WatchGuard Firebox M470
Up to 19 Gbps Firewall, 5 Gbps VPN, 3.4 Gbps UTM; Basic configuration - 8 Gb Ethernet interfaces, expansion module support
WatchGuard Firebox M270 was EOS on July 1, 2023 and will be replace by the new Firebox M290, M390, M590, M690.
End of Sales (EOS) Date: July 1, 2023. End of Life (EOL) Date: July 1, 2028 - you will not be able receive support after this date even with a 1 Year contract.
Overview:Firebox® M470, M570 & M670 firewalls are specifically engineered for midsize and distributed enterprises that are struggling to effectively and affordably secure networks in the face of explosive growth in bandwidth rates, encrypted traffic, video use, and connection speeds. What’s more, the ability to add network modules for greater port density gives you the flexibility to adapt as the network grows and evolves.
Total Network Protection
Every network needs a full arsenal of scanning engines to protect against spyware, viruses, malicious apps, data leakage, botnets and more.
WatchGuard’s award-winning network security platform not only provides the most complete suite of unified security controls on the market today, but we have consistently been the first to offer solutions for addressing new and evolving network threats including ransomware and advanced malware.
Easily Manage Many Appliances
Typically deployed at the corporate headquarters, these appliances serve as the “hub” appliance, responsible for centrally managing and securing all communications between the head office and all remote employee and small business sites. WatchGuard Dimension, which is included at no additional cost, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends, accelerating the ability to set meaningful security policies across the entire network.
Future-proof Your Network
Network environments are more diverse than ever, offering a vast array of options to choose from. With Firebox M470, M570, and M670, IT pros can customize their port configuration with expansion modules to meet current needs, while ensuring the flexibility to adapt as their network evolves. Firebox M470, M570, and M670 include a single slot for an expansion module, with options for 8 x 1 Gb fiber, 4 x 10 Gb fiber, or 8 x 1 Gb copper.
Features & Benefits
- Up to 34 Gbps firewall throughput. Turn on all security scanning engines and still see up to an amazing 5.4 Gbps throughput.
- All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA.
- Gain critical insights about network security, from anywhere and at any time, with WatchGuard Dimension.
- Customize your port configuration to meet current needs, knowing you have the flexibility to adapt as the network evolves. This is how to future-proof your network and eliminate costly rip-and-replace scenarios.
- High availability capabilities ensure maximum uptime. Buy two
Firebox M470, M570 & M670s for an active/passive high availability pair and receive 50%
Stay Ahead of Evolving Threats
The M270 and M370 are part of WatchGuard’s award-winning Firebox security platform. The platform not only provides the most complete suite of unified security controls on the market today, it has consistently been the first to offer solutions for addressing new and evolving network threats including advanced malware and ransomware. Our unique product architecture enables small and midsize businesses to leverage best-in-class security services – from URL filtering and intrusion prevention to application control and ransomware prevention, minus the cost and complexity of multiple single-point solutions.
Always Know What’s Happening on Your Network
Interactive, real-time monitoring and reporting through WatchGuard Dimension – included at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions. Over 100 reports and dashboards come standard, including reports for PCI and HIPAA compliance, which means you have one-click access to the data you need to ensure compliance requirements are met.
Quick and Simple Deployment
SMBs usually have smaller, less technical staff, which can make network expansion challenging. With RapidDeploy – a powerful, cloud-based deployment and configuration tool that comes standard with WatchGuard Firebox appliances, all you have to do is power up the appliance at a remote site and connect it to the Internet. The appliance “phones home” and downloads the correct configuration files from the cloud. Just like that.
Easy to Manage
It’s in WatchGuard’s DNA to deliver advanced network security technologies that were previously thought to be too complex for small and midsize organizations. We take these enterprise-grade technologies and make them easy to manage and deploy. The end result? Small to midsize businesses have one solution, delivering enterprise-grade security, that can be managed from a single-pane-of glass centralized console.
- Latest generation Freescale multi-core processors provide the power to run all security scanning engines in parallel without causing performance bottlenecks.
- 8 Gigabit Ethernet ports support high-speed LAN backbone infrastructures & gigabit WAN connections.
- Up to 8 Gbps firewall throughput. Turn on optional security services and still see up to 820 Mbps throughput.
- Nothing could be easier than WatchGuard’s drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.
|Firewall||19.6 Gbps||26.6 Gbps||34 Gbps|
|Firewall (IMIX)||5.6 Gbps||7.6 Gbps||11.2 Gbps|
|VPN (UDP 1518)||5.2 Gbps||5.8 Gbps||7.6 Gbps|
|VPN (IMIX)||1.8 Gbps||2.0 Gbps||2.6 Gbps|
|HTTPS (IPS enabled)||2.0 Gbps||3.4 Gbps||4.0 Gbps|
|Antivirus||3.5 Gbps||5.4 Gbps||6.2 Gbps|
|IPS (fast/full scan)||5.7/3.0 Gbps||8.0/4.8 Gbps||10.4/5.6 Gbps|
|UTM (fast/ full scan)||3.1/2.1 Gbps||4.4/3.5 Gbps||5.4/4.2 Gbps|
|Interfaces 10/100/1000*||8 (optional modules available)||8 (optional modules available)||8 (optional modules available)|
|I/O interfaces||1 SRL/2 USB||1 SRL/2 USB||1 SRL/2 USB|
|Concurrent connections (proxy)||310,000||710,000||920,000|
|New connections per second||82,000||115,000||140,000|
|WSM licenses (incl)||4||4||4|
|TDR Host Sensors included||250||250||250|
|Authenticated users limit||Unrestricted||Unrestricted||Unrestricted|
|Branch Office VPN||250||500||750|
|Firewall||Stateful packet inspection, deep packet inspection, proxy firewall|
|Application proxies||HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, SMTP, IMAP, and Explicit Proxy|
|Threat protection||DoS attacks, fragmented & malformed packets, blended threats & more|
|VoIP||H.323, SIP, call setup and session security|
|Filtering options||Browser Safe Search, Google for Business|
|VPN & Authentication|
|Cloud providers||AWS (Static/Dynamic), Azure (Static/Dynamic)|
|Encryption||AES 256-128 bit, 3DES, DES|
|IPSec||SHA-2, IKEv1/v2 , IKE pre-shared key, 3rd party cert|
|Single sign-on||Windows, Mac OS X, mobile operating systems, RADIUS|
|Authentication||RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, Duo, SMS Passcode|
|Logging and notifications||WatchGuard, Syslog, SNMP v2/v3|
|User interfaces||Centralized console (WSM), Web UI, scriptable CLI|
|Reporting||WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools|
|Security||Pending: ICSA Firewall, ICSA IPSec VPN , CC EAL4+,FIPS 140-2|
|Network||IPv6 Ready Gold (routing)|
|Hazardous substance control||WEEE, RoHS, REACH||Networking|
|Routing||Static, Dynamic (BGP4, OSPF, RIP v1/v2), Policy-based routing|
|High Availability||Active/passive, active/active with load balancing|
|QoS||8 priority queues, DiffServ, modified strict queuing|
|IP address assignment||Static, DHCP (server, client, relay), PPPoE, DynDNS|
|NAT||Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing|
|Link aggregation||802.3ad dynamic, static, active/backup|
|Other features||Port Independence, Multi-WAN failover and load balancing, server load balancing, host header redirection|
|Physical And Power Specifications|
|Product Dimensions||16.85” x 12.6” x 1.73” (42.8 x 32 x 4.4 cm)|
|Shipping Dimensions||22” x 21” x 5” (55.9 x 53.3 x 12.7 cm)|
|Shipping Weight||18 lbs (8.17 kg)|
|AC Power||100-240 VAC Autosensing|
|Power Consumption||U.S. 75 Watts (max), 256 BTU/hr (max)|
|Rack Mountable||1U rack mount kit included|
|Temperature||32° F to 104° F 0° C to 40° C||14° F to 158° F -10° C to 70° C|
|Relative Humidity||5% to 90% non-condensing||5% to 90% non-condensing|
|Altitude||0 to 9,843 ft at 95° F (3,000 m at 35° C)||0 to 15,000 ft at 95° F (4,570 m at 35° C)|
|MTBF||51,644 hours @ 77° F (25° C)|
Options & Upgrades:
WatchGuard Security Services
WatchGuard offers the most comprehensive portfolio of network security services, from traditional IPS, GAV, application control, spam blocking, and web filtering to more advanced services for protecting against advanced malware, ransomware, and the loss of sensitive data. WatchGuard also offers a full suite of network visibility and management services.
Fundamental Security Services
IPS uses continually updated signatures to scan traffic on all major protocols to provide realtime protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows.
A powerful, cloud-based reputation lookup service that protects web users from malicious sites and botnets, while dramatically improving web processing overhead.
A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network so you can easily see where you may be at risk.
In addition to automatically blocking known malicious sites, WebBlocker’s granular content and URL filtering tools enable you to block inappropriate content, conserve network bandwidth, and increase employee productivity.
Selectively allow, block, or restrict access to applications based on a user’s department, job function, and time of day and to then see, in real-time, what’s being accessed on your network and by whom.
Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats – including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by.
Real-time spam detection for protection from outbreaks. Our spamBlocker is so fast and effective, it can review up to 4 billion messages per day.
Advanced Security Services
APT Blocker uses an awardwinning next-gen sandbox to detect and stop the most sophisticated attacks including ransomware, zero day threats and other advanced malware.
This service prevents accidental or malicious data loss by scanning text and common file types to detect sensitive information attempting to leave the network.
Access Portal provides central location for access to cloud-hosted applications, and secure, clientless access to internal resources with RDP and SSH.
Correlate network and endpoint security events with enterprise-grade threat intelligence to detect, prioritize and enable immediate action to stop malware attacks. Improve visibility by evolving your existing security model to extend past prevention, to now include correlation, detection and response.
Reduce malware infections by detecting and blocking malicious DNS requests, redirecting users to a safe page with information to reinforce security best practices.
Dimension translates data collected from all appliances across your network into actionable network and threat intelligence. Dimension Command gives you the power to take action to mitigate those threats instantly, from one central console.
One Appliance, One Package, Total Security
Simplicity is our mission at WatchGuard and that mission extends beyond how the product is built to how it is packaged. While all of our services are offered à la carte, we have worked to develop two packages that simplify the decision-making process. The Total and Basic Security Suite packages are available on our Firebox T and M Series appliances, as well as our Firebox Cloud and FireboxV virtual models.
- The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, GAV, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as, our standard 24x7 support.
- The Total Security Suite includes all services offered with the Basic Security Suite plus advanced malware protection, data loss protection, enhanced network visibility capabilities, a secure access portal, and the ability to take action against threats right from Dimension, our network visibility platform.
Download the WatchGuard Firebox M470, M570 & M670 Datasheet (PDF).
- Pricing and product availability subject to change without notice.
Our Price: $2,320.00
Our Price: $6,035.00
Our Price: $4,695.00
Our Price: $12,790.00
Our Price: $1,080.00
Our Price: $2,940.00
Our Price: $470.00
Our Price: $1,135.00
Our Price: $975.00
Our Price: $975.00
Our Price: $975.00
Our Price: $975.00
Our Price: $975.00
Our Price: $975.00
Our Price: $975.00
Our Price: $595.00
Our Price: $910.00
Our Price: $2,195.00
Our Price: $715.00
Our Price: $1,855.00
Our Price: $325.00
Our Price: $776.10
Our Price: $932.10
Our Price: $1,088.10
Our Price: $350.00
Our Price: $120.00
Our Price: $20.00