WatchGuard XTM 505
Extensible Threat Management for Growing Businesses

WatchGuard XTM 505 Series Overview:

WatchGuard XTM 5 Series appliances deliver a new class of performance driven security for growing mid-size businesses. The 5 Series offers up to 2.3 Gbps firewall throughput and security features including full HTTPS inspection and VoIP support. Organizations that want room to easily scale their network security can move up to greater performance, more users, and additional security and networking features to meet escalating demands, without costly hardware replacements

Why buy an all-in-one solution?

An all-in-one XTM network security solution integrates complete protection while slashing the time and cost associated with managing multiple single-point security products. All security capabilities work together for a holistic, comprehensive approach to network protection. Your IT staff has more time to focus on other areas of network administration, and your business saves money on support and hardware costs.

With a WatchGuard® XTM 5 Series solution, your network is:

SECURE:

• Application-layer content inspection recognizes & blocks threats that stateful packet firewalls cannot detect.
• Wide-ranging proxy protection comes from robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
• A suite of security subscriptions boosts protection in critical attack areas for complete threat management.
• Security subscriptions boost protection in critical attack areas for complete unified threat management.
• Provides integrated SSL VPN for simple, anywhere-anytime network access.
• Includes Skype blocking – first of the next generation of built-in application-blocking capabilities.

EFFICIENT:

• Up to 2.3 Gbps rewall throughput and up to 750 Mbps VPN throughput keep data moving.
• Best UTM throughput in its class, even with strong security enabled.
• Gigabit Ethernet ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
• Active/active high availability with load balancing ensures maximum network uptime.
• Scriptable CLI supports interoperability and allows easy integration into existing infrastructure.
• Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
• Intuitive management console centrally manages all security functions.
• Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.
• Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

FLEXIBLE:

• Call setup security for VoIP means you don’t need to “wire around the firewall” to take advantage of the big cost savings that VoIP can generate.
• WAN and VPN failover increase performance, redundancy, and reliability.
• Multiple VPN choices deliver flexibility in remote access.
• To maximize port utilization, any of the seven ports can be con gured as Internal, External, or Optional.
• Networking features, such as transparent bridge mode and multicast over VPN, allow you to add
  security without needing to change existing network infrastructure.

SCALABLE:

• Upgrade to a higher model within the line for more performance and capacity with a simple license key.
• Pair with WatchGuard XCS appliance for focused emphasis on messaging and content security.
• Move up to the “Pro” version of the Fireware XTM operating system for advanced networking features, including active/active high availability, VLAN support, multi-WAN and server load balancing, dynamic routing, and QoS.
• Add powerful security subscriptions to block spam, control dangerous and inappropriate web surfing, prevent network intrusions, and stop viruses, spyware, trojans, and other malware at the gateway.

PREPARED FOR TOMORROW’S CHALLENGES:

• No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.
• Advanced networking features ensure reliability and the exibility to meet changing business requirements.
• Secure remote connectivity keeps mobile workforce online and productive.
• Security and reporting tools, included at no extra cost, support industry and regulatory compliance.

Product Comparison:

XTM 5 Series Product Comparison
WatchGuard® Model	XTM 505	XTM 510	XTM 520	XTM 530
Ideal For	Main offices with up to 250 users that need performance-driven security that's priced right	Main offices/headquarters with up to 500 users that want security with fast throughput and room to grow	Main offices/headquarters with up to 1,000 users looking for enterprise-grade performance and security in an all-in-one solution	Main offices/headquarters with up to 1,500 users that require enterprise-grade performance and powerful security with flexible, centralized management
Throughput & Connections
Firewall Throughput*	850 Mbps	1.4 Gbps	1.9 Gbps	2.3 Gbps
VPN Throughput*	210 Mbps	350 Mbps	550 Mbps	750 Mbps
Aggregate XTM Throughput*	275 Mbps	400 Mbps	600 Mbps	800 Mbps
Interfaces 10/100	1 copper	1 copper	1 copper	1 copper
Interfaces 10/100/1000	6 copper	6 copper	6 copper	6 copper
I/O Interfaces	1 Serial / 2 USB	1 Serial / 2 USB	1 Serial / 2 USB	1 Serial / 2 USB
Nodes Supported (LAN IPs)	Unrestricted	Unrestricted	Unrestricted	Unrestricted
Concurrent Connections	40,000	50,000	100,000	350,000
VLANs bridging, tagging, routed mode	75	75	75	75
WSM Licenses Included	4	4	4	4
Local user database	500	500	1,000	2,500
VPN Tunnels (included / Maximum)
Branch Office VPN	65	75	200	600
Mobile VPN IPSec (incl/max)	5/75	25/100	50/300	400/1,000
Mobile VPN SSL (incl/max)	1/65	1/75	1/300	1/600
Security Features
Firewall	Stateful packet inspection, deep packet inspection, proxy firewall
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Threat Protection	Blocks spyware, DoS attacks, fragmented & malformed packets, blended threats, and more
VoIP	H.323. SIP, call setup and session security
Security Subscriptions	WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service
VPN & Authentication
Encryption	DES, 3DES, AES 128-, 192-, 256-bit
IPSec	SHA-1, MD5, IKE pre-shared key, 3rd party cert
VPN Failover
SSL	Thin client, Web exchange
PPTP	Server and Passthrough
Single Sign-on	Transparent Active Directory Authentication
XAUTH	Radius, LDAP, Windows Active Directory
Other user authentication	VASCO, RSA SecurID, web-based, local
Management
Management Platform	WatchGuard System Manager (WSM)
Alarms and Notifications	SNMP v2/v3, Email, Management System Alert
Server Support	Logging and Reporting with Server Health status, Quarantine, WebBlocker, Management
Web UI	Supports Windows, Mac, Linux, and Solaris OS
Command Line Interface	Includes direct connect and scripting
Standard Networking
QoS	8 priority queues, DiffServ, modified strict queuing
IP Address Assignment	Static, DynDNS, PPPoE, DHCP (server, client, relay)
Support and Maintenance
LiveSecurity Service	Hardware warranty, 12/5 or 24/7 technical support with 4-hour response time, software updates, threat alerts
Certifications
Security	ICSA, FIPS 140-2 and EAL4+ in progress
Safety	NRTL/C, CB
Hazardous Substance Control	WEEE, RoHS, REACH

*Throughput rates will vary based on environment and configuration

Product Views:

Additional Specifications:

Powered by Fireware XTM Pro!

Every XTM 5 Series appliance ships with the Fireware® XTM operating system. As network requirements become more complex, it’s easy to upgrade to the Pro version of the OS with a simple software license key.

Buy the Bundle and Get the Works!

Get everything you need for complete threat management at a great price with the Security Bundle. Includes choice of XTM 5 Series appliance, plus WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service, and LiveSecurity® Service with 24/7 tech support.

Options and Upgrades:

WebBlocker WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks. Gateway AntiVirus Gateway AntiVirus is a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time. LiveSecurity Service Your WatchGuard appliance includes a subscription to our ground-breaking LiveSecurity Service, which you activate online when you register your product. You have three options for getting LiveSecurity when you purchase any WatchGuard XTM or Firebox® X Peak™, Core™, or Edge e-Series appliance. Choose the option that best fits your budget cycle and renewal schedule.

spamBlocker spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry. Intrusion Prevention Service Intrusion Prevention Service works hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

Documentation:

Download the WatchGuard XTM 5 Series Datasheet (PDF).