WatchGuard XTM 830
Next-Generation Firewall for Performance-driven Security

WatchGuard XTM 830 Series Overview:

Performance-driven security and economical pricing are what set the WatchGuard Next-Generation Firewall XTM 8 Series apart from its competitors. Our firewalls incorporate NGFW must-haves like Application Control and IPS, as well as a broad spectrum of other security functions to give businesses full protection. This Next-Generation Firewall has up to 5 Gbps firewall throughput, ten 1-Gb interfaces, and XTM-class security features including full HTTPS inspection, optional URL filtering, anti-spam, and anti-virus – no need to compromise on security to meet increasing network demands. Flexible, centralized management tools allow administrators access from one intuitive console or a scriptable CLI, and include real-time monitoring and rich reporting.

WatchGuard XTM 8 Series appliances are nextgeneration firewalls (NGFWs) that deliver a new class of performance-driven security. With up to 5 Gbps firewall throughput and security features including full HTTPS inspection and VoIP support, businesses no longer need to compromise on security to meet increasing network demands.

With a Next-Generation XTM 8 Series Firewall, Your Network is:

Secure:

• Content inspection at the application layer recognizes & blocks threats that stateful packet firewalls cannot detect.
• Wide-ranging proxy protection provides robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
• Application Control, an essential component of true next-generation security, is an easy-to-deploy security subscription that keeps unproductive, inappropriate, and dangerous applications off-limits.
• Intrusion Prevention Service, another fundamental element of next-generation protection, is available via subscription to stop attacks that comply with standard protocols but carry malicious content.

Fast and Efficient:

• Up to 5 Gbps firewall throughput and up to 1.7 Gbps VPN throughput keep data moving.
• Aggregate throughput can reach an industry-leading 1.6 Gbps, even when security subscriptions are enabled.
• Ten Gigabit Ethernet ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
• Active/active high availability with load balancing ensures maximum network uptime.
• Scriptable CLI supports interoperability and allows easy integration into existing infrastructure.
• Interactive, real-time monitoring and reporting – at no additional charge – give an unobstructed view into network security activity so you can take immediate preventive or corrective actions.
• Intuitive management console centrally manages all security functions.
• Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.
• Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Flexible:

• WAN and VPN failover increase performance, redundancy, and reliability.
• Multiple VPN choices deliver flexibility in remote access. Includes IPSec, SSL, and support for iOS devices such as iPhone, iPad, and iPod touch.
• To maximize port utilization, any of the 10 ports can be configured as Internal, External, or Optional.

Scalable:

• Add powerful security subscriptions to block spam, control dangerous and inappropriate application usage and web surfing, prevent network intrusions, and stop viruses, spyware, and other malware at the gateway.
• Upgrade to a higher model within the line for more performance and capacity with a simple license key.

Prepared For Tomorrow's Challenges:

• Multi-layered, interlocking security protects the network while throughput remains high. No need to compromise protection for strong performance or vice versa.
• Advanced networking features ensure reliability and the flexibility to meet changing business requirements.
• Secure remote connectivity keeps mobile workforce online and productive.
• Monitoring and reporting tools, included at no extra cost, support industry and regulatory compliance, with drill-down functions that make it easy to pinpoint specific activities.

Features:

Detailed Specifications:

Powered by Fireware® XTM Pro

Every WatchGuard XTM 8 Series appliance ships with the Pro version of the Fireware XTM operating system, providing the advanced networking features that demanding networks require.

* XTM 830 is also available with 6 copper and 4 fiber 10/100/1000 interfaces under the model number XTM 830-F.
** Throughput rates will vary based on environment & configuration

Product Comparison:

WatchGuard Model	XTM 810	XTM 820	XTM 830
Ideal For	Main offices/headquarters that need strong security and a solution that offers room for growth.	Main offices/headquarters looking for fast throughput and strong security that grows with changing needs.	Main offices/headquarters with up to 5,000 users that need enterprise-grade performance & security
Hardware
Model Upgradeable			N/A
Interfaces	10: 10/100/1000	10: 10/100/1000	10: 10/100/1000
DMZs	8	8	8
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Guest Services	N/A	N/A	N/A
User Authentication with transparent Windows authentication
Performance
Firewall Throughput**	4.5 Gbps	5.5 Gbps	6.5 Gbps
VPN Throughput**	1 Gbps	1.4 Gbps	1.6 Gbps
AV Throughput**	2 Gbps	2.1 Gbps	2.3 Gbps
IPS Throughput**	2.1 Gbps	2.4 Gbps	2.7 Gbps
UTM throughput**	1.3 Gbps	1.3 Gbps	1.4 Gbps
Interfaces 10/100/1000	10 copper	10 copper	10 copper
I/O Interfaces	1 Serial / 2 USB	1 Serial / 2 USB	1 Serial / 2 USB
Nodes Supported (LAN IPs)	Unrestricted	Unrestricted	Unrestricted
Concurrent Connections* (bi-directional)	500,000	750,000	1,000,000
VPN Tunnels
Branch Office VPN Tunnels (Max.)	1,000	2,000	6,000
Mobile VPN with SSL (Incl/Max)	1,000 / 1,000	4,000 / 4,000	6,000 / 6,000
Mobile VPN with IPSec Client Licenses (Bundled)	600	700	800
Mobile VPN with IPSec Tunnels (Max.)	2,000	6,000	8,000
VPN Authentication
Management
Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch Edge updates.	4-device WatchGuard System Manager license included with purchase. Appliances activated online receive an automatic 5-device bonus pack.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN	200	300	400
Policy-Based Routing
WAN Failover
Multi-WAN Load Balancing
Server Load Balancing
Traffic Management/QoS
High Availability (Active/Passive)
Dynamic Routing
VoIP (SIP and H.323) Support
Additional Security Subscriptions
Application Control	Optional	Optional	Optional
Reputation Enabled Defense	Optional	Optional	Optional
spamBlocker with Virus Outbreak Detection	Optional	Optional	Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS)	Optional	Optional	Optional
WebBlocker with HTTPS URL filtering	Optional	Optional	Optional
LiveSecurity® Service	1-year, 2-year, and 3-year subscriptions available

*Concurrent sessions here represent the number of bi-directional connections.
**Throughput rates will vary based on environment & configuration.

Product Views:

Options and Upgrades:

Turn your WatchGuard XTM security appliance into a complete threat management solution with a WatchGuard Security Suite.

Documentation:

Download the XTM 830 Datasheet (PDF).