WatchGuard Firebox T125 Tabletop Firewall for Branch Offices
Up to 2.28 Gbps firewall throughput, 4x 1Gb and 1x 2.5Gb ports, 10 Branch Office VPNs

Security Services

A stateful firewall is simply not enough anymore. Every business needs a full arsenal of scanning engines to protect their network. WatchGuard Firebox is a Unified Security Platform that protects your entire network from intrusions, phishing attempts, malware, ransomware and more.

Protect Your Network with Security Services

A Package for Every Level of Security

All WatchGuard appliances come standard with a Support license that includes full VPN capabilities and built-in SD WAN. Looking for more? Choose our Basic or Total Security Suite:

Basic Security Suite

The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, antivirus, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as our standard 24x7 support.

Total Security Suite

The Total Security Suite includes all services offered with the Basic Security Suite plus AI-powered malware protection, enhanced network visibility, endpoint protection, Cloud sandboxing, DNS filtering, and the ability to take action against threats right from WatchGuard Cloud, our network visibility platform.

Get it all with the Total Security Suite

Find out which fits the needs of your network. Designed for maximum protection against sophisticated threats, our security services are packaged to take the guesswork out of network security.

	Support	Basic Security	Total Security
Stateful Firewall
VPN
SD-WAN
Access Portal*
Intrusion Prevention Service
Application Control
WebBlocker
spamBlocker
Gateway AntiVirus
Reputation Enabled Defense
Network Discovery
APT Blocker
Threat Detection & Response
DNSWatch
IntelligentAV**
WatchGuard Cloud Visibility Data Retention		1 Day	30 Days
Support	Standard (24x7)	Standard (24x7)	Gold (24x7)

*Not available on Firebox T15/T15-W, T20/T20-W, or T35-R. Total Security Suite required for M270, M370, M470, M570, M670, FireboxV and Firebox Cloud
**Not available on Firebox T15/T15-W, T20/T20-W, or T35-R

Support Program

24x7 Technical Support
No matter which WatchGuard network security appliance you buy, your support needs will be covered 24 x 7 by our in-house team of highly trained technical experts.

Hardware Warranty
WatchGuard’s hardware warranty includes advance hardware replacement to ensure that a replacement appliance is shipped immediately if a fault is identified.

Software Updates
WatchGuard continually enhances the capabilities of its operating system software and services. Your Support license gives you access to all new releases at no cost.

Download the WatchGuard Total Security Datasheet (PDF).

Download the WatchGuard Support Program Datasheet (PDF).

WatchGuard Products

WatchGuard Firebox T125 Appliance

WatchGuard Firebox T125 Appliance Only

#WGT125000
Our Price: $260.00

WatchGuard Basic Security Suite

Includes: Standard Support(24x7), Application Control, WebBlocker, spamBlocker, Gateway Antivirus, Intrusion Prevention Service, Reputation Enabled Defense, and Network Discovery

WatchGuard Basic Security Suite for Firebox T125 - 1 Year

#WGT1250071
List Price: ~~$450.00~~
Our Price: $351.00

WatchGuard Basic Security Suite for Firebox T125 - 3 Year

#WGT1250073
List Price: ~~$870.00~~
Our Price: $678.60

WatchGuard Basic Security Suite for Firebox T125 - 5 Year

#WGT1250075
List Price: ~~$1,600.00~~
Our Price: $1,248.00

WatchGuard Total Security Suite

Includes: Gold Support, Basic Security Suite, APT Blocker, DNSWatch, Cloud, and Threat Detection & Response

WatchGuard Total Security Suite for Firebox T125 - 1 Year

#WGT1250081
List Price: ~~$770.00~~
Our Price: $600.60

WatchGuard Total Security Suite for Firebox T125 - 3 Year

#WGT1250083
List Price: ~~$1,490.00~~
Our Price: $1,162.20

WatchGuard Total Security Suite for Firebox T125 - 5 Year

#WGT1250085
List Price: ~~$2,720.00~~
Our Price: $2,121.60

More pricing below, click here!

Overview

Specifications

Supports and Services

Documentation

Overview:

HIGH_SPEED SECURITY, ESPECIALLY DESIGNED FOR REMOTE SITES

Engineered for today’s agile workforces, the T125 combines advanced threat protection with SD-WAN compatibility, making it ideal for small sites, branch offices, and remote locations. It offers enterprise-level networking in a compact design, equipped with dualband SMA antennas for wireless flexibility and 2.5 Gbps-capable interfaces for high-speed connectivity. With all logging and reporting features included at no additional cost, users gain access to over 100 dashboards and reports, including PCI and HIPAA standards.

COMPLEXITY-FREE SECURITY FOR MODERN NETWORKS

Firewall security is about more than just speeds and feeds. Whether you're working in hybrid or cloud-native setups, our Firebox models offer more than basic network functions. The Firebox T Series is designed specifically for the customer’s network and backed by trusted MSP experts. The result: quicker deployment, better performance, and advanced AI-driven threat detection.

Precise and powerful performance for modern SMBs

AI-powered intelligent AV and APT blocking with sandboxing

Sturdy metal case with sustainable, reduced-waste design

“We use WatchGuard firewalls at multiple locations. These models vary from small to large but we use the full security suite at all sites. These firewalls are easy to configure but offer exception value in the security elementsthat the full suite adds. This all comes at a cost point much lower than the competition.”

~Verified User

Specifications:

WatchGuard Firebox T125-W	Specifications
THROUGHPUT¹
UTM (full scan)²	510 Mbps
Firewall (IMIX)	660 Mbps
VPN (IMIX)	480 Mbps
HTTPS Content Inspection (IPS enabled)³	270 Mbps
Antivirus	88 Mbps
IPS (full scan)	725 Mbps
Firewall (UDP 1518)	2.28 Gbps
VPN (UDP 1518)	1.44 Gbps
CAPACITY
Interfaces	1 x 2.5 GbE, 4 x 1 GbE
I/O interfaces	1 Serial/2 USB-A 3.2
Concurrent connections	3,850,000
Concurrent connections (Proxy)	125,000
New connections per second	26,500
VLANs	Unlimited
WSM licenses (incl)	0
TDR Host Sensors included	5
VPN TUNNELS
Branch Office VPN	10
Mobile VPN	10
SECURITY FEATURES
Firewall	Stateful packet inspection, TLS decryption, proxy firewall
Application proxies	HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS, and Explicit Proxy IMAPS and Explicit Proxy
Threat protection	DoS attacks, fragmented & malformed packets, blended threats
Filtering options	Browser Safe Search, Google for Business
VPN
Site to Site VPN	IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke
Remote Access VPN	IKEv2, IPSec, L2TP, TLS
VISIBILITY
Logging and notifications	WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3
Reporting	WatchGuard Cloud includes over 100 pre-defined reports, executive summary and visibility tools
CERTIFICATIONS
Security	Pending: CC, FIPS 140-3
Safety	NRTL/CB
Network	IPv6 Ready Gold (routing)
Hazardous substance control	WEEE, RoHS, REACH
NETWORKING
SD-WAN	Multi-WAN failover, dynamic path selection, jitter/loss/latency measurement
Dynamic Routing	RIP, OSPF, BGP
High Availability	Active/passive, active/active
QoS	802.1Q, DSCP, IP Precedence
Traffic Management	By policy or application
IP address assignment	Static, DHCP (server, client, relay), PPPoE, DynDNS
NAT	Static, dynamic, 1:1, IPSec traversal, policy-based
Link aggregation	802.3ad dynamic, static, active/backup

PHYSICAL AND POWER SPECIFICATIONS
Product Dimensions	9” x 8.25” x 1.7” (230 x 210 x 44mm)
Shipping Dimensions	12.2” x 9.8”x 3.9” (311 x 250 x 98 mm)
Product Weight	1.75 lbs (0.80 kg)
Product Weight	T125: 2.92 lbs (2.07 kg) T125-W: 3.11 lbs (2.17 kg)
Shipping Weight	T125: 4.52 lbs (2.05 kg) T125-W: 4.80 lbs (2.18 kg)
Power	100-240 VAC Autosensing
MTBF	701,687 hours
ENVIRONMENT	OPERATING	STORAGE
Temperature	32° F to 104° F (0° C to 40° C)	-40° F to 158° F (-40° C to 70° C)
Relative Humidity	10% to 85% non-condensing	10% to 85% non-condensing
Altitude	0 to 9,843 ft at 95° F (3,000 m at 35° C)	0 to 15,000 ft at 95° F (4,570 m at 35° C)

Note:

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration. Max firewall throughput tested via direct connection using 1518 byte UDP frame based on RFC 2544 methodology. All testing performed on Fireware version 12.6.
UTM throughput is measured using HTTP traffic with AV, IPS, and Application Control enabled, and does not account for all security services available on the appliance.

Supports and Services:

Strong Security at Every Layer

Uniquely architected to be the industry’s smartest, fastest, and most effective network security products, WatchGuard solutions deliver in-depth defenses against advanced malware, ransomware, botnets, trojans, viruses, drive-by downloads, data loss, phishing, and much more.

	Standard Support	Basic Security	Total Security
Stateful Firewall
VPN
SD-WAN
Access Portal*
Intrusion Prevention Service (IPS)
Application Control
WebBlocker (URL/Content Filtering)
spamBlocker (Anti-Spam)
Gateway AntiVirus
Reputation Enabled Defense
Network Discovery
APT Blocker
DNSWatch
IntelligentAV**
ThreatSync (XDR)
EDR Core
WatchGuard Cloud Log Data Retention Report Data Retention		90 Days 1 Day	365 Days 30 Days
Support	Standard (24x7)	Standard (24x7)	Gold (24x7)

*Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R. Total Security Suite required for M270, M370, M470, M570, M670, FireboxV and Firebox Cloud.
**Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R.

Documentation:

Download the WatchGuard Firebox T125 / T125-W Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.

WatchGuard Products

WatchGuard Firebox T125 Appliance

WatchGuard Firebox T125 Appliance Only

#WGT125000
Our Price: $260.00

WatchGuard Basic Security Suite

Includes: Standard Support(24x7), Application Control, WebBlocker, spamBlocker, Gateway Antivirus, Intrusion Prevention Service, Reputation Enabled Defense, and Network Discovery

WatchGuard Basic Security Suite for Firebox T125 - 1 Year

#WGT1250071
List Price: ~~$450.00~~
Our Price: $351.00

WatchGuard Basic Security Suite for Firebox T125 - 3 Year

#WGT1250073
List Price: ~~$870.00~~
Our Price: $678.60

WatchGuard Basic Security Suite for Firebox T125 - 5 Year

#WGT1250075
List Price: ~~$1,600.00~~
Our Price: $1,248.00

WatchGuard Total Security Suite

Includes: Gold Support, Basic Security Suite, APT Blocker, DNSWatch, Cloud, and Threat Detection & Response

WatchGuard Total Security Suite for Firebox T125 - 1 Year

#WGT1250081
List Price: ~~$770.00~~
Our Price: $600.60

WatchGuard Total Security Suite for Firebox T125 - 3 Year

#WGT1250083
List Price: ~~$1,490.00~~
Our Price: $1,162.20

WatchGuard Total Security Suite for Firebox T125 - 5 Year

#WGT1250085
List Price: ~~$2,720.00~~
Our Price: $2,121.60

WatchGuard Standard Support

Includes: Support (24x7), VPN & Networking, and Dimension Command

WatchGuard Standard Support for Firebox T125 - 1 Year

#WGT1250061
List Price: ~~$320.00~~
Our Price: $249.60

WatchGuard Standard Support for Firebox T125 - 3 Year

#WGT1250063
List Price: ~~$620.00~~
Our Price: $483.60

WatchGuard Standard Support for Firebox T125 - 5 Year

#WGT1250065
List Price: ~~$920.00~~
Our Price: $717.60

WatchGuard Trade Up Program - Basic Security Suite

Trade Up to WatchGuard Basic Security Suite for Firebox T125 - 3 Year

#WGT1250203
List Price: ~~$820.00~~
Our Price: $639.60

Trade Up to WatchGuard Basic Security Suite for Firebox T125 - 5 Year

#WGT1250205
List Price: ~~$1,510.00~~
Our Price: $1,177.80

WatchGuard Trade Up Program - Total Security Suite

Trade Up to WatchGuard Total Security Suite for Firebox T125 - 1 Year

#WGT1250211
List Price: ~~$720.00~~
Our Price: $561.60

Trade Up to WatchGuard Total Security Suite for Firebox T125 - 3 Year

#WGT1250213
List Price: ~~$1,410.00~~
Our Price: $1,099.80

Trade Up to WatchGuard Total Security Suite for Firebox T125 - 5 Year

#WGT1250215
List Price: ~~$2,580.00~~
Our Price: $2,012.40

WatchGuard Basic Security Software Suite Renewal/Upgrade

Basic Security Software Suites include Standard Support (24x7), Application Control, WebBlocker, spamBlocker, Gateway Antivirus, Intrusion Prevention Service, Reputation Enabled Defense, and Network Discovery

WatchGuard Basic Security Suite Renewal/Upgrade 1 Year for Firebox T125

#WGT125341
Our Price: $370.00

WatchGuard Basic Security Suite Renewal/Upgrade 3 Year for Firebox T125

#WGT125343
Our Price: $870.00

WatchGuard Total Security Software Suite Renewal/Upgrade

Total Security Suites include Gold Support, Basic Security Suite, APT Blocker, Cloud, and Threat Detection & Response

WatchGuard Total Security Suite Renewal/Upgrade 1 Year for Firebox T125

#WGT125351
Our Price: $620.00

WatchGuard Total Security Suite Renewal/Upgrade 3 Year for Firebox T125

#WGT125353
Our Price: $1,490.00

WatchGuard APT Blocker

WatchGuard APT Blocker 1 Year for Firebox T125

#WGT125171
Our Price: $140.00

WatchGuard APT Blocker 3 Year for Firebox T125

#WGT125173
Our Price: $340.00

WatchGuard APT Blocker 5 Year for Firebox T125

#WGT125175
Our Price: $620.00

WatchGuard Network Detection and Response

WatchGuard NDR for Firebox T125 - 1 Year

#WGN12522201
Our Price: $1,445.00

WatchGuard NDR for Firebox T125 - 3 Year

#WGN12522203
Our Price: $3,470.00

WatchGuard NDR for Firebox T125 - 5 Year

#WGN12522205
Our Price: $6,360.00

WatchGuard Cloud Data Retention

WatchGuard Cloud 1-Month Data Retention for Firebox T125 - 1 Year

#WGT12521801
Our Price: $100.00

WatchGuard Cloud 1-Month Data Retention for Firebox T125 - 3 Year

#WGT12521803
Our Price: $300.00

WatchGuard Gold Support Renewal/Upgrade

WatchGuard Gold Support Renewal/Upgrade 1 Year for Firebox T125

#WGT125261
Our Price: $225.00

WatchGuard Gold Support Renewal/Upgrade 3 Year for Firebox T125

#WGT125263
Our Price: $540.00

WatchGuard Standard Support Renewal

WatchGuard Standard Support Renewal 1 Year for Firebox T125

#WGT125201
Our Price: $150.00

WatchGuard Standard Support Renewal 3 Year for Firebox T125

#WGT125203
Our Price: $360.00

WatchGuard Premium 4 hours Replacement

WatchGuard Premium 4-hour Replacement 1 Year for Firebox T125

#WGT125801
Our Price: $90.00

WatchGuard Premium 4-hour Replacement 3 Year for Firebox T125

#WGT125803
Our Price: $216.00

Accessories

WatchGuard Firebox T125/T145 Rack Kit

#WG9032
List Price: ~~$57.00~~
Our Price: $44.46

WatchGuard Firebox T125 Tabletop Firewall for Branch Offices Up to 2.28 Gbps firewall throughput, 4x 1Gb and 1x 2.5Gb ports, 10 Branch Office VPNs