 |  |  |  |  |
| Ideal For | Main offices that need performance-driven security that's priced right | Main offices/headquarters that want security with fast throughput and room to grow | Main offices/headquarters looking for enterprise-grade performance and security in an all-in-one solution | Main offices/headquarters that require enterprise-grade performance and powerful security with flexible, centralized management |
| Model Upgradeable | | | | N/A |
| Interfaces | 6: 10/100/1000 and 1:10/100 | 6: 10/100/1000 and 1:10/100 | 6: 10/100/1000 and 1:10/100 | 6: 10/100/1000 and 1:10/100 |
| DMZs | 5 | 5 | 5 | 5 |
| Application Proxies | HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP | HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP | HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP | HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP |
| Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more) | | | | |
| Wireless Models Only | N/A | N/A | N/A | N/A |
| User Authentication with transparent Windows authentication | | | | |
| Firewall Throughput** | 850 Mbps | 1.4 Gbps | 1.9 Gbps | 2.3 Gbps |
| VPN Throughput** | 210 Mbps | 350 Mbps | 550 Mbps | 750 Mbps |
| XTM Throughput** | 275 Mbps | 400 Mbps | 600 Mbps | 800 Mbps |
Concurrent Sessions* (bi-directional) | 40,000 | 50,000 | 100,000 | 350,000 |
| Branch Office VPN Tunnels(Max.) | 65 | 75 | 200 | 600 |
| Mobile VPN with SSL Incl/Max | 1/65 | 1/75 | 1/300 | 1/600 |
| Mobile VPN with IPSec Client Licenses (Bundled) | 5 | 25 | 50 | 400 |
| Mobile VPN with IPSec Tunnels (Max.) | 75 | 100 | 300 | 1,000 |
| VPN Authentication | | | | |
| Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates. | 4-device WatchGuard System Manager license included with purchase. | 4-device WatchGuard System Manager license included with purchase. | 4-device WatchGuard System Manager license included with purchase. | 4-device WatchGuard System Manager license included with purchase. |
| Dynamic NAT | | | | |
| Static NAT | | | | |
| One to One NAT | | | | |
| VLAN | 75 | 75 | 75 | 75 |
| Policy-Based Routing | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro |
| WAN Failover | | | | |
| Multi-WAN Load Balancing | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro |
| Server Load Balancing | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro |
| Traffic Management/QoS | | | | |
| High AvailabilityActive/Active or Active/Passive | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro |
| Dynamic Routing | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro | Optional with Fireware® XTM Pro |
| VoIP (SIP and H.323)Support | | | | |
| Application Control | Included with Security Bundle | Optional | Optional | Optional |
| Reputation Enabled Defense | Included with Security Bundle | Optional | Optional | Optional |
| spamBlocker with Virus Outbreak Detection | Included with Security Bundle | Optional | Optional | Optional |
Gateway AntiVirus/ Intrusion Prevention Service (IPS) | Included with Security Bundle | Optional | Optional | Optional |
| WebBlocker with HTTPS URL filtering | Included with Security Bundle | Optional | Optional | Optional |
| LiveSecurity® Service | Included with Security Bundle | 1-year, 2-year, and 3-year subscriptions available | 1-year, 2-year, and 3-year subscriptions available | 1-year, 2-year, and 3-year subscriptions available |