Network Security and Malware Defense

• Overview of Firewall and VPN Consulting Services
• Cisco Firepower, ASA and PIX Firewall Consulting
• Palo Alto Networks PA-Series Firewalls Consulting
• Check Point Software Consulting
• WatchGuard Consulting
• Juniper Networks NetScreen Consulting
• SonicWall Consulting
• Fortinet FortiGate Firewall Consulting
• Symantec Raptor and VelociRaptor Consulting
  
  

Progent has provided online and onsite firewall and cybersecurity expertise for two decades and can help businesses manage and maintain their older-generation WatchGuard firewalls or plan and carry out an efficient migration to WatchGuard's latest security gateways.

WatchGuard's Current Firebox Firewall Products Supported by Progent
WatchGuard's current line of Firebox firewalls include tabletop, ruggedized, and rackmount models with multiple switch ports and VPN support. Firewall throughput in the Firebox family of appliances ranges from 400 Mbps to 60 Gbps. All current Firebox appliances include H.232 and SIP protocol support for VoIP plus call and session security. WatchGuard Dimension is also included for multi-appliance log aggregation and reporting, with more than 100 standard reports including HIPAA and PCI compliance.

Current Firebox firewalls work with WatchGuard's subscription-based security suites to provide comprehensive modern security solutions. WatchGuard's Basic Security Suite services include:

• Intrusion Protection Service (IPS): Continuously updated malware signature scanning
• App Control: Allow, block or restrict access to apps based on specified criteria
• WebBlocker: Block known malicious sites plus granular content filtering
• spamBlocker: Real-time spam filtering
• Gateway AntiVirus: Continuously updated signatures to block known spyware, viruses, and trojans
• Reputation Enabled Defense: Cloud-based reputation lookup to block malicious sites and botnets
• Network Discovery: Graphic mapping of all network nodes

• APT Blocker: Next-generation sandbox to block ransomware and zero-day threats
• Data Loss Protection (DLP): Blocks sensitive data from leaving the organization
• Threat Detection and Response: Correlate security events to drive intelligent mitigation
• DNSWatch: Block malicious DNS requests
• Dimension Command: Network control tools including firewall re-configuration and VPN management

• Access Portal: Secure access to cloud apps plus clientless RDP and SSH access to internal resources
• IntelligentAV: AI-based automation of malware discovery for instant classification

WatchGuard's Firebox T35-R is a ruggedized firewall designed to deliver high performance while operating in harsh environments. The T35-R firewall is IP64-rated and can withstand extreme temperature, moisture, and dust without requiring a special enclosure. Zero-Touch remote deployment allows you to define and save configuration information in the Cloud, ship a Firebox T35-R firewall appliance to its intended venue, and simply plug in the unit. The Firebox T35-R will automatically download and apply your specified configuration, eliminating the need to dispatch security experts to each harsh environment site. Firebox T35-R includes SCADA IPS signatures to block known exploits of industrial control systems (ICS). This model incorporates five 1 10/100/1000 Gb LAN switch interfaces. The T35-R appliance delivers UDP 1518 firewall throughput of 940 Mbps, UDP 1518 VPN throughput of 560 Mbps, and IPS full-scan throughput of 300 Mbps. The firewall can handle up to 1,300,000 concurrent connections and supports 25 VPN tunnels.

WatchGuard's Firebox T55 firewall is designed to support midsize businesses and distributed enterprises with up to 30 users at a site. This model incorporates five 1 Gb LAN switch ports, one with PoE. The unit supports firewall throughput of 1 Gbps, VPN throughput of 360 Mbps, and IPS throughput of 636 Mbps. The firewall can handle up to 1,300,000 concurrent connections and 40 branch office VPN tunnels. The Firebox T55-W includes 802.11ac Wi-Fi. The Firebox T70 stands out as a tabletop firewall appliance that can support the fastest fiber-to-the-premises speed. The unit is intended for midsize businesses and distributed enterprises, supports up to 60 users, and includes five 1 Gb interfaces with two Power-over-Ethernet (PoE) ports to support peripherals like WiFi access points or security cameras. The appliance delivers firewall throughput of 4 Gbps, VPN throughput of 740 Mbps, and IPS throughput of 1.5 Gbps. The unit supports up to 800,000 concurrent connections and 50 VPN tunnels.

WatchGuard's M-Series Firebox Firewalls
WatchGuard's M-Series Firebox firewalls are rackmount 1RU appliances designed to support from 60 to 7,400 users at sites ranging from small businesses to the central headquarters of distributed enterprises. All M-Series models include multiple switch ports and higher-end devices offer modular port options to meet the needs of a broad range of environments. The devices also deliver high Unified Threat Management (UTM) and HTTPS inspection performance. The Firebox M270 is designed to support up to 60 users and includes eight 1 Gb switch ports. The unit delivers firewall throughput of 4.9 Gbps, VPN throughput of 1.6 Gbps, and IPS throughput of 1.5 Gbps. The firewall can handle up to 2,000,000 concurrent connections and 50 branch office VPN tunnels. The Firebox M370 can support up to 150 users and includes eight 1 Gb interfaces. The appliance offers firewall throughput of 8 Gbps, VPN throughput of 4.6 Gbps, and IPS throughput of 4.8 Gbps. The unit supports up to 3,300,000 concurrent connections and 100 VPN tunnels.

The Firebox M470 is designed for SMBs, supports up to 450 users, includes eight Gb switch ports, and accepts an optional I/O module that can have eight Gb ports, eight Gb fiber ports, or four 10Gb fiber ports. The appliance delivers firewall throughput of 19.6 Gbps, VPN throughput of 5.2 Gbps, and IPS throughput of 5.7 Gbps. The firewall can handle up to 3,800,000 concurrent connections and 250 branch office VPN tunnels. The Firebox M570 can support up to 600 users and includes the same interface options as the M470. The device delivers firewall throughput of 26.6 Gbps, VPN throughput of 5.8 Gbps, and IPS throughput of 8 Gbps. The unit supports up to 8,300,000 concurrent connections and 100 VPN tunnels. The Firebox M670 can support up to 850 users and includes the same interface options as the M470 and M570 firewalls. The appliance supports firewall throughput of 34 Gbps, VPN throughput of 7.6 Gbps, and IPS throughput of 10.4 Gbps. The unit supports up to 8,500,000 concurrent connections and 7500 VPN tunnels.

The Firebox M4600 is designed for deployment at the headquarters of distributed enterprises. The firewall supports up to 1,550 users, includes eight Gb switch ports, and accepts an optional I/O module that can have eight Gb ports, eight Gb fiber ports, four 10Gb fiber ports, or two 40Gb fiber ports. The appliance supports firewall throughput of 40 Gbps, VPN throughput of10 Gbps, and IPS throughput of 13 Gbps. The firewall can handle up to 7,500,000 concurrent connections and 5000 branch office VPN tunnels. The top-of-the-line Firebox M5600 can support up to 7,500 users and includes the same interface options as the M4600 firewall. The unit supports firewall throughput of 60 Gbps, VPN throughput of 10 Gbps, and IPS throughput of 18 Gbps. The unit supports up to 12,700,000 concurrent connections and unlimited VPN tunnels.

WatchGuard's Legacy Products Supported by Progent
WatchGuard has been providing security appliances to small and midsize businesses for more than two decades and has a substantial base of customers running legacy firewall/VPN technology. Progent's firewall experts have extensive backgrounds supporting WatchGuard security products and can provide world-class consulting, management, and troubleshooting support services for legacy WatchGuard hardware and software. Progent can also help you migrate from your outdated firewall products, such as the Firebox X Series, to current WatchGuard technology.

WatchGuard's XTM Series Firewalls
WatchGuard's XTM series of security appliances offer firewall, VPN, HTTPS content inspection, and VoIP support and are powered by WatchGuard's Fireware XTM OS software. WatchGuard's XTM integrated firewall/VPN routers replace the earlier Firebox X family and offer better performance, more features, and easier management. These advanced devices use Fireware XTM or Fireware XTM Pro as the default operating system, which supports features such as centralized management, HTTPS inspection, application blocking, VoIP security, privilege-based roles, logging, reporting, and monitoring.

XTM 2 Series Firewall/VPN Appliances: WatchGuard's XTM 2 Series of integrated firewall/VPN appliances are desktop appliances designed to handle the secure connectivity requirements of remote offices and small businesses. Each model has three 10/100 Ethernet ports and three 10/100/1000 ports, each has a wireless version, and each comes with the Fireware XTM operating system as standard and is upgradeable to the Fireware XTM Pro version. The entry-level XTM 21 has firewall throughput of 110 Mbps and VPN throughput of 35 Mbps. The device supports up to 10,000 concurrent sessions and five IPsec VPN tunnels. The mid-range XTM 22 has firewall throughput of 150 Mbps and VPN throughput of 55 Mbps. The device supports up to 20,000 concurrent sessions and 20 IPsec VPN tunnels. The top-of-the-line XTM 22 has firewall throughput of 195 Mbps and VPN throughput of 55 Mbps. The device supports up to 30,000 concurrent sessions and 50 IPsec VPN tunnels.

WatchGuard XTM 5 Series Firewall/VPN Appliances: WatchGuard's XTM 5 Series of firewall/VPN devices come in a desktop form factor and are intended for remote offices and small businesses. Each model has one 10/100 Ethernet port and six 10/100/1000 ports, and each comes standard with the Fireware XTM operating system and can be upgraded to Fireware XTM Pro. The XTM 505 has firewall throughput of 850 Mbps and VPN throughput of 210 Mbps. The XTM 505 firewall supports up to 40,000 concurrent sessions and 65 IPsec VPN tunnels. The XTM 510 offers firewall throughput of 1.4 Gbps and VPN throughput of 350 Mbps, supports up to 50,000 concurrent sessions, and allows 75 IPsec VPN tunnels. The high-end WatchGuard XTM 530 firewall/VPN appliance has firewall throughput of 2.3 Gbps and VPN throughput of 750 Mbps. The device supports up to 350,000 concurrent sessions and 600 IPsec VPN tunnels.

WatchGuard XTM 8 Series Firewall/VPN Appliances: The WatchGuard's XTM 8 Series of firewalls come in a desktop or 1U rack-mountable chassis and are intended for the data centers of mid-size businesses. Each model has 10 10/100/1000 ports, and each comes standard with the Fireware XTM Pro operating system, which supports BGP4, OSPF, and RIP v1/v2 routing as well as high-availability options. The XTM 810 has firewall throughput of 3 Gbps and VPN throughput of 1 Gbps. The XTM 810 supports up to 500,000 concurrent sessions and 1,000 IPsec VPN tunnels. The XTM 820 offers firewall throughput of 4 Gbps and VPN throughput of 1.4 Gbps, supports up to 750,000 concurrent sessions, and allows 2,000 IPsec VPN tunnels. The top-of-the-line WatchGuard XTM 830 firewall/VPN appliance has firewall throughput of 5 Gbps and VPN throughput of 1.7 Gbps. The device supports up to 1 million concurrent sessions and 6,000 IPsec VPN tunnels.

WatchGuard XTM 1050 Firewall/VPN Appliance: WatchGuard's XTM 1050 Firewall comes in a 2U rack mountable chassis and is engineered for enterprise-class environments requiring a practical price/performance tradeoff. The WatchGuard XTM 1050 Firewall/VPN appliance has 12 10/100/1000 ports and each comes standard with the Fireware XTM Pro operating system. The XTM 1050 has firewall throughput of 10 Gbps and VPN throughput of 2 Gbps. The device supports up to 2.5 million concurrent sessions and 7,000 IPsec VPN tunnels.

WatchGuard's Firebox Family of Firewalls
WatchGuard Firebox SOHO Series Firewall/VPN Appliances: WatchGuard's Firebox SOHO Firewall/VPN appliance is a desktop connectivity solution for small or remote offices with up to 10 users. The Firebox SOHO includes five 10BaseT Ethernet ports and delivers packet filter throughput of 9 Mbps. With an optional license, the Firebox SOHO can support five IPsec VPNs with a maximum throughput of 1.3 Mbps. WatchGuard's SOHO 6 firewall/VPN appliance has packet filter throughput of 75 Mbps. With an optional license, the Firebox SOHO can support 10 IPsec VPNs with a maximum throughput of 20 Mbps. The Firebox SOHO 6 supports up to 7,000 concurrent sessions.

WatchGuard Firebox Edge e-Series Firewall/VPN Appliances: WatchGuard's Firebox Edge e-Series of firewall/VPN devices come in a desktop form factor and are intended for remote offices and single-office businesses. Each model has six 10/100 Ethernet ports, has optional wireless support, and supports 100 Mbps firewall throughput and 35 Mbps VPN throughput. Each model comes standard with the Fireware XTM operating system and can be upgraded to the Fireware XTM Pro version. The entry-level Firebox Edge X10e can support 3,000 concurrent sessions and five IPsec VPN tunnels. The mid-range Firebox Edge X20e can support 4,000 concurrent sessions and 15 IPsec VPN tunnels. The top-of-the-line Firebox Edge X55e can support 5,000 concurrent sessions and 25 IPsec VPN tunnels.

WatchGuard Firebox Core e-Series Firewall/VPN Appliances: WatchGuard's Firebox Core e-Series of firewall/VPN appliances are 1U rack-mountable devices intended for small businesses and branch offices. Each model comes standard with the Fireware XTM operating system and can be upgraded to the Fireware XTM Pro version. The entry-level Firebox Core X550e includes four 10/100/1000 Ethernet ports and offers firewall throughput of 390 Mbps and VPN throughput of 200 Mbps. The Firebox Core X550e can support 12,500 concurrent sessions and 35 IPsec VPN tunnels. The mid-range Firebox Core X750e includes eight 10/100/1000 Ethernet ports and offers firewall throughput of 1 Gbps and VPN throughput of 260 Mbps. The Firebox Core X750e can support 37,500 concurrent sessions and 100 IPsec VPN tunnels. The top-of-the-line Firebox Core X1250e includes eight 10/100/1000 Ethernet ports and offers firewall throughput of 1.5 Gbps and VPN throughput of 260 Mbps. The Firebox Core X1250e can support 100,000 concurrent sessions and 600 IPsec VPN tunnels.

WatchGuard Firebox Peak e-Series Firewall/VPN Appliances: WatchGuard's Peak e-Series Firewall/VPN Appliances are 1U rack-mountable devices intended for medium-size enterprises and data centers. Each model has eight 10/100/1000 Ethernet ports and each comes standard with the Fireware XTM Pro operating system. The Firebox Peak X5500e offers firewall throughput of 2 Gbps, VPN throughput of 400 Mbps, and can support 250,000 concurrent sessions. The mid-range Firebox Peak X6500e offers firewall throughput of 2.3 Gbps, VPN throughput of 600 Mbps, and can support 375,000 concurrent sessions. The high-end Firebox Peak X8500e offers firewall throughput of 2.3 Gbps, VPN throughput of 600 Mbps, and can support 500,000 concurrent sessions. The Firebox Peak X8500e also has the option of substituting four fiber interfaces in place of four of the copper Ethernet ports.

WatchGuard Firebox SSL Core VPN Gateway: The Firebox SSL Core VPN Gateway provides universal access to an application or network resource with no connectors, modules, or client management issue. The client is automatically updated whenever the user connects to the network This appliance offers two access modes to extend your network's reach. In Secure Access client mode. authorized users connect using an auto-updating, Web-deployed client for an in-office experience, accessing any application or network resource. This mode also provides client failover capabilities to keep remote connections always up and running. In Kiosk mode, authorized users can use Web-enabled handhelds, laptops, desktops, and Internet kiosks whose browsers support SSL in Java and Microsoft Windows environments for secure access to Web applications, Citrix servers, and other Web-based network resources.

How Progent Can Help with WatchGuard Firewall/VPN Appliances
Progent's firewall consultants can help you maintain and troubleshoot WatchGuard firewall and VPN environments and assist you to choose, configure and manage a WatchGuard Firewall/VPN appliance that fits your security strategy and IT budget. Progent can also help you integrate WatchGuard products with security technology from other vendors and provide a one-stop resource for support, training, and security consulting.

Progent's engineers have been awarded the security industry's top certifications including CISM, CISSP-ISSAP, CISA, and GIAC. These experts can provide a broad range of services to help businesses of any size to build and validate a strong security profile. Security services available from Progent include:

• Security compliance assessment and remediation
• 24x7 security monitoring with real-time alerts
• Company-wide security planning
• Post-attack recovery services

Contact Progent for Security Consulting and Troubleshooting
To contact Progent about WatchGuard support services, call Progent at 800-993-9400 or visit Contact Progent.