Call a Specialist Today! 800-886-4561

WatchGuard XTM 26
Extensible Threat Management for Growing Businesses

WatchGuard XTM 2 Series Wireless Appliance

Wireless Model Available!

The XTM 26 Series is no longer available and has been replaced by the new Firebox T30 Series. Support and subscription renewals are still available below.

More pricing below, click here!

WatchGuard XTM 26 Series Overview:

Live Demo Box, Click here!

Small businesses need big security, too, and the newest WatchGuard® XTM 2 Series firewall/VPN appliances deliver that strong protection – but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service. The XTM 25 and XTM 26 also provide the fastest throughput of any 2 Series models to date. Wireless models feature dual-band 802.11n for Wi-Fi with enhanced speed and responsiveness. Flexible, centralized management tools allow administrators to work from an intuitive console, scriptable CLI, and web UI. Any XTM 2 Series appliance, from the XTM 21 to the XTM 26, makes an ideal stand-alone security solution or VPN endpoint on a WatchGuard XTM network.

Faster, safe web surfingFaster, safe web surfing
Add a simple subscription to Reputation Enabled Defense to your XTM solution and your organization will have faster web performance and even stronger security – with no additional hardware to buy.
Fireware XTM includedWireless security with guest access
Everyone loves wireless. With dual-band 802.11n the 2 Series delivers reliable wireless connectivity while allowing you to provide controlled Internet access to guest users without compromising security.
Affordable security for small businessAffordable security for small business
Comprehensive network protection at a digestible price point — your network and your bottom line should be pretty happy about that.
Multiple VPN choicesMultiple VPN choices
Have flexible remote access options, including IPSec, SSL, and support for iOS devices such as iPhone, iPad, and iPod touch.
3 ways to manage your appliance3 ways to manage your appliance
Now you have the power to choose how you manage your WatchGuard appliance including, WatchGuard System Manager, the command line interface, and a web UI for access from anywhere, anytime.
Green securityGreen security
Our firewalls are designed with efficiency in mind, consuming very little energy. Compare our power consumption to other security products and see how WatchGuard can make your data center more energy efficient. Green up your network with WatchGuard.
Hardware-less upgradesHardware-less upgrades
We won't make you buy new hardware as your security demands grow. You can use simple software license keys to add functionality and increase protection as your network requires it.
Reporting made easyReporting made easy
Monitoring and reporting tools, included at no extra cost, support compliance, with drill-down functions that make it easy to pinpoint specific activities.

Application ControlApplication Control
Control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.


XTM Security Subscriptions:

Data Loss Prevention (DLP)

The DLP subscription prevents data breaches by scanning text and common file types in email, web, and FTP traffic to detect sensitive information attempting to exit the network.

  • A built-in library of over 200 rules allows IT to quickly create and update corporate DLP policies.
  • Built-in sensors are included for PCI DSS and HIPAA compliance mandates.

Application Control

Application Control has become an essential component of next-generation security. It protects the network and keeps users on the tasks that matter by blocking unproductive and inappropriate apps.

  • Gain control over 2,000 web and business applications, using more than 2,500 unique signatures.
  • Have complete visibility into applications used, with intuitive monitoring and reporting capabilities.
  • Control usage of applications by category, application, or application sub-functions.

Intrusion Prevention Service (IPS)

By adding an IPS subscription, your network gains in-line protection from attacks, including buffer overflows, SQL injections, and cross-site scripting attacks.

  • All ports and protocols are scanned to block network, application, and protocol-based attacks.
  • Blocked sites list saves valuable processing time by dynamically blocking IP addresses that have been positively identified as the source of an attack.


URL and content filtering are indispensable for controlling access to sites that host objectionable material or pose network security risks. These include known spyware and phishing sites.

  • Configure over 100 web categories to stop the sites and web tools you most want to block, and enable access by user, group, domain, and need for maximum flexibility
  • URL database is hosted in the cloud to simplify setup and administration. A local install option is also available.

Gateway AntiVirus

Scans traffic on all major protocols to stop threats before they can gain access to your servers and execute their dangerous payloads.

  • Heuristic analysis identifies viruses and dangerous code that signatures can’t catch.
  • Decompresses and scans all common formats, including .rar, .zip, .gzip, .tar, .jar, .chm, .lha, .cab. , .arj,

Reputation Enabled Defense

WatchGuard XTM is the only unified threat management system on the market that includes a powerful, cloud-based reputation lookup service to ensure faster, safer web surfing.

  • Continuous updates keep current with dynamic web content and changing web conditions.
  • Up to 50% of URL scanning can be skipped without compromising security, resulting in faster browsing times and greater throughput at the gateway.


Rely on spamBlocker’s industry-leading Recurrent Pattern Detection (RPD™) technology to detect spam outbreaks as they emerge for immediate, continuous protection from unwanted and dangerous email.

  • Block spam regardless of the language, format, or content of the message – even image-based spam that other anti-spam products often miss.
  • RPD identifies and blocks viral payloads for an additional layer of real-time anti-virus protection.

Flexible architecture blocks network threats while optimizing performance

Flexible architecture blocks network threats while optimizing performance

WatchGuard’s UTM (unified threat management) platform is designed to allow network traffic to pass through a full suite of UTM services— from anti-spam protection to Data Loss Prevention—at top performance levels. Leveraging the power of multi-core processing, the platform runs all scanning engines simultaneously for maximum protection and blazing fast throughput. Resources are allocated based on the flow of data and the security services that data requires. For example, if web filtering needs more horsepower, additional processors are automatically applied so web traffic keeps moving and your business stays secure.

Managing subscriptions is easy

All security functionality on your WatchGuard XTM solution, including UTM subscriptions, can be managed from a single intuitive console.

Know what’s happening on your network at all times

  • Any security activity identified by a service is logged and stored for easy reporting so you can take immediate preventive or corrective action.
  • All management tools, including rich reporting and monitoring, are included with your WatchGuard XTM purchase. There is no additional hardware or software to buy.

Compare Models:

WatchGuard® Model WatchGuard XTM 25/25-W WatchGuard XTM 26/26-W
Ideal For Remote offices, small businesses that need an affordable solution that easily upgrades to accommodate growth. Available in wired and wireless models. Remote offices, small business, wireless hotspots that want an affordable, all-in-one security solution. Available in wired and wireless models.
Model Upgradeable to XTM 26/26-W N/A
Interfaces 5 1GbE 5 1GbE
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323 HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only 802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services 802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services
User Authentication with transparent Windows authentication
Firewall Throughput 240 Mbps 540 Mbps
VPN Throughput 40 Mbps 60 Mbps
AV Throughput 95 Mbps 142 Mbps
IPS Throughput 100 Mbps 226 Mbps
UTM Throughput 80 Mbps 108 Mbps
Concurrent Sessions*
10,000 30,000
VPN Tunnels
Branch Office VPN Tunnels (Max.) 10 40
Mobile VPN with SSL/L2TP (Max.) 11 25
Mobile VPN with IPSec Client Licenses (Bundled) 5 5
Mobile VPN with IPSec Tunnels (Max.) 10 40
VPN Authentication
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates. WatchGuard System Manager Device Upgrade license required. WatchGuard System Manager Device Upgrade license required.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN 50 50
Policy-Based Routing
WAN Failover
Multi-WAN Load Balancing
Server Load Balancing N/A N/A
Traffic Management/QoS
High Availability Active/Active or Active/Passive
Dynamic Routing
VoIP (SIP and H.323) Support
Additional Security Subscriptions
Application Control Optional Optional
Data Loss Prevention Optional Optional
Reputation Enabled Defense Optional Optional
spamBlocker with Virus Outbreak Detection Optional Optional
Gateway AntiVirus/
Intrusion Prevention Service (IPS)
Optional Optional
WebBlocker with HTTPS URL filtering Optional Optional
LiveSecurity® Service 1-year and 3-year subscriptions available 1-year and 3-year subscriptions available

*Concurrent sessions here represent the number of bi-directional connections.

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.

Detailed Specs:

XTM 25/25-W XTM 26/26-W
Throughput and Connections
Firewall throughput 240 Mbps 540 Mbps
VPN throughput 40 Mbps 60 Mbps
AV throughput 95 Mbps 142 Mbps
IPS throughput 100 Mbps 226 Mbps
UTM throughput 80 Mbps 108 Mbps
Interfaces 10/100/1000 5 copper 5 copper
I/O interfaces 1 Serial / 1USB 1 Serial / 1USB
Nodes supported (LAN IPs) Unrestricted Unrestricted
Concurrent sessions
10,000 30,000
New Connections per Second 3,000 3,000
(bridging, tagging, routed mode)
50 50
Authenticated users limit 500 500
VPN tunnels
Branch Office VPN 10 40
Mobile VPN IPSec (incl/max) 5/10 5/40
Mobile VPN SSL/L2TP (max) 11 25
PPTP 50 50
Model Upgradeable
to XTM 26/26-W N/A
Firewall Stateful packet inspection, deep packet inspection, proxy firewall
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Threat Protection Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats and more
VoIP H.323, SIP, call setup & session security
Security subscriptions Application Control, Reputation Enabled Defense, WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service (available in the Security Bundle)
VPN & Authentication
Encryption DES, 3DES, AES 128-, 192-, 256-bit
IPSec SHA-1, MD5, IKE pre-shared Key, 3rd party cert import
SSL Thin client
L2TP Works with native OS clients
PPTP Server & Passthrough
VPN Failover Yes
Single Sign-On Transparent Active Directory Auth.
XAUTH RADIUS, LDAP, Windows Active Directory
Other User Authentication VASCO, RSA SecurID, web-based, local
Operating System Fireware XTM, upgradeable to Pro version
IP Address Assignment Static, DynDNS, PPPoE, DHCP (server, client, relay)
Routing Static, policy-based
Link Aggregation 802.3ad dynamic, static, active/backup
QoS 8 priority queues, diffserv, modified strict queuing
NAT Static, dynamic, 1:1, IPSec NAT traversal, policy-based
Other Networking Port independence, High Availability, multi-WAN failover, multi-WAN load balancing, transparent/drop-in mode
Management Platform WatchGuard System Manager (WSM) v.11 or higher
Alarms and Notifications SNMP v2/v3, Email, Management System Alert
Server Support Logging, Reporting, Quarantine, WebBlocker, Management
Web UI Supports Windows, Mac, Linux OS
CLI Includes direct connect and scripting
Product Dimensions (wired models) 6.1" x 7.5" x 1.25" (15.5 x 19.0 x 3.2 cm)
Product Dimensions (wireless models antennae extended) 7.75" x 10.75" x 5" (19.7 x 27.3 x 12.7 cm)
Shipping Dimensions 8" x 10.5" x 4" (20 x 27 x 10 cm)
Shipping Weight (wired) 3.2 lbs (1.45 Kg)
Shipping Weight (wireless) 3.6 lbs (1.6 Kg)
AC Power 100-240 VAC autosensing
Power Consumption (wired) Max 23.3 Watt (80 BTU/hr)
Power Consumption (wireless) Max 24.0 Watt (82 BTU/hr)
Rack Mountable No (wall mount bracket included)
Security ICSA Firewall, ICSA VPN, CC EAL4+, FIPS 140-2
Network IPv6 Ready Gold (routing)
Safety NRTL/C, CB
Hazardous Substance Compliance WEEE, RoHS, REACH

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.

Options & Upgrades:

Security Subscriptions

Data Loss Prevention (DLP)Data Loss Prevention (DLP)
XTM DLP prevents data breaches by scanning text and common file types to detect sensitive information. A predefined library of over 200 rules for 18 countries makes creating and updating corporate data policies as easy as point and click.

Application ControlApplication Control
Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth.

Reputation Enabled DefenseReputation Enabled Defense
Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead.
WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks.
spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry.
Gateway AntiVirusGateway AntiVirus
Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time.

Intrusion Prevention ServiceIntrusion Prevention Service
Intrusion Prevention Service works hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

LiveSecurity ServiceLiveSecurity Service
LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.


Download the WatchGuard XTM 2 Series Datasheet (PDF).

Download the WatchGuard XTM Subscriptions Datasheet (PDF).

Pricing Notes:

WatchGuard XTM Series
XTM 26 Security Suite Renewal/Upgrade
XTM 26 Security Suite Renewal/Upgrade - 1 Year
Our Price: $475.00
XTM 26 Security Suite Renewal/Upgrade - 3 Year
Our Price: $1,135.00
LiveSecurity Renewal for XTM 26 Series, 1-Year
Our Price: $155.00
LiveSecurity Renewal for XTM 26 Series, 3-Year
Our Price: $375.00
LiveSecurity Service Reinstatement
Our Price: $75.00
XTM 2 Series Premium 4 Hour Replacement, 1 Year
Our Price: $125.00
Data Loss Prevention (DLP)
WatchGuard XTM 26/26-W 1-Year Data Loss Prevention
List Price: $110.00
Our Price: $99.00
WatchGuard XTM 26/26-W 3-Year Data Loss Prevention
List Price: $260.00
Our Price: $234.00
WebBlocker Subscription
WebBlocker Subscription for XTM 26 Series, 1-Year
List Price: $260.00
Our Price: $221.00
Gateway AntiVirus Subscription
Gateway AntiVirus Subscription for XTM 26 Series, 1-Year
List Price: $260.00
Our Price: $221.00
SpamBlocker Subscription
SpamBlocker Subscription for XTM 26 Series, 1-Year
List Price: $285.00
Our Price: $242.00
Intrusion Prevention Service
Gateway Intrusion Prevention Service for XTM 26 Series, 1-Year
List Price: $260.00
Our Price: $221.00
Reputation Enabled Defense
Reputation Enabled Defense for XTM 26 Series, 1-Year
List Price: $260.00
Our Price: $221.00
Application Control
Application Control for XTM 26 Series, 1-Year
List Price: $260.00
Our Price: $221.00
APT Blocker
WatchGuard APT Blocker for XTM 26/26-W, 1-Year
Our Price: $260.00
WatchGuard APT Blocker for XTM 26/26-W, 3-Year
Our Price: $625.00
IPSec Mobile VPN Premium client powered by NCP Technology
Includes support for two-factor authentication, pre-login to Windows domains, FIPS 140-2 conformant IPsec algorithms, and a secure personal firewall
XTM IPSec Mobile VPN Client for Windows
List Price: $85.00
Our Price: $77.00
XTM IPSec Mobile VPN Client for Mac
List Price: $85.00
Our Price: $77.00
Mobile VPN (IPSec) License Pack for XTM Series
Upgrades from the default number of mobile VPN users on XTM 2, 5, and 8 Series (IPSec not SSL)
Mobile VPN (IPSec) License Pack for XTM Series - 5 Users
List Price: $275.00
Our Price: $255.00
Mobile VPN (IPSec) License Pack for XTM Series - 10 Users
List Price: $525.00
Our Price: $488.00
Mobile VPN (IPSec) License Pack for XTM Series - 20 Users
List Price: $795.00
Our Price: $739.00
Power Supply XTM 25, 26, and 33
Our Price: $40.00
Wall Mount Bracket for XTM 2 Series
Our Price: $30.00