WatchGuard
Firewall & VPN
for Every Office
Simply Smarter Security
TM
Todays Internet Security Challenge
Components of
Today, an Internet Security solution is essential for any office connected to
the Internet. Firewalls, network address translation, web access and content
control, scan detection, and user authentication are just some of the complex
technologies that each office needs to deploy. Its not an easy task. If youve
ever tried to install an Internet Security solution in your enterprise, you know
how tricky it can be to install it properly--then manage and monitor it on an
ongoing basis. With hackers continually inventing new forms of attack, and
the technology to fend them off always evolving, how can you be sure the
system you put in place will stay up-to-date?
Firebox
Security Suite
Then theres complexity of creating VPNs (virtual private networks). If your
business is like most, youre probably looking at VPN technology as a costeffective way to connect your remote offices, mobile users, and telecommuters. VPNs are essential if you want to keep business communications over the
Internet private. But setting up and managing a network of VPN tunnels is
no simple task. Too often, the lack of security expertise at remote locations
adds to the problem of VPN set-up and management.
The WatchGuard Firebox System
LiveSecurity Service
Internet
System Administrator
VPN Manager Option
H o m e Office
WatchGuard SOHO|tc
Sma
l l Br a n c h O ff i c e
I I
F I R E B O X
TRAFFIC LOAD
>>
>>
<<
<<<<<
>
>>>>>
EXTERNAL
<<
<
<<<<< >>>>>
TRUSTED
OPTIONAL
Firebox II
INTERNET
Med
i u m B r a n c h O f fi c e
F I R E B O X
I I
>>
>
<<
<<<<<
TRAFFIC LOAD
>>
>>>>>
EXTERNAL
<<
<
<<<<< >>>>>
TRUSTED
OPTIONAL
Firebox II
H ea d q u a rt
po r a te
F I R E B O X
e rs
L a rg e
Br a nc h O f fi c e
I I
F I R E B O X
I I
EXTERNAL
TRAFFIC LOAD
EXTERNAL
TRAFFIC LOAD
>>
>>>>>
>
<<
<<
<
<<
<<
<
<<<<< >>>>>
TRUSTED
Firebox II FastVPN
>>
>
OPTIONAL
>>
>>
<<<<< >>>>>
TRUSTED
<<<<<
Cor
>>>>>
Now, the challenges of protecting your network with a complete Internet
Security solution and ensuring private communications with a VPN are
solved. WatchGuards Firebox System is easier to install, easier to manage,
and always up-to-date. Just plug in the right WatchGuard Firebox at the
Internet connection of each office you want to protect, use WatchGuards
Control Center software to administer protection, and subscribe to
WatchGuards LiveSecurity Service to automatically keep your Firebox
System up-to-date. Add WatchGuards VPN Manager software and multisite VPN set-up and management can be done in three easy-to steps.
Control Center
<<<<<
Easier to Install. Easier to Manage.
Always Up-to-Date.
OPTIONAL
Firebox II Plus
the WatchGuard Firebox System
SEE BELOW HOW THE WATCHGUARD FIREBOX SYSTEM COMPONENTS STACK UP TO
CREATE THE EASIEST EVER FIREWALL AND VPN SOLUTIONS FOR YOUR ENTERPRISE.
The WatchGuard Firebox is easy to install into the existing network. It simply plugs in at the Internet connection of each of your
offices to implement your security policies and protection. Each WatchGuard Firebox is designed to enable rapid deployment of your
firewall and VPN. There are four WatchGuard Firebox models tailored for every size office. Use the chart included in this brochure
to choose the Firebox that is right for your office.
The WatchGuard Firebox System integrates a comprehensive suite of security software that provides the tools you need to conduct
e-business safely. The firewall lets you control incoming and outgoing traffic between the Internet and your protected networks.
Network Address Translation (NAT) makes it possible to hide your internal IP addresses from the external network and allow internal
hosts with unregistered IP addresses to function as Internet-reachable servers. User authentication allows you to configure access rules
by user or group. Remote User Virtual Private Networking (VPN) and Branch Office VPN enable you to set up secure communication
tunnels between your protected network and traveling employees, branch offices and trading partners. Web access control enhances
productivity by filtering or blocking Web site privileges by user, group, and time-of-day or content category.
WatchGuards Control Center software is included with the Firebox System and functions as the operational headquarters for your
WatchGuard Firebox System. The software helps configure your system, implements your security policies and monitors the status
of your installed network services.
Control Center offers helpful wizards to walk you through configuring the system. The QuickSetup Wizard enables you to efficiently
create a basic configuration. Intuitive pull-down menus and icons offer an easy way to add and delete services, proxies and other
feature settings. Integrated monitoring and reporting tools provide you with real-time and historical insights into the composition
of your network traffic. At a glance, you can view user, host, service, and bandwidth usage to optimize your networks security
performance. The software also includes logging and notification features that enable you to detect and interrupt suspicious activity.
Each WatchGuard Firebox System includes a one-year subscription to the LiveSecurity Service automatically delivering threat
responses, software updates, and technical support.
THREAT RESPONSES WatchGuards Rapid Response Team, a dedicated group of security experts, monitors the Internet security
andscape to identify new threats as they emerge. The Rapid Response Team develops and transmits a software update specifically
addressing the new threat to ensure your network is continuously protected.
SOFTWARE UPDATES The LiveSecurity Service automatically transmits ongoing functional software enhancements for your entire
WatchGuard Firebox Systemfreeing you from having to track the latest software version to keep your system up-to-date. An
nstallation wizard and release notes accompany each transmission for easy installation.
TECHNICAL SUPPORT Technical Support is available directly through your LiveSecurity subscription and includes product training,
Web-based support and telephone support.
WatchGuards optional VPN Manager turns the complex task of setting up multi-site VPNs into a simple three-step process with
ts new Instant VPN technology.
VPN Manager automates the set up, management, and monitoring of multi-site IPSec VPN tunnels between an organizations
headquarters, branch offices, telecommuters and remote users. VPN Manager uses Instant VPN technology to quickly create VPNs
and reduce the ongoing daily management complexity associated with operating a network of VPN tunnels.
The Firebox System...
Firebox SOHO,
and SOHO | tc
Recommended
For
Firebox II
Firebox II Plus
Firebox II FastVPN
Small stand alone or
remote office
Stand alone business
or branch office
Stand alone business
or branch office
Stand alone business
or branch office
10 Users (upgradable to 50
Users)
1,000 Authenticated Users
5,000 Authenticated Users
5,000 Authenticated Users
ISDN or T-1 Connection
ISDN or T-3 Connection
Privacy and secure communications important
DSL/Cable/ISDN
Connections
ISDN or T-3 Connection
Firebox
Specifications
Packet Filter Throughput
9 (Mbps)
95 (Mbps)
95 (Mbps)
95 (Mbps)
HTTP Proxy Throughput
N/A
25 (Mbps)
47 (Mbps)
47 (Mbps)
1.3 (Mbps)
5.2 (Mbps)
7.5 (Mbps)
24 (Mbps)
15/5
450/150
1000/330
1000/330
N/A
150 Simultaneous Connections*
330 Simultaneous Connections*
330 Simultaneous Connections*
5 RJ-45 10BaseT Ethernet
3 RJ-45 10/100 Ethernet
3 RJ-45 10/100 Ethernet
3 RJ-45 10/100 Ethernet
Firewall
Firewall
Firewall
Firewall
VPN (Optional for SOHO,
included with SOHO | tc)
Remote User VPN
Remote User VPN
Remote User VPN
Branch Office VPN
Branch Office VPN
Branch Office VPN
Static NAT
Static NAT
Static NAT
Dynamic NAT
Dynamic NAT
Dynamic NAT
User Authentication
User Authentication
User Authentication
Web Access Control
Web Access Control
Web Access Control
Scan Detection
Scan Detection
Scan Detection
Spoofing Detection
Spoofing Detection
Spoofing Detection
Port Blocking
Port Blocking
Port Blocking
Site Blocking
Site Blocking
Site Blocking
Easy Setup
QuickSetup Wizard
QuickSetup Wizard
QuickSetup Wizard
Logging
VPN Setup Wizard
VPN Setup Wizard
VPN Setup Wizard
Internet Sharing
Security Policy Manager
Security Policy Manager
Security Policy Manager
Real-Time Monitoring
Real-Time Monitoring
Real-Time Monitoring
HostWatch
HostWatch
HostWatch
Historical Reporting
Historical Reporting
Historical Reporting
Logging
Logging
Logging
Notification
Notification
Notification
First Year Subscription
Included
First Year Subscription
Included
First Year Subscription
Included
3DES Encryption Throughput
Branch Office VPNs
(Security Associations/Tunnels)
Mobile User VPNs
Interfaces
Security Suite
Static NAT
Dynamic NAT
Web Access Control
(Optional)
Control Center
LiveSecurity
First Year Subscription
Included
*The total of Branch Office VPN plus Mobile User VPN tunnels can't exceed 150 for Firebox II, and 330 for Firebox II Plus and Firebox FastVPN.
...there's one for every office.
L a rg e
Br a nc h O f fi c e
U ser at H o m e
S E R V I C E
F I R E B O X
I I
>>
>>
>
<<
<
Co
>>
<
<<
<<
<<
TRAFFIC LOAD
>>
>
EXTERNAL
<<<<< >>>>>
TRUSTED
OPTIONAL
rp o
r a t e H e a d q u a rt
ers
Firebox II Plus
i u m B r a n c h O f fi c e
F I R E B O X
I I
Sma
>
EXTERNAL
TRAFFIC LOAD
<
<<
<<
<<
<<
<
>
>>
>>
>>
>>
<<<<< >>>>>
TRUSTED
l l Br a n c h O ff i c e
OPTIONAL
Firebox II FastVPN
F I R E B O X
I I
>>
>>
>
<<
<
>>
<<
<<
TRAFFIC LOAD
>>
>
EXTERNAL
<
<<
<<<<< >>>>>
OPTIONAL
l l Br a n c h O ff i c e
F I R E B O X
WatchGuard SOHO | tc
I I
>>
>>
TRAFFIC LOAD
>>
>
EXTERNAL
>
>>
Sma
<<
<
Firebox II
<<
<<
TRUSTED
<
<<
Med
WatchGuard SOHO | tc
<<<<< >>>>>
TRUSTED
OPTIONAL
Firebox II
There is a Firebox
for every size
VPN Manager Option
WatchGuard VPN Manager is for companies deploying multi-site VPNs.
Unlike traditional solutions, our product uses Instant VPN technology
to simply and quickly create VPNs and further reduce the ongoing daily
management complexity associated with operating multi-site VPNs. VPN
Manager 2.0 and its Instant VPN technology dramatically reduces the
work required to set up VPN tunnels between offices. Using Instant VPN,
a network administrator can set up and launch a VPN tunnel between two
Fireboxes in just three easy steps.
By eliminating the need to remember and enter information common to each
side of the VPN tunnel, VPN Manager also reduces the extra work caused
by mis-configurations.
VPN Manager also provides a complete set of monitoring and management
tools to administer Internet distributed enterprise from your central headquarters.
Choose two
Fireboxes that
you want to
VPN together.
Other Products
Available from
WatchGuard
WATCHGUARD MOBILE USER VPN
IPSec-compliant Remote Access
WatchGuard Mobile User VPN client
software runs on any Windows
95/98/2000 or Windows NT workstation
and easily integrates into your standard
WatchGuard Firebox System whenever
greater reliability and standards compliance are required. Once installed, traffic
is encrypted using DES or 3DES-CBC
encryption and data packets are authenticated using MD5 or SHA-1.
WATCHGUARD HIGH AVAILABILITY
Software to Configure a Second,
Standby Firebox
WatchGuard High Availability software
allows you to install a second, standby
Firebox into your network to ensure that
your Web site and network remain accessible to customers, business partners,
and employees.
WATCHGUARD SPAM
S CREEN
Stop Junk E-mail Now!
WatchGuard SpamScreen provides you
the means to fight back against the
deluge of junk e-mail.
IPSEC VPN FOR WATCHGUARD SOHO
Select the
level of security
you desire for
the VPN tunnel.
Launch the VPN
tunnel. You simply
send this information
to the Fireboxes
and reboot them.
Simple, Secure Communication
Across the Internet
IPSec Virtual Private Networking (VPN)
provides a simple secure way to exchange
information over the Internet.
LIVESECURITY 2 YEAR
RENE WAL SPECIAL
Lock in Protection Today!
Keeping your security software current
is critical now more than ever, and by
purchasing a 2-year renewal to your
LiveSecurity Service you can save 30%
off the cost of a yearly subscription.
With a new security vulnerability
discovered every 11 hours, keeping
your network up-to-date with the latest
software and threat alerts is a crucial
piece of your total security solution.
Your personal LiveSecurity Service
also provides expert advice from
WatchGuards council of industry
experts, technical tips on making the
most of your products, and online
support and training resources.
Act now to protect your network today!
Benefits of the WatchGuard
Firebox System
RAPID DEPLOYMENTWatchGuard Fireboxes greatly
simplify the task of installing firewall protection and
enabling multi-site VPNs. Simply plug in a WatchGuard
Firebox between your network and the router connecting you to the Internet. Whichever Firebox you choose,
WatchGuards reliable appliances give you the performance you need to keep your end users happyand
fully protected.
CENTRALIZED CONTROLWith WatchGuards Firebox
Manager software you can easily manage and monitor
your Firebox system. You can use Firebox Manager
to simply and quickly configure or change security
policies. Add VPN Manager software, and multi-site
VPNs can be setup in three steps using WatchGuards
Instant VPN technology, then monitored and
managed from a single location.
STANDARDS COMPLIANCEWatchGuard is committed to implementing VPN
and firewall technologies that are consistent
with published standards. This simplifies using
WatchGuard Fireboxes with solutions provided
by other vendors. WatchGuard Firebox System
is compliant with ICSA standards. To learn
more about ICSA certification, go to
www.icsalabs.com.
UP-TO-DATE SECURITYThe WatchGuard Firebox System includes a years
subscription to WatchGuards LiveSecurity Service to keep you and your
networks defenses up-to-date.
COMPUTER RESELLER NEWS
EDITORS CHOICE AWARD
About WatchGuard
APRIL '00
INTERNETWEEKS BEST OF
BREED AWARD
FEBRUARY '00
PC MAGAZINES EDITORS
Headquartered in Seattle, Washington, we are a leading provider of dynamic,
comprehensive Internet security solutions designed to protect organizations that
use the Internet for electronic commerce and communications. We operate
sales offices throughout North America and also in Europe, Asia and Latin
America. The award winning WatchGuard Firebox System is available in more
than 50 countries through a worldwide network of authorized resellers. We
also partner with Internet Service Providers worldwide who offer LiveSecurity
managed services to their customers who wish to outsource their security needs.
For More Information
CHOICE AWARD
JUNE '00
Please visit us on the web at www.watchguard.com to request a free informational CD-Rom that includes our product demo, or contact the reseller below
for more information.
SC MAGAZINES PICK OF 2000
DECEMBER '00
DATAMATION PRODUCT OF THE
YEAR 2000
SC MAGAZINE'S BEST BUY
AWARD
JUNE '00
CORORATE MAGAZINE'S
CORPORATE CHOICE AWARD
APRIL '00
U.S. SALES:
E-MAIL:
1.800.734.9905
information@watchguard.com
INTERNATIONAL SALES:
ADDRESS:
206.521.8340
FAX:
505 Fifth Avenue S, Suite 500
Seattle, WA 98104
206.521.8342
WEB:
Simply Smarter Security
TM
www.watchguard.com
2001 WatchGuard Technologies, Inc.
WatchGuard and LiveSecurity are either a trademark or registered trademark of WatchGuard Technologies, Inc. in the United States and other countries. ServerLock, Firebox, and Simply Smarter Security are trademarks of
WatchGuard Technologies, Inc. All other trademarks are the property of their respective owners.
Part # 0101WGCO65622
