WatchGuard Firebox M595
Supports 43 Gbps firewall throughput, 1,200 VPN tunnels, and advanced threat protection for enterprise agility in high-demand environments

WatchGuard Firebox M595 Firewall

Important: New WatchGuard Ordering Process (Effective April 1, 2026)

Hardware and security services are no longer bundled. You may purchase hardware and licensing separately, but:

A Firebox appliance requires an active security service subscription to function
Licensing can be added at the time of purchase or later as a separate order

For new deployments, we recommend purchasing both hardware and licensing together to ensure immediate activation.

WatchGuard Products

WatchGuard Firebox M595 Appliance (Hardware Only - Subscription Required for Operation)

WatchGuard Firebox M595 Appliance Only

#WGM595000
Our Price: $3,200.00

WatchGuard Basic Security Suite (Service Subscription - Hardware Required)

Includes: Standard Support(24x7), Application Control, WebBlocker, spamBlocker, Gateway Antivirus, Intrusion Prevention Service, Reputation Enabled Defense, and Network Discovery

WatchGuard Basic Security Suite for Firebox M595 - 1 Year

#WGM5950071
List Price: ~~$9,590.00~~
Our Price: $7,480.20

WatchGuard Basic Security Suite for Firebox M595 - 3 Year

#WGM5950073
List Price: ~~$17,290.00~~
Our Price: $13,486.20

WatchGuard Total Security Suite (Service Subscription - Hardware Required)

Includes: Gold Support, Basic Security Suite, APT Blocker, DNSWatch, Cloud, and Threat Detection & Response

WatchGuard Total Security Suite for Firebox M595 - 1 Year

#WGM5950081
List Price: ~~$14,770.00~~
Our Price: $11,520.60

WatchGuard Total Security Suite for Firebox M595 - 3 Year

#WGM5950083
List Price: ~~$29,590.00~~
Our Price: ~~$23,080.20~~
Call For Lowest Price!

More pricing below, click here!

Overview

Specifications

Supports and Services

Documentation

Overview:

Enterprise-Class Security with Room to Grow

With 7.2 Gbps UTM throughput, 4.8 Gbps HTTPS inspection, and capacity for up to 1,200 users, the Firebox M595 is built for demanding enterprise environments. Its performance and scalability make it a future-ready choice for distributed networks.

“WatchGuard Network Security has been my go to solution for firewalls and WAN security for many years. I like the scalability of the devices and the licensing options. I appreciate the different licensing options for the solutions including the different add on services for increased security offerings like botnet scanning, IPS, gateway a/v, etc. ”

~Mike Broseus
IT Manager, Advanced Business Communications Inc

Specifications:

Firebox M595 Specifications
Throughput¹
UTM (full scan)²	7.20 Gbps
VPN (IMIX)	3.50 Gbps
HTTPS (IPS enabled)	4.80 Gbps
AntiVirus	7.60 Gbps
IPS (full scan)	9.40 Gbps
Firewall (UDP 1518)	43.00 Gbps
VPN (UDP 1518)	11.50 Gbps
Capacity
Network Interfaces	2.5 Gbps RJ45 x 12, 10 Gbps RJ45 x 2, 1 Gbps SFP x 2z, 10 Gbps SFP+ x 4
I/O interfaces	1 Serial/2 USB-A 3.2
Concurrent connections	15,000,000
Concurrent connections (proxy)	780,000
New connections per second	N/A
VLANs	Unrestricted
WSM licenses (incl)	4
TDR Host Sensors included	250
VPN Tunnels
Branch Office VPN	1200
Mobile VPN	1200
Security Features
Firewall	Stateful packet inspection, TLS decryption, proxy firewall
Application proxies	HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS, and Explicit Proxy
Threat protection	DoS attacks, fragmented & malformed packets, blended threats
Filtering options	Browser Safe Search, Google for Business
VPN
Site to Site VPN	KEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke
Remote Access VPN	KEv2, IPSec, L2TP, TLS
Visibility
Logging and notifications	WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3
Reporting	WatchGuard Cloud includes over 100 pre-defined reports, executive summary, and visibility tools
Certifications
Security*	Pending: Common Criteria, FIPS 140-3
Safety	NRTL/C, CB
Network	IPv6 Ready Gold (routing)
Hazardous substance control	WEEE, RoHS, REACH
Networking
SD-WAN	Multi-WAN failover, dynamic path selection, jitter/loss/latency measurement
Dynamic Routing	RIP, OSPF, BGP
High Availability	Active/Passive, Active/Active
QoS	802.1Q, DSCP, IP Precedence
Traffic Management	By policy or application
IP address assignment	Static, DHCP (server, client, relay), PPPoE, DynDNS
NAT	Static, dynamic, 1:1, IPSec traversal, policy-based
Link aggregation	802.3ad dynamic, static, active/backup
Physical and Power Specifications
Product Dimensions	17.3" x 12.2" x 1.73" (440 x 310 x 44 mm)
Shipping Dimensions	21.75" x 20" x 5.25" (552.45 x 508 x 185.85 mm)
Product Weight	10.8 lbs (4.90 kg)
Shipping Weight	15.25 lbs (6.93 kg)
Power	171 W (Max)
Power Consumption	1x C14 inlet (90-264VAC) 1x CRPS slot (optional)
Environment Specifications
Operating Temperature	32° F to 104° F / 0° C to 40° C
Storage Temperature	-40° F to 158° F / -40° C to 70° C
Operating Relative Humidity	5% to 90% non-condensing
Storage Relative Humidity	5% to 90% non-condensing
Operating Altitude	0 to 9,843 ft at 95° F (3,000 m at 35° C)
Storage Altitude	0 to 15,000 ft at 95° F (4,570 m at 35° C)
MTBF	311,912 hours

¹ Throughput rates are determined using multiple flows through multiple ports and will vary depending on the environment and configuration. Max firewall throughput tested via direct connection using 1518-byte UDP frames based on RFC 2544 methodology. All testing performed on Fireware version 2025.1.
² UTM throughput is measured using HTTP traffic with AV, IPS, and Application Control enabled, and does not account for all security services available on the appliance.

Supports and Services:

Strong Security at Every Layer

Uniquely architected to be the industry’s smartest, fastest, and most effective network security products, WatchGuard solutions deliver in-depth defenses against advanced malware, ransomware, botnets, trojans, viruses, drive-by downloads, data loss, phishing, and much more.

	Standard Support	Basic Security	Total Security
Stateful Firewall
VPN
SD-WAN
Access Portal*
Intrusion Prevention Service (IPS)
Application Control
WebBlocker (URL/Content Filtering)
spamBlocker (Anti-Spam)
Gateway AntiVirus
Reputation Enabled Defense
Network Discovery
APT Blocker
DNSWatch
IntelligentAV**
ThreatSync (XDR)
EDR Core
WatchGuard Cloud Log Data Retention Report Data Retention		90 Days 1 Day	365 Days 30 Days
Support	Standard (24x7)	Standard (24x7)	Gold (24x7)

*Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R. Total Security Suite required for M270, M370, M470, M570, M670, FireboxV and Firebox Cloud.
**Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R.

Documentation:

Download the WatchGuard Firebox M595 Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.