartest, fastest, and most
effective network security products, WatchGuard solutions deliver
in-depth defenses against advanced malware, ransomware, botnets,
trojans, viruses, drive-by downloads, data loss, phishing and much
more. Total and Basic Security Suite packages are available on all
Firebox solutions.
Options & Upgrades:
WatchGuard Security Services
WatchGuard offers the most comprehensive portfolio of network security services, from traditional IPS, GAV, application control, spam blocking, and web filtering to more advanced services for protecting against advanced malware, ransomware, and the loss of sensitive data. WatchGuard also offers a full suite of network visibility and management services.
Fundamental Security Services
Intrusion Prevention Service (IPS)
IPS uses continually updated signatures to scan traffic on all major protocols to provide realtime protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows.
Reputation Enabled Defense Service (RED)
A powerful, cloud-based reputation lookup service that protects web users from malicious sites and botnets, while dramatically improving web processing overhead.
Network Discovery
A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network so you can easily see where you may be at risk.
WebBlocker URL Filtering
In addition to automatically blocking known malicious sites, WebBlocker’s granular content and URL filtering tools enable you to block inappropriate content, conserve network bandwidth, and increase employee productivity.
Application Control
Selectively allow, block, or restrict access to applications based on a user’s department, job function, and time of day and to then see, in real-time, what’s being accessed on your network and by whom.
Gateway Antivirus (GAV)
Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats – including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by.
spamBlocker
Real-time spam detection for protection from outbreaks. Our spamBlocker is so fast and effective, it can review up to 4 billion messages per day.
Advanced Security Services
APT Blocker - Advanced Malware Protection
APT Blocker uses an awardwinning next-gen sandbox to detect and stop the most sophisticated attacks including ransomware, zero day threats and other advanced malware.
Access Portal
Access Portal provides central location for access to cloud-hosted applications, and secure, clientless access to internal resources with RDP and SSH.
Threat Detection and Response
Correlate network and endpoint security events with enterprise-grade threat intelligence to detect, prioritize and enable immediate action to stop malware attacks. Improve visibility by evolving your existing security model to extend past prevention, to now include correlation, detection and response.
DNSWatch
Reduce malware infections by detecting and blocking malicious DNS requests, redirecting users to a safe page with information to reinforce security best practices.
Dimension Command
Dimension translates data collected from all appliances across your network into actionable network and threat intelligence. Dimension Command gives you the power to take action to mitigate those threats instantly, from one central console.
One Appliance, One Package, Total Security
Simplicity is our mission at WatchGuard and that mission extends beyond how the product is built to how it is packaged. While all of our services are offered à la carte, we have worked to develop two packages that simplify the decision-making process. The Total and Basic Security Suite packages are available on our Firebox T and M Series appliances, as well as our Firebox Cloud and FireboxV virtual models.
- The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, GAV, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as, our standard 24x7 support.
- The Total Security Suite includes all services offered with the Basic Security Suite plus advanced malware protection, data loss protection, enhanced network visibility capabilities, a secure access portal, and the ability to take action against threats right from Dimension, our network visibility platform.