WatchGuard XTM 330
Extensible Threat Management for Growing Businesses

WatchGuard XTM 330 Series:

WatchGuard XTM 330 appliances deliver a new class of performance-driven security for growing businesses. The XTM 330 offers up to 850 Mbps firewall throughput and security features including full HTTPS inspection, VoIP support, and optional application control.

An all-in-one XTM network security solution integrates complete protection while slashing the time and cost associated with managing multiple single-point security products. All security capabilities work together for a holistic, comprehensive approach to network protection. Your IT staff has more time to focus on other areas of network administration, and your business saves money on support and hardware costs.

With a WatchGuard® XTM 330 Security Solution, your network is:

Secure:

• Application-layer content inspection recognizes & blocks threats that stateful packet firewalls cannot detect.
• Wide-ranging proxy protection provides robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
• A suite of security subscriptions boosts protection in critical attack areas for complete threat management.
• Optional Application Control keeps unproductive, inappropriate, and dangerous apps off-limits.

Fast and Efficient:

• Up to 850 Mbps firewall throughput and up to 150 Mbps VPN throughput keep data moving.
• Aggregate throughput can reach 70 Mbps, even when security subscriptions are enabled.
• Seven 1-Gigabit Ethernet ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
• Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
• Includes the "Pro" version of the Fireware XTM operating system for advanced networking features, including VLAN support, multi-WAN load balancing, and dynamic routing.
• Intuitive management console centrally manages all security functions.
• Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.
• Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Flexible:

• WAN and VPN failover increase performance, redundancy, and reliability.
• Multiple VPN choices (SSL and IPSec) for flexibility in remote access, including support for Apple iOS devices such as the iPhone, iPad, and IPod touch.
• To maximize port utilization, any of the 7 ports can be configured as Internal, External, or Optional.

Scalable:

• Add powerful security subscriptions to block spam, control dangerous and inappropriate application usage and web surfing, prevent network intrusions, and stop viruses, spyware, and other malware at the gateway.

Prepared for Tomorrow's Challenges:

• Multi-layered, interlocking security protects the network while throughput remains high. No need to compromise protection for strong performance or vice versa.
• Advanced networking features ensure reliability and the flexibility to meet changing business requirements.
• Secure remote connectivity keeps mobile workforce online and productive.
• Monitoring and reporting tools, included at no extra cost, support industry and regulatory compliance, with drill-down functions that make it easy to pinpoint specific activities.

Technical Specifications:

XTM 330 Series Technical Specifications
Security Features
Firewall	Stateful Packet Inspection, Deep Application Inspection, Proxy Firewall
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Threat Protection	Blocks spyware, DoS attacks, fragmented & malformed packets, blended threats & more
VoIP	H.323. SIP, Call Setup and Session Security
Security Subscriptions	Application Control, Reputation Enabled Defense, spamBlocker, WebBlocker, Gateway AntiVirus, Intrusion Prevention Service
VPN & Authentication
Encryption	DES, 3DES, AES 128-, 192-, 256-bit
IPSec	SHA-1, MD5, IKE pre-shared key, 3rd party cert
SSL	Thin client, Web exchange
PPTP	Server and Passthrough
VPN Failover
Single Sign-on	Transparent Active Directory Authentication
XAUTH	Radius, LDAP, Secure LDAP, Windows Active Directory
Other user authentication	VASCO, RSA SecurID, Web-based, Local, Microsoft Terminal Services and Citrix
Throughput & Connections
Firewall Throughput*	850 Mbps
VPN Throughput*	150 Mbps
XTM Aggregate Throughput*	70 Mbps
Interfaces 10/100/1000	7 copper
I/O Interfaces	1 Serial/2 USB
Nodes Supported (LAN IPs)	Unrestricted
Concurrent Connections	40,000 (bi-directional)
VLANs bridging, tagging, routed mode	75
WSM Licenses (included)	4
Local User Database	500
VPN Specifications
Branch Office VPN Tunnels	50
MUVPN Tunnels IPSec	5/55 (included/max)
MUVPN Tunnels SSL	55
Standard Networking
IP Address Assignment	Static, DynDNS, PPPoE, DHCP (server, client, relay)
NAT	Static, dynamic, 1:1, IPSec traversal, policy-based
QoS	8 priority queues, DiffServ, modified strict queuing
Management
Management Platform	WatchGuard System Manager v.11 or higher
Alarms and Notifications	SNMP v2/v3, Email, Mgmt. System Alert
Server Support	Logging, Reporting, Quarantine, WebBlocker, Management
Web UI	Supports Windows, Mac, Linux, and Solaris OS with most common browsers
Command Line Interface	Includes direct connect and scripting
Certifications
Security	ICSA, FIPS 140-2 and EAL4+ in progress
Safety	NRTL/C, CB
Network	IPv6 Ready Gold (routing)
Hazardous Substance Control	WEEE, RoHS, REACH
Dimensions and Power
Product Dimensions	11.25" x 17" x 1.75" (28.6 x 43.2 x 4.5 cm)
Shipping Dimensions	18" x 21" x 5.25" (45.7 x 53.3 x 13.3 cm)
Shipping Weight	16.1 lbs (7.3 Kg)
AC Power	100-240 VAC Autosensing
Power Consumption	U.S. 50 Watts (max), 171 BTU (max)
Rack Mountable	1U rack mount kit included
Environment
	Operating:	Storage:
Temperature	32° F to 104° F 0° C to 40° C	-40° F to 158° F -40° C to 70° C
Relative Humidty	10% to 85% non-condensing	10% to 95% non-condensing
Altitude	0 to 9,843 ft at 95° F (3,000 m at 35° C)	0 to 15,000 ft at 95° F (4,570 m at 35° C)
MTBF	51,644 hours @ 77° F (25° C)

*Throughput rates will vary based on environment and configuration.

Options and Upgrades:

WebBlocker WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks. Gateway AntiVirus Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time. LiveSecurity Service Your WatchGuard appliance includes a subscription to our ground-breaking LiveSecurity Service, which you activate online when you register your product. You have three options for getting LiveSecurity when you purchase any WatchGuard XTM or Firebox® X Peak™, Core™, or Edge e-Series appliance. Choose the option that best fits your budget cycle and renewal schedule.

spamBlocker spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry. Intrusion Prevention Service Intrusion Prevention Serviceworks hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

Powered by Fireware® XTM Pro

The XTM 330 appliance ships with the Pro version of the Fireware XTM operating system, providing the advanced networking features* that demanding networks require.

Networking Features:	Fireware XTM Pro:
Routing	Static, Dynamic (BGP4, OSPF, RIP v1/v2) Policy-based
NAT	Static, dynamic, 1:1, IPSec traversal, policy-based Virtual IP for server load balancing
Other Features	Port Independence, Multi-WAN failover, Transparent/drop-in mode, Multi-WAN load balancing, Server load balancing

*High Availability is not currently available on the XTM 330

Documentation:

Download the WatchGuard XTM 330 Series Datasheet (PDF).