WatchGuard XTM 5 Series - Detailed Specs

	XTM 515	XTM 525	XTM 535	XTM 545
Throughput and Connections
Firewall throughput*	2 Gbps	2.5 Gbps	3 Gbps	3.5 Gbps
VPN throughput*	250 Mbps	350 Mbps	550 Mbps	750 Mbps
AV throughput*	1.5 Gbps	1.7 Gbps	1.8 Gbps	2 Gbps
IPS throughput*	1.6 Gbps	1.7 Gbps	1.8 Gbps	1.9 Gbps
UTM throughput*	850 Mbps	1 Gbps	1.1 Gbps	1.2 Gbps
Interfaces 10/100	1 copper	1 copper	1 copper	1 copper
Interfaces 10/100/1000	6 copper	6 copper	6 copper	6 copper
I/O interfaces	1 Serial,	1 Serial,	1 Serial,	1 Serial,
	2 USB	2 USB	2 USB	2 USB
Nodes supported (LAN IPs)	Unrestricted	Unrestricted	Unrestricted	Unrestricted
Concurrent sessions	40,000	50,000	100,000	350,000
(bi-directional)
New connections per second	24,000	24,000	28,000	28,000
VLANs (bridging, tagging, routed mode)	100	200	300	400
Authenticated users	500	500	1,000	2,500
VPN tunnels
Branch Office VPN	65	75	200	600
Mobile VPN IPSec (incl/max)	75/75	100/100	300/300	1,000/1,000
Mobile VPN SSL	65	75	300	600
PPTP	50	50	50	50

* Throughput rates will vary based on environment & configuration

Security

Firewall

Stateful packet inspection, deep packet inspection, proxy firewall

Application Proxies

HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3

Threat Protection

Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats and more

VoIP

H.323. SIP, call setup & session security

Security subscriptions

Application Control, Reputation Enabled Defense, WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service (available in the Security Bundle)

VPN & Authentication

Encryption

DES, 3DES, AES 128-, 192-, 256-bit

IPSec

SHA-1, MD5, IKE pre-shared Key, 3rd party cert import

SSL

Thin client, Web exchange

PPTP

Server & Passthrough

VPN Failover

Yes

Single Sign-On

Transparent Active Directory Auth.

XAUTH

Radius, LDAP, Windows Active Directory

Other User Authentication

VASCO, RSA SecurID, web-based, local

Networking

Operating System

Fireware XTM Pro

IP Address Assignment

Static, DynDNS, PPPoE, DHCP (server, client, relay)

Routing

Static, dynamic (BGP4, OSPF, RIP v1/v2), policy-based

QoS

8 priority queues, diffserv, modified strict queuing

High Availability

Active/passive, active/active with load balancing

NAT

Static, dynamic, 1:1, IPSec NAT traversal, policy-based, virtual IP for server load balancing

Other Networking

Port independence, multi-WAN failover, multi-WAN load balancing, transparent/drop-in mode

Management

Management Platform

WatchGuard System Manager (WSM) v.11 or higher

4-device WatchGuard System Manager license included with purchase.

Alarms and Notifications

SNMP v2/v3, Email, Management System Alert

Server Support

Logging, Reporting, Quarantine, WebBlocker, Management

Web UI

Supports Windows, Mac, Linux, and Solaris OS

CLI

Includes direct connect and scripting

Hardware

Product Dimensions

11.25" x 17" x 1.75"
(28.6 x 43.2 x 4.4 cm)

Shipping Dimensions

21" x 18" x 5.25"
(53.3 x 45.7 x 13.3 cm)

Shipping Weight

16.1 lbs (7.3 Kg)

AC Power

100-240 VAC autosensing

Power Consumption

Max 28 Watt (290 BTU/hr)

Rack Mountable

Yes (1U rack mount)

Certifications

Security

ICSA Firewall, ICSA VPN, CC EAL4+
Review pending: FIPS 140-2

Network

IPv6 Ready Gold (routing)

Safety

NRTL/C, CB

Hazardous Substance Compliance

WEEE, RoHS, REACH