WatchGuard XTM 505 Series Firewall Appliance
Next-Generation Firewall for Small to Midsized Businesses

WatchGuard XTM 505 Series Overview:

WatchGuard XTM 5 Series appliances deliver a new class of performance driven security for growing mid-size businesses. The 5 Series offers up to 2.3 Gbps firewall throughput and security features including full HTTPS inspection and VoIP support. Organizations that want room to easily scale their network security can move up to greater performance, more users, and additional security and networking features to meet escalating demands, without costly hardware replacements

Why buy an all-in-one solution?

An all-in-one XTM network security solution integrates complete protection while slashing the time and cost associated with managing multiple single-point security products. All security capabilities work together for a holistic, comprehensive approach to network protection. Your IT staff has more time to focus on other areas of network administration, and your business saves money on support and hardware costs.

With a WatchGuard® XTM 5 Series solution, your network is:

Secure:

• Application-layer content inspection recognizes & blocks threats that stateful packet firewalls cannot detect.
• Wide-ranging proxy protection comes from robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
• A suite of security subscriptions boosts protection in critical attack areas for complete threat management.
• Security subscriptions boost protection in critical attack areas for complete unified threat management.
• Provides integrated SSL VPN for simple, anywhere-anytime network access.
• Includes Skype blocking – first of the next generation of built-in application-blocking capabilities.

Efficient:

• Up to 2.3 Gbps rewall throughput and up to 750 Mbps VPN throughput keep data moving.
• Best UTM throughput in its class, even with strong security enabled.
• Gigabit Ethernet ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
• Active/active high availability with load balancing ensures maximum network uptime.
• Scriptable CLI supports interoperability and allows easy integration into existing infrastructure.
• Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
• Intuitive management console centrally manages all security functions.
• Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.
• Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Flexible:

• Call setup security for VoIP means you don’t need to “wire around the firewall” to take advantage of the big cost savings that VoIP can generate.
• WAN and VPN failover increase performance, redundancy, and reliability.
• Multiple VPN choices deliver flexibility in remote access.
• To maximize port utilization, any of the seven ports can be con gured as Internal, External, or Optional.
• Networking features, such as transparent bridge mode and multicast over VPN, allow you to add security without needing to change existing network infrastructure.

Scalable:

• Upgrade to a higher model within the line for more performance and capacity with a simple license key.
• Pair with WatchGuard XCS appliance for focused emphasis on messaging and content security.
• Move up to the “Pro” version of the Fireware XTM operating system for advanced networking features, including active/active high availability, VLAN support, multi-WAN and server load balancing, dynamic routing, and QoS.
• Add powerful security subscriptions to block spam, control dangerous and inappropriate web surfing, prevent network intrusions, and stop viruses, spyware, trojans, and other malware at the gateway.

Prepared for Tomorrow's Challenges:

• No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.
• Advanced networking features ensure reliability and the exibility to meet changing business requirements.
• Secure remote connectivity keeps mobile workforce online and productive.
• Security and reporting tools, included at no extra cost, support industry and regulatory compliance.

Features:

Fast 2.3 Gbps throughput The XTM 5 Series puts other appliances in its class to shame with up to 2.3 Gbps for firewall throughput and 800 Mbps XTM throughput, even with security services and deep packet inspection enabled. The 5 Series delivers formidable per-formance for exceptional value.	Faster, safe web surfing Add a simple subscription to Reputation Enabled Defense to your XTM solution and your organization will have faster web performance and even stronger security – with no additional hardware to buy.
3 ways to manage your appliance Now you have the power to choose how you manage your WatchGuard appliance including, WatchGuard System Manager, the command line interface, and a web UI for access from anywhere, anytime.	Fireware XTM included Our newest Fireware XTM OS increases security and networking capabilities. When you're ready, it's easy to upgrade to the Pro version of the OS for even more features.
Reporting in the Browser Provides a web-based, customizable reports portal designed to be hosted with direct Internet access for easy report selection and viewing.	Maximum network uptime With a Fireware Pro OS upgrade comes high availability capabilities – active/active and active/passive – to ensure your network is always up and running.
Application Control Control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.	Self Health Monitoring Health monitoring for the WSM logging and reporting system helps minimize disruptions and maintain high service levels in these critical functions.
Remote/External Log Server/Report Server DB MSSPs and larger organizations can now take advantage of the ability to isolate logging and reporting on a separate PC for high performance, scalability, and redundancy.	An investment in your security Model upgradability ensures your network security investment is protected with the ability to easily upgrade its performance, capacity, and security capabilities as business requirements change and new threats emerge.
Green security Our firewalls are designed with efficiency in mind, consuming very little energy. Compare our power consumption to other security products and see how WatchGuard can make your data center more energy efficient. Green up your network with WatchGuard.

Model Comparision:

WatchGuard Model	XTM 505	XTM 510	XTM 520	XTM 530
Ideal For	Main offices that need performance-driven security that's priced right	Main offices / headquarters that want security with fast throughput and room to grow	Main offices / headquarters looking for enterprise-grade performance and security in an all-in-one solution	Main offices / headquarters that require enterprise-grade performance and powerful security with flexible, centralized management
Hardware
Model Upgradeable				N/A
Interfaces	6: 10/100/1000 and 1:10/100	6: 10/100/1000 and 1:10/100	6: 10/100/1000 and 1:10/100	6: 10/100/1000 and 1:10/100
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only	N/A	N/A	N/A	N/A
User Authentication with transparent Windows authentication
Performance
Firewall Throughput**	1.5 Gbps	1.8 Gbps	2.2 Gbps	2.6 Gbps
VPN Throughput**	210 Mbps	350 Mbps	550 Mbps	750 Mbps
AV Throughput**	520 Mbps	625 Mbps	760 Mbps	900 Mbps
IPS Throughput**	500 Mbps	600 Mbps	735 Mbps	870 Mbps
XTM Throughput**	330 Mbps	395 Mbps	480 Mbps	570 Mbps
Concurrent Sessions* (bi-directional)	40,000	50,000	100,000	350,000
VPN Tunnels
Branch Office VPN Tunnels (Max.)	65	75	200	600
Mobile VPN with SSL (Incl/Max)	1 / 65	1 / 75	1 / 300	1 / 600
Mobile VPN with IPSec Client Licenses (Bundled)	5	25	50	400
Mobile VPN with IPSec Tunnels (Max.)	75	100	300	1,000
VPN Authentication
Management
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates.	4-device WatchGuard System Manager license included with purchase.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN	75	75	75	75
Policy-Based Routing	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro
WAN Failover
Multi-WAN Load Balancing	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro
Server Load Balancing	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro
Traffic Management/QoS
High Availability Active/Active or Active/Passive	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro
Dynamic Routing	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro	Optional with Fireware XTM Pro
VoIP (SIP and H.323)Support
Networking Features
Application Control	Included with Security Bundle	Optional	Optional	Optional
Reputation Enabled Defense	Included with Security Bundle	Optional	Optional	Optional
spamBlocker with Virus Outbreak Detection	Included with Security Bundle	Optional	Optional	Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS)	Included with Security Bundle	Optional	Optional	Optional
WebBlocker with HTTPS URL filtering	Included with Security Bundle	Optional	Optional	Optional
LiveSecurity® Service	1-year and 3-year subscriptions available

*Concurrent sessions here represent the number of bi-directional connections.
**Throughput rates will vary based on environment & configuration.

Product View:

Options & Upgrades:

Turn your WatchGuard XTM security appliance into a complete threat management solution with a WatchGuard Security Suite.

Application Control Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth. WebBlocker WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks. Gateway AntiVirus Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time. LiveSecurity Service LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.

Reputation Enabled Defense Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead. spamBlocker spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry. Intrusion Prevention Service Intrusion Prevention Serviceworks hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

Documentation:

Download the WatchGuard XTM 5 Series Datasheet (PDF).