WatchGuard XTM 33
Extensible Threat Management for Growing Businesses

WatchGuard XTM 33 Series Overview:

Introducing the WatchGuard XTM 3 Series! The newest member of the XTM family is a powerhouse performer for small businesses that want next-generation security features and fast firewall/VPN throughput at a small-business price.

The XTM 3 Series appliances include a suite of flexible management tools to give small businesses the tools they need to stay on top of network activity. They also include the Pro version of Fireware XTM operating system for advanced networking features, including VLAN support, multi-WAN load balancing, and dynamic routing. Real-time monitoring and rich reporting are included at no extra cost.

With a Next-generation XTM 3 Series Security solution, your network is:

Secure

• Application-layer content inspection recognizes and blocks threats that stateful packet firewalls cannot detect.
• Wide-ranging proxy protection provides robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
• A suite of security subscriptions boosts protection in critical attack areas for complete threat management.
• Optional Application Control keeps unproductive, inappropriate, and dangerous apps off-limits.

Fast and Efficient

• Up to 1.4 Gbps firewall throughput and up to 240 Mbps VPN throughput keep data moving.
• Up to seven 1GgE ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
• Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
• Includes the “Pro” version of the Fireware® XTM operating system for advanced networking features, including VLAN support, multi-WAN load balancing, and dynamic routing.
• Intuitive management console centrally manages all security functions.
• Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.
• Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

• WAN and VPN failover provide redundancy for increased reliability.
• Multiple VPN choices (SSL and IPSec) for flexibility in remote access, including support for Apple iOS devices such as the iPhone, iPad, and iPod touch.
• To maximize port utilization, any of the ports can be configured as Trusted, External, or DMZ.
• Choose the form factor that suits your needs – XTM 330 is rack mount, XTM 33/33-W is tabletop.

• The XTM 33-W wireless model includes optional dual-band 802.11/n technology for much more responsive wireless network connections and expanded range. Allows users to access 2.4 GHz or less crowded 5 GHz band.
• Multiple security zones give administrators precise control over Internet access privileges for different user groups.
• Wireless guest services segment the Internet for customers/guests.

• Multi-layered, interlocking security protects the network while throughput remains high. No need to compromise protection for strong performance or vice versa.
• Advanced networking features ensure reliability and the flexibility to meet changing business requirements.
• Secure remote connectivity keeps the mobile workforce online and productive.
• Monitoring and reporting tools, included at no extra cost, support industry and regulatory compliance, with drill-down functions that make it easy to pinpoint specific activities.

Features:

Detailed Specifications:

* Throughput rates will vary based on environment and configuration
† Server load balancing is not available on 3 Series appliances.

Compare Models:

WatchGuard Model	XTM 33/33-W	XTM 330
Ideal For	Remote offices, small businesses that need an easy-to-manage solution at a great price. Available in wired and wireless models.	Small businesses that want the next-generation of network security combined with fast throughput and advanced networking features.
Hardware
Model Upgradeable	N/A	N/A
Interfaces	5: 10/100/1000	7: 10/100/1000
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only	802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services	N/A
User Authentication with transparent Windows authentication
Performance
Firewall Throughput**	850 Mbps	1.4 Gbps
VPN Throughput**	100 Mbps	240 Mbps
AV Throughput**	175 Mbps	340 Mbps
IPS Throughput**	328 Mbps	640 Mbps
UTM Throughput**	146 Mbps	298 Mbps
Concurrent Sessions* (bi-directional)	40,000	40,000
VPN Tunnels
Branch Office VPN Tunnels (Max.)	50	50
Mobile VPN with SSL (Incl/Max)	55	55
Mobile VPN with IPSec Client Licenses (Bundled)	5	5
Mobile VPN with IPSec Tunnels (Max.)	5/55	5/55
VPN Authentication
Management
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates.	4-device WatchGuard System Manager license included with purchase.	4-device WatchGuard System Manager license included with purchase.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN	50	75
Policy-Based Routing
WAN Failover
Multi-WAN Load Balancing
Server Load Balancing	N/A	N/A
Traffic Management/QoS
High Availability Active/Active or Active/Passive
Dynamic Routing
VoIP (SIP and H.323) Support
Additional Security Subscriptions
Application Control	Optional	Optional
Reputation Enabled Defense	Optional	Optional
spamBlocker with Virus Outbreak Detection	Optional	Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS)	Optional	Optional
WebBlocker with HTTPS URL filtering	Optional	Optional
LiveSecurity® Service	1-year and 3-year subscriptions available	1-year and 3-year subscriptions available

* Concurrent sessions here represent the number of bi-directional connections.
** Throughput rates will vary based on environment & configuration.

Options and Upgrades:

Turn your WatchGuard XTM security appliance into a complete threat management solution with a WatchGuard Security Suite.

Documentation:

Download the WatchGuard XTM 3 Series Datasheet (PDF).