WatchGuard XTM 2050

xtm2050

The Next-Generation Firewall XTM 2050 succeeds in doing this, while also factoring in affordability and ease of use. This is a top of the line, multi-gigabit Next-Generation Firewall (NGFW) that secures corporate Internet traffic against hackers, malware, network attacks, intrusion attempts, data theft, and other cybercrime while securely connecting offices, remote and virtual employees, and providing real-time and historical visibility into security and user events. The hardware in the NGFW XTM 2050 is superior to its competitors with dual, hot swap power supplies, hot swap fans, and swappable NICS and hard drives.

Overview
Features
Compare Models
Model Specs
Data Sheets

The WatchGuard next-generation firewall (NGFW) series is comprised of two high performance platforms, the XTM 1050 and the XTM 2050, which provide fully extensible, enterprise-class protection and productivity safeguards. Both are targeted toward large enterprises, headquarters, data centers and managed security service providers.

WatchGuard's NGFW products provide true line-speed security inspection on all traffic and support multi-gigabit packet filtering throughput. In addition, the NGFW line provides application control; connects offices via unique Drag and Drop VPN; connects people via SSL and IPSec VPN; and gives the enterprise unparalleled visibility into real-time and historical user, network, and security activities. With WatchGuard's NGFW, businesses can define, enforce, and audit strong security and acceptable use policies, resulting in increased employee productivity and less risk to critical intellectual property or customer data.

The XTM 1050 and 2050 are next-generation firewalls that provide the enterprise unparalleled visibility into real-time and historical user, network, and security activities.

Application Control:

Provides global and policy-based monitoring and blocking of over 1,800 unique web and business applications for greater productivity and enhanced security.
Empower administrators to exercise ﬁne-grained control over hundreds of applications, and understand which applications are being used and by whom, by using over 2,500 signatures and advanced behavioral techniques.
With this fully integrated security subscription, IT Administrators can enforce acceptable use policies for users and groups by category, application, and application sub-functions. For example, they can deﬁne a policy that allows the marketing department to access Facebook, but not Facebook games.

Intrusion Prevention Service:

Identify malware and allow, block or log questionable traﬃc based on type, user/group, protocol and severity.
Scan all protocols, including HTTP, HTTPS, FTP, TCP, UDP, DNS, SMTP and POP3 to block network, application, and protocol-based attacks.
Update signatures without interruption as new threats emerge.

Support:

WatchGuard provides LiveSecurity® Plus with every NGFW Bundle for 24x7 technical support, hardware warranty, and software updates. Customers can upgrade to LiveSecurity Gold or LiveSecurity Platinum for extended protection.
Advance Hardware Replacement (RMA) program that ships a replacement via pre-paid, next-day air freight in advance of receiving the returned appliance.
Upgrade to Premium 4 Hr RMA and within 4 hours of approval by WatchGuard support, replacement appliances are delivered on-site.

Fast 20 Gbps Throughput
The Next-Generation Firewall XTM 2050 crushes network threats while keeping traffic moving with a blazing 20 Gbps for firewall throughput and 2 Gbps VPN throughput. The XTM 2050 is a force to be reckoned with.

Application Control
This Next-Generation Firewall allows you to control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.

Intrusion Prevention
With an Intrusion Prevention System, the Next-Generation Firewall XTM 2050 monitors your security system for malicious activity, preventing viruses and keeping your network safe.

Expert Support
A LiveSecurity subscription provides access to telephone and web support from our team of security experts. Rest assured that with the Next-Generation Firewall XTM 2050, WatchGuard support will be there when your enterprise needs them.

Fireware XTM Pro included
The new advanced OS from WatchGuard includes active/active high availability with load balancing, dynamic routing, VLAN support, and multi-WAN failover to ensure reliability.

High availability (active/active)
Manage a two-appliance cluster as a single logical unit, with high availability and load balancing features that nearly double the single-box performance.

Reporting in the Browser
Provides a web-based, customizable reports portal designed to be hosted with direct Internet access for easy report selection and viewing.

Remote/External Log Server/Report Server DB
MSSPs and larger organizations can now take advantage of the ability to isolate logging and reporting on a separate PC for high performance, scalability, and redundancy.

3 Ways to Manage Your Appliance
Now you have the power to choose how you manage your WatchGuard appliance including, WatchGuard System Manager, the command line interface, and a web UI for access from anywhere, anytime.

WatchGuard Model	WatchGuard XTM 2050	WatchGuard XTM 1050
Ideal For	Enterprises, corporate and university campuses, MSSPs	Headquarters/data centers
Hardware
Model Upgradeable	N/A	N/A
Interfaces	16: 10/100/10002: 10G SFP+ Fiber	12: 10/100/10004: 1G SFP+ Fiber (optional) or 1: 10G SFP+ Fiber (optional)
DMZs	16	12
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)	✔	✔
Wireless Models Only	N/A	N/A
User Authentication with transparent Windows authentication	✔	✔
Performance
Firewall Throughput**	20 Gbps	10 Gbps
VPN Throughput**	1.6 Gbps	1.6 Gbps
XTM Throughput**	Up to 10 Gbps	2 Gbps
Concurrent Sessions* (bi-directional)	2,500,000	1,250,000
VPN Tunnels
Branch Office VPN Tunnels (Max.)	10,000	7,000
Mobile VPN with SSL Incl/Max	20,000	15,000
Mobile VPN with IPSec Client Licenses (Bundled)	20,000	15,000
Mobile VPN with IPSec Tunnels (Max.)	20,000	15,000
VPN Authentication	✔	✔
Management
Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates.	4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.	4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.
Networking Features
Dynamic NAT	✔	✔
Static NAT	✔	✔
One to One NAT	✔	✔
VLAN	500	500
Policy-Based Routing	✔	✔
WAN Failover	✔	✔
Multi-WAN Load Balancing	✔	✔
Server Load Balancing	✔	✔
Traffic Management/QoS	✔	✔
High Availability Active/Active or Active/Passive	✔	✔
Dynamic Routing	✔	✔
VoIP (SIP and H.323) Support	✔	✔
Additional Security Subscriptions
Application Control	Optional	Optional
Reputation Enabled Defense	Optional	Optional
spamBlocker with Virus Outbreak Detection	Optional	Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS)	Optional	Optional
WebBlocker with HTTPS URL filtering	Optional	Optional
LiveSecurity® Service	1-Year Initial Subscription Available	1-Year Initial Subscription Available

*Concurrent sessions here represent the number of bi-directional connections. Firebox e-Series products have previously published uni-directional concurrent sessions which we have converted here for comparison purposes. You can multiply this bi-directional number by 2 to calculate uni-directional data.

**Throughput rates will vary based on environment & configuration

Security
Firewall	Stateful Packet Inspection, Deep Application Inspection, Proxy Firewall
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Threat Protection	Blocks spyware, DoS attacks, fragmented & malformed packets, blended threats & more
VoIP	H.323. SIP, Call Setup and Session Security
Application Control	Available with NGFW Bundle and Security Bundle
Intrusion Prevention Service	Available with NGFW Bundle and Security Bundle
Gateway AntiVirus	Available with Security Bundle
Reputation Enabled Defense	Available with Security Bundle
spamBlocker	Available with Security Bundle
WebBlocker	Available with Security Bundle
VPN & Authentication
Encryption	DES, 3DES, AES 128-, 192-, 256-bit
IPSec	SHA-1, MD5, IKE pre-shared key, 3rd party cert
SSL	Thin client, Web
PPTP	Server & Passthrough
VPN Failover	Yes
Single Sign-On	Transparent Active Directory Auth.
XAUTH	Radius, LDAP, Secure LDAP, Windows Active Directory
Other User Authentication	VASCO, RSA SecurID, Web-based, Local, Microsoft Terminal Services and Citrix
Performance
Firewall Throughput*	20 Gbps
VPN Throughput*	1.6 Gbps
XTM Throughput*	Up to 10 Gbps
Concurrent Sessions (bi-directional)	2500000
Nodes Supported (LAN IPs)	Unrestricted
BOVPN Tunnels	10000
MUVPN Tunnels (IPSec/SSL)	20000
Networking
Operating System	Fireware® XTM Pro
IP Address Assignment	Static, DynDNS, PPPoE, DHCP (Server, Client, Relay)
Routing	Static, dynamic (BGP4, OSPF, RIP v1/v2), Policy-based
QoS	8 priority queues, diff serv, modified strict queuing
VLAN Support	500 VLANs: bridging, tagging, routed mode
High Availability	Active/Passive, Active/Active with load balancing
NAT	Static, dynamic, 1:1, IPSec NAT traversal, Policy-based NAT, Virtual IP
Other Networking	Port independence, WAN failover, load balancing, transparent/drop-in mode
Management
Management Platform	WatchGuard System Manager v11.5 or higher 4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.
Alarms and Notifications	SNMP v2/v3, Email, Mgmt. System Alert
Server Support	Logging, Reporting, Quarantine, WebBlocker, Management
Web UI	Supports Windows, Mac, Linux, and Solaris OS with most common browsers
CLI	Includes direct connect and scripting
Hardware
Interfaces	16: 10/100/1000 2: 10G SFP+ Fiber
Other Ports	1 Serial, 1 Management, 2 USB
Product Dimensions	19" x 27" x 3.5" (48.2 x 68.6 x 8.8 cm)
Shipping Dimensions	23" x 34" x 10.25" (58.3 x 86.4 x 24.7 cm)
Weight	58 lbs (26.3 kg)
AC Power	100-240 VAC Autosensing
Rack Mountable	2U rack-mounted, brackets with rear rails included
Accessories	Universal redundant hot swap power supplies, Hot swap replaceable fans
WEEE/RoHS Compliant	Yes
Security Certifications	ICSA, FIPS, EAL4 pending
Safety Certifications	NRTL/C, CB, CE pending