WatchGuard XTM 515
Next-Generation Firewall for Small to Midsized Businesses

WatchGuard XTM 515 Series Overview:

WatchGuard XTM 5 Series appliances deliver a new class of performance-driven security for growing businesses. The 5 Series offers up to 3.5 Gbps firewall throughput and security features including full HTTPS inspection, VoIP support, and optional application control. Organizations that want room to easily scale their network security can move up to greater performance, more users, and additional security and networking features to meet escalating demands, without costly hardware replacements.

Why buy an all-in-one solution?

An all-in-one XTM network security solution integrates complete protection while slashing the time and cost associated with managing multiple single-point security products. All security capabilities work together for a holistic, comprehensive approach to network protection. Your IT staff has more time to focus on other areas of network administration, and your business saves money on support and hardware costs.

With a Next-generation WatchGuard XT M 5 Series solution, your network is:

Secure:

• Application-layer content inspection recognizes & blocks threats that stateful packet firewalls cannot detect.
• Wide-ranging proxy protection provides robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
• A suite of security subscriptions boosts protection in critical attack areas for complete threat management.
• Optional Application Control keeps unproductive, inappropriate, and dangerous applications off-limits.

Fast and Efficient:

• Up to 3.5 Gbps firewall throughput and up to 750 Mbps VPN throughput keep data moving.
• Best UTM throughput in its class, even with strong security enabled.
• Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections.
• Advanced networking features include active/active high availability, VLAN support, multi-WAN and server load balancing, dynamic routing, and QoS.
• Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
• Intuitive management console centrally manages all security functions.
• Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Flexible:

• Call setup security for VoIP means you don’t need to “wire around the firewall” to take advantage of the big cost savings that VoIP can generate.
• WAN and VPN failover increase performance, redundancy, and reliability.
• Multiple VPN choices deliver flexibility in remote access.
• To maximize port utilization, any of the seven ports can be con gured as Internal, External, or Optional.
• Networking features, such as transparent bridge mode and multicast over VPN, allow you to add security without needing to change existing network infrastructure.

Scalable:

• Add powerful security subscriptions to block spam, control dangerous and inappropriate application usage and web surfing, prevent network intrusions, and stop viruses, spyware, and other malware at the gateway.
• Upgrade to a higher model within the line for more performance and capacity with a simple license key.

Prepared for Tomorrow's Challenges:

• No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.
• Advanced networking features ensure reliability and the flexibility to meet changing business requirements.
• Secure remote connectivity keeps the mobile workforce online and productive.
• Monitoring and reporting tools, included at no extra cost, support industry and regulatory compliance, with drill-down functions that make it easy to pinpoint specific activities.

Features:

Fast 3.5 Gbps throughput The XTM 5 Series puts other appliances in its class to shame with up to 3.5 Gbps for firewall throughput and 750 Mbps UTM throughput, even with security services and deep packet inspection enabled. The 5 Series delivers formidable performance for exceptional value.	Faster, safe web surfing Add a simple subscription to Reputation Enabled Defense to your XTM solution and your organization will have faster web performance and even stronger security – with no additional hardware to buy.
3 ways to manage your appliance Now you have the power to choose how you manage your WatchGuard appliance including, WatchGuard System Manager, the command line interface, and a web UI for access from anywhere, anytime.	Fireware XTM PRO included For the advanced networking features that demanding networks require.
Reporting in the Browser Provides a web-based, customizable reports portal designed to be hosted with direct Internet access for easy report selection and viewing.	Maximum network uptime High availability capabilities – active/active and active/passive – ensure your network is always up and running.
Application Control Control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.	Compliance Reporting Built-in reports for PCI and HIPAA mean one-click access to the data you need to ensure compliance requirements are covered.
Remote/External Log Server/Report Server DB MSSPs and larger organizations can now take advantage of the ability to isolate logging and reporting on a separate PC for high performance, scalability, and redundancy.	An investment in your security Model upgradability ensures your network security investment is protected with the ability to easily upgrade its performance, capacity, and security capabilities as business requirements change and new threats emerge.
Green security Our firewalls are designed with efficiency in mind, consuming very little energy. Compare our power consumption to other security products and see how WatchGuard can make your data center more energy efficient. Green up your network with WatchGuard.

Compare Model Specifications:

XTM 5 Series	XTM 505	XTM 515	XTM 525	XTM 535	XTM 545
Throughput & Connections
Firewall Throughput*	1.5 Gbps	2.0 Gbps	2.5 Gbps	3.0 Gbps	3.5 Gbps
VPN Throughput*	210 Mbps	250 Mbps	350 Mbps	550 Mbps	750 Mbps
AV Throughput*	520 Mbps	1.5 Gbps	1.7 Gbps	1.8 Gbps	2.0 Gbps
IPS Throughput*	500 Mbps	1.6 Gbps	1.7 Gbps	1.8 Gbps	1.9 Gbps
UTM Throughput*	275 Mbps	850 Mbps	1.0 Gbps	1.1 Gbps	1.2 Gbps
Interfaces 10/100	1 copper	1 copper	1 copper	1 copper	1 copper
Interfaces 10/100/1000	6 copper	6 copper	6 copper	6 copper	6 copper
I/O Interfaces	1 Serial / 2 USB	1 Serial / 2 USB	1 Serial / 2 USB	1 Serial / 2 USB	1 Serial / 2 USB
Nodes Supported (LAN IPs)	Unrestricted	Unrestricted	Unrestricted	Unrestricted	Unrestricted
Concurrent Connections (bi-directional)	40,000	40,000	50,000	100,000	350,000
New connections per second	12,000	24,000	24,000	28,000	28,000
VLANs (bridging, tagging, routed mode)	100	100	200	300	400
WSM licenses (incl)	4	4	4	4	4
Authenticated users limit	500	500	500	1,000	2,500
VPN Tunnels
Branch Office VPN	65	65	75	200	600
Mobile VPN IPSec	5 / 75	75	100	300	1,000
Mobile VPN SSL	1 / 65**	65	75	300	600
Security Features
Firewall	Stateful packet inspection, deep packet inspection, proxy firewall
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Threat Protection	Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats, and more
VoIP	H.323. SIP, call setup and session security
Security Subscriptions	Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service, Reputation Enabled Defense
VPN & Authentication
Encryption	DES, 3DES, AES 128-, 192-, 256-bit
IPSec	SHA-1, IKE pre-shared key, 3rd party cert
VPN Failover	Yes
SSL	Thin client, Web exchange
PPTP	Server and Passthrough
Single Sign-on	Transparent Active Directory Authentication
XAUTH	Radius, LDAP, Windows Active Directory
Other user authentication	VASCO, RSA SecurID, web-based, local
Management
Management Platform	WatchGuard System Manager (WSM)
Alarms and Notifications	SNMP v2/v3, Email, Management System Alert
Server Support	Logging and Reporting with Server Health status, Quarantine, WebBlocker, Management
Web UI	Supports Windows, Mac, Linux, and Solaris OS
Command Line Interface	Includes direct connect and scripting
Standard Networking
QoS	8 priority queues, DiffServ, modified strict queuing
IP Address Assignment	Static, DHCP (server, client, relay), PPPoE, DynDNS
Certifications
Security	Pending: ICSA Firewall, ICSA IPSec VPN, CC EAL4+ Review Pending: FIPS 140-2
Safety	NRTL/C, CB
Network	IPv6 Ready Gold (routing)
Hazardous Substance Control	WEEE, RoHS, REACH
Dimensions and Power
Product Dimensions	11.25" x 17" x 1.75" (28.6 x 43.2 x 4.5 cm)
Shipping Dimensions	18" x 21" x 5.25" (45.7 x 53.3 x 13.3 cm)
Shipping Weight	16.1 lbs (7.3 Kg)
AC Power	100-240 VAC Autosensing
Power Consumption	U.S. 85 Watts (max), 290 BTU (max)
Rack Mountable	1U rack mount kit included
Environment
	Operating		Storage
Temperature	32° F to 104° F (0° C to 40° C)		-40° F to 158° F (-40° C to 70° C)
Relative Humidty	10% to 85% non-condensing		10% to 95% non-condensing
Altitude	0 to 9,843 ft at 95° F (3,000 m at 35° C)		0 to 15,000 ft at 95° F (4,570 m at 35° C)
MTBF	51,644 hours @ 77° F (25° C)		51,644 hours @ 77° F (25° C)

Powered by Fireware® XTM and XTM Pro

WatchGuard XTM 5 Series appliances ship with the Pro version of the Fireware XTM operating system, providing the advanced networking features that demanding networks require.**

Networking Features:	Fireware XTM Pro:
Routing	Static, Dynamic (BGP4, OSPF, RIP v1/v2), Policy-based
High Availability	Active/passive, active/active with load balancing
NAT	Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing
Other Features	Port Independence, Multi-WAN failover, Transparent/drop-in mode, Multi-WAN load balancing, Server load balancing

* Throughput rates will vary based on environment/configuration. Contact us for help determining the right model for your network.
**XTM 505 requires purchase upgrade to Fireware XTM Pro to enable advanced networking features and the maximum number of SSL VPN tunnels.

Product Views:

Options and Upgrades:

Turn your WatchGuard XTM security appliance into a complete threat management solution with a WatchGuard Security Suite.

Application Control Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth. WebBlocker WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks. Gateway AntiVirus Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time. LiveSecurity Service LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.

Reputation Enabled Defense Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead. spamBlocker spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry. Intrusion Prevention Service Intrusion Prevention Serviceworks hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

Documentation:

Download the WatchGuard XTM 5 Series Datasheet (PDF).