WatchGuard XTM 2050
Next-Generation Firewall

WatchGuard XTM 2050 Series Overview:

The WatchGuard next-generation firewall (NGFW) series is comprised of two high performance platforms, the XTM 1050 and the XTM 2050, which provide fully extensible, enterprise-class protection and productivity safeguards. Both are targeted toward large enterprises, headquarters, data centers and managed security service providers.

WatchGuard's flagship, next-generation products provide true line-speed security inspection on all traffic and support multi-gigabit packet filtering throughput. In addition, this next-generation line provides application control; connects offices via unique drag-and-drop VPN; connects people via SSL and IPSec VPN; and gives businesses unparalleled visibility into real-time and historical user, network, and security activities. With WatchGuard solutions, businesses can define, enforce, and audit strong security and acceptable use policies, resulting in increased employee productivity and less risk to critical intellectual property or customer data. This all-in-one solution integrates IPS, Application Control, and other optional security services, and LiveSecurity to save the time and money associated with managing multiple single-point security products.

The XTM 1050 and 2050 are next-generation firewalls that provide the enterprise unparalleled visibility into real-time and historical user, network, and security activities.

Application Control:

• Provides global and policy-based monitoring and blocking of over 1,800 unique web and business applications for greater productivity and enhanced security.
• Empower administrators to exercise fine-grained control over hundreds of applications, and understand which applications are being used and by whom, by using over 2,500 signatures and advanced behavioral techniques.
• With this fully integrated security subscription, IT Administrators can enforce acceptable use policies for users and groups by category, application, and application sub-functions. For example, they can define a policy that allows the marketing department to access Facebook, but not Facebook games.

Intrusion Prevention Service:

• Identify malware and allow, block or log questionable traffic based on type, user/group, protocol and severity.
• Scan all protocols, including HTTP, HTTPS, FTP, TCP, UDP, DNS, SMTP and POP3 to block network, application, and protocol-based attacks.
• Update signatures without interruption as new threats emerge.

Support:

• WatchGuard provides LiveSecurity® Plus with every NGFW Bundle for 24x7 technical support, hardware warranty, and software updates. Customers can upgrade to LiveSecurity Gold or LiveSecurity Platinum for extended protection.
• Advance Hardware Replacement (RMA) program that ships a replacement via pre-paid, next-day air freight in advance of receiving the returned appliance.
• Upgrade to Premium 4 Hr RMA and within 4 hours of approval by WatchGuard support, replacement appliances are delivered on-site.

Features:

Detailed Specifications:

*Fiber modules on the XTM 1050 are optional. Fiber modules on the XTM 2050 are included.

Product Comparison:

WatchGuard Model	XTM 1050	XTM 2050
Ideal For	Headquarters/data centers	Enterprises, corporate and university campuses, MSSPs
Hardware
Model Upgradeable	N/A	N/A
Interfaces	12: 10/100/1000 4: 1G SFP+ Fiber (optional) or 1: 10G SFP+ Fiber (optional)	16: 10/100/1000 2: 10G SFP+ Fiber
DMZs	12	16
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only	N/A	N/A
User Authentication with transparent Windows authentication
Performance
Firewall Throughput**	10 Gbps	20 Gbps
VPN Throughput**	1.6 Gbps	1.6 Gbps
XTM Throughput**	2 Gbps	Up to 10 Gbps
Concurrent Sessions* (bi-directional)	1,250,000	2,500,000
VPN Tunnels
Branch Office VPN Tunnels (Max.)	7,000	10,000
Mobile VPN with SSL Incl/Max	15,000	20,000
Mobile VPN with IPSec Client Licenses (Bundled)	15,000	20,000
Mobile VPN with IPSec Tunnels (Max.)	15,000	20,000
VPN Authentication
Management
Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates.	4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.	4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN	500	500
Policy-Based Routing
WAN Failover
Multi-WAN Load Balancing
Server Load Balancing
Traffic Management/QoS
High Availability Active/Active or Active/Passive
Dynamic Routing
VoIP (SIP and H.323) Support
Additional Security Subscriptions
Application Control	Optional	Optional
Reputation Enabled Defense	Optional	Optional
spamBlocker with Virus Outbreak Detection	Optional	Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS)	Optional	Optional
WebBlocker with HTTPS URL filtering	Optional	Optional
LiveSecurity® Service	1-Year Initial Subscription Available	1-Year Initial Subscription Available

*Concurrent sessions here represent the number of bi-directional connections. Firebox e-Series products have previously published uni-directional concurrent sessions which we have converted here for comparison purposes. You can multiply this bi-directional number by 2 to calculate uni-directional data.

**Throughput rates will vary based on environment & configuration

Options and Upgrades:

Turn your WatchGuard XTM security appliance into a complete threat management solution with a WatchGuard Security Suite.

Documentation:

Download the WatchGuard® XTM 1050 and 2050 Datasheet(PDF).