WatchGuard XTM 1050
Extensible Threat Management for Growing Businesses

Overview:

The WatchGuard next-generation firewall (NGFW) series is comprised of two high performance platforms, the XTM 1050 and the XTM 2050, which provide fully extensible, enterprise-class protection and productivity safeguards. Both are targeted toward large enterprises, headquarters, data centers and managed security service providers.

WatchGuard's NGFW products provide true line-speed security inspection on all traffic and support multi-gigabit packet filtering throughput. In addition, the NGFW line provides application control; connects offices via unique Drag and Drop VPN; connects people via SSL and IPSec VPN; and gives the enterprise unparalleled visibility into real-time and historical user, network, and security activities. With WatchGuard's NGFW, businesses can define, enforce, and audit strong security and acceptable use policies, resulting in increased employee productivity and less risk to critical intellectual property or customer data.

The XTM 1050 and 2050 are next-generation firewalls that provide the enterprise unparalleled visibility into real-time and historical user, network, and security activities.

Application Control:

• Provides global and policy-based monitoring and blocking of over 1,800 unique web and business applications for greater productivity and enhanced security.
• Empower administrators to exercise fine-grained control over hundreds of applications, and understand which applications are being used and by whom, by using over 2,500 signatures and advanced behavioral techniques.
• With this fully integrated security subscription, IT Administrators can enforce acceptable use policies for users and groups by category, application, and application sub-functions. For example, they can define a policy that allows the marketing department to access Facebook, but not Facebook games.

Intrusion Prevention Service:

• Identify malware and allow, block or log questionable traffic based on type, user/group, protocol and severity.
• Scan all protocols, including HTTP, HTTPS, FTP, TCP, UDP, DNS, SMTP and POP3 to block network, application, and protocol-based attacks.
• Update signatures without interruption as new threats emerge.

Support:

• WatchGuard provides LiveSecurity® Plus with every NGFW Bundle for 24x7 technical support, hardware warranty, and software updates. Customers can upgrade to LiveSecurity Gold or LiveSecurity Platinum for extended protection.
• Advance Hardware Replacement (RMA) program that ships a replacement via pre-paid, next-day air freight in advance of receiving the returned appliance.
• Upgrade to Premium 4 Hr RMA and within 4 hours of approval by WatchGuard support, replacement appliances are delivered on-site.

Features:

 

	Fast 20 Gbps Throughput The Next-Generation Firewall XTM 2050 crushes network threats while keeping traffic moving with a blazing 20 Gbps for firewall throughput and 2 Gbps VPN throughput. The XTM 2050 is a force to be reckoned with.
	Application Control This Next-Generation Firewall allows you to control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.
	Intrusion Prevention With an Intrusion Prevention System, the Next-Generation Firewall XTM 2050 monitors your security system for malicious activity, preventing viruses and keeping your network safe.
	Expert Support A LiveSecurity subscription provides access to telephone and web support from our team of security experts. Rest assured that with the Next-Generation Firewall XTM 2050, WatchGuard support will be there when your enterprise needs them.
	Fireware XTM Pro included The new advanced OS from WatchGuard includes active/active high availability with load balancing, dynamic routing, VLAN support, and multi-WAN failover to ensure reliability.
	High availability (active/active) Manage a two-appliance cluster as a single logical unit, with high availability and load balancing features that nearly double the single-box performance.
	Reporting in the Browser Provides a web-based, customizable reports portal designed to be hosted with direct Internet access for easy report selection and viewing.
	Remote/External Log Server/Report Server DB MSSPs and larger organizations can now take advantage of the ability to isolate logging and reporting on a separate PC for high performance, scalability, and redundancy.
	3 Ways to Manage Your Appliance Now you have the power to choose how you manage your WatchGuard appliance including, WatchGuard System Manager, the command line interface, and a web UI for access from anywhere, anytime.

Product Comparison:

 

WatchGuard® Model	WatchGuard® XTM 2050	WatchGuard® XTM 1050
Ideal For	Enterprises, corporate and university campuses, MSSPs	Headquarters/data centers
Hardware
Model Upgradeable	N/A	N/A
Interfaces	16: 10/100/1000 2: 10G SFP+ Fiber	12: 10/100/1000 4: 1G SFP+ Fiber (optional) or 1: 10G SFP+ Fiber (optional)
DMZs	16	12
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only	N/A	N/A
User Authentication with transparent Windows authentication
Performance
Firewall Throughput**	20 Gbps	10 Gbps
VPN Throughput**	1.6 Gbps	1.6 Gbps
XTM Throughput**	Up to 10 Gbps	2 Gbps
Concurrent Sessions* (bi-directional)	2,500,000	1,250,000
VPN Tunnels
Branch Office VPN Tunnels (Max.)	10,000	7,000
Mobile VPN with SSL Incl/Max	20,000	15,000
Mobile VPN with IPSec Client Licenses (Bundled)	20,000	15,000
Mobile VPN with IPSec Tunnels (Max.)	20,000	15,000
VPN Authentication
Management
Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates.	4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.	4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN	500	500
Policy-Based Routing
WAN Failover
Multi-WAN Load Balancing
Server Load Balancing
Traffic Management/QoS
High Availability Active/Active or Active/Passive
Dynamic Routing
VoIP (SIP and H.323) Support
Additional Security Subscriptions
Application Control	Optional	Optional
Reputation Enabled Defense	Optional	Optional
spamBlocker with Virus Outbreak Detection	Optional	Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS)	Optional	Optional
WebBlocker with HTTPS URL filtering	Optional	Optional
LiveSecurity® Service	1-Year Initial Subscription Available	1-Year Initial Subscription Available

*Concurrent sessions here represent the number of bi-directional connections. Firebox e-Series products have previously published uni-directional concurrent sessions which we have converted here for comparison purposes. You can multiply this bi-directional number by 2 to calculate uni-directional data.

**Throughput rates will vary based on environment & configuration

Specifications:

 

Security
Firewall	Stateful Packet Inspection, Deep Application Inspection, Proxy Firewall
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Threat Protection	Blocks spyware, DoS attacks, fragmented & malformed packets, blended threats & more
VoIP	H.323. SIP, Call Setup and Session Security
Application Control	Available with NGFW Bundle and Security Bundle
Intrusion Prevention Service	Available with NGFW Bundle and Security Bundle
Gateway AntiVirus	Available with Security Bundle
Reputation Enabled Defense	Available with Security Bundle
spamBlocker	Available with Security Bundle
WebBlocker	Available with Security Bundle

 

VPN & Authentication
Encryption	DES, 3DES, AES 128-, 192-, 256-bit
IPSec	SHA-1, MD5, IKE pre-shared key, 3rd party cert
SSL	Thin client, Web
PPTP	Server & Passthrough
VPN Failover	Yes
Single Sign-On	Transparent Active Directory Auth.
XAUTH	Radius, LDAP, Secure LDAP, Windows Active Directory
Other User Authentication	VASCO, RSA SecurID, Web-based, Local, Microsoft Terminal Services and Citrix

 

Performance
Firewall Throughput*	20 Gbps
VPN Throughput*	1.6 Gbps
XTM Throughput*	Up to 10 Gbps
Concurrent Sessions (bi-directional)	2,500,000
Nodes Supported (LAN IPs)	Unrestricted
BOVPN Tunnels	10,000
MUVPN Tunnels (IPSec/SSL)	20,000

 

Networking
Operating System	Fireware® XTM Pro
IP Address Assignment	Static, DynDNS, PPPoE, DHCP (Server, Client, Relay)
Routing	Static, dynamic (BGP4, OSPF, RIP v1/v2), Policy-based
QoS	8 priority queues, diff serv, modified strict queuing
VLAN Support	500 VLANs: bridging, tagging, routed mode
High Availability	Active/Passive, Active/Active with load balancing
NAT	Static, dynamic, 1:1, IPSec NAT traversal, Policy-based NAT, Virtual IP
Other Networking	Port independence, WAN failover, load balancing, transparent/drop-in mode

 

Management
Management Platform	WatchGuard System Manager v11.5 or higher 4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.
Alarms and Notifications	SNMP v2/v3, Email, Mgmt. System Alert
Server Support	Logging, Reporting, Quarantine, WebBlocker, Management
Web UI	Supports Windows, Mac, Linux, and Solaris OS with most common browsers
CLI	Includes direct connect and scripting

 

Hardware
Interfaces	16: 10/100/1000 2: 10G SFP+ Fiber
Other Ports	1 Serial, 1 Management, 2 USB
Product Dimensions	19" x 27" x 3.5" (48.2 x 68.6 x 8.8 cm)
Shipping Dimensions	23" x 34" x 10.25" (58.3 x 86.4 x 24.7 cm)
Weight	58 lbs (26.3 kg)
AC Power	100-240 VAC Autosensing
Rack Mountable	2U rack-mounted, brackets with rear rails included
Accessories	Universal redundant hot swap power supplies, Hot swap replaceable fans
WEEE/RoHS Compliant	Yes
Security Certifications	ICSA, FIPS, EAL4 pending
Safety Certifications	NRTL/C, CB, CE pending

*Throughput rates will vary based on environment & configuration

 

Documentation:

Download the WatchGuard® XTM 1050 and 2050 Datasheet(PDF).