Network Security and Malware Protection

• Overview of Firewall and VPN Consulting Services
• Cisco Firepower, ASA and PIX Firewall Consulting
• Palo Alto Networks PA-Series Firewalls Consulting
• Check Point Software Consulting
• Barracuda CloudGen Firewall Consulting
• WatchGuard Consulting
• Juniper Networks NetScreen Consulting
• SonicWall Consulting
• Fortinet FortiGate Firewall Consulting
• Symantec Raptor and VelociRaptor Consulting

For two decades Progent has provided remote and on-premises firewall and cybersecurity consulting services. Progent can assist organizations to maintain their legacy WatchGuard firewalls or design and execute a smooth migration to WatchGuard's modern firewalls.

WatchGuard's Security Services
In addition to offering a comprehensive suite of on-premises and cloud-based management and visibility tools, WatchGuard has developed an extensive catalog of security services that work with WatchGuard's Firebox T and M Series firewall appliances and with Firebox Cloud and FireboxV virtual firewalls. These services are available on a subscription basis and are packaged in two major bundles called the Basic Security Suite and the Total Security Suite. WatchGuard also offers these services individually for deployments with specific security requirements.

WatchGuard's Basic Security Suite services include:

• Intrusion Protection Service (IPS): Real-time traffic scanning on all key protocols based on continually updated signatures to defend against network threats such as spyware, SQL injections, cross-site scripting, and buffer overflows
• Application Control: Apps can be allowed, blocked, or assigned restricted access based on specified criteria such as department, job function, or time of day
• WebBlocker URL Filtering: Known malicious web sites can be blocked and inappropriate content can be filtered automatically to conserve network bandwidth and promote productivity
• spamBlocker: Real-time detection and filtering of spam and phishing attempts in any language or format and regardless of content
• Gateway AntiVirus (GAV): Continuously updated signature-based identification and blocking of known spyware, viruses, trojans, worms, rogueware and blended threats, plus heuristic analysis of suspicious data constructions and actions to block new variants
• Reputation Enabled Defense (RED): Cloud-based reputation lookup service aggregates data from multiple feeds to block malicious web sites and botnets
• Network Discovery: Generates intuitive visual maps of all nodes on the network to help ensure only authorized devices are connected and for easy detection of open ports and protocols

• APT Blocker: Next-generation cloud sandboxing identifies and blocks advanced threats like ransomware, zero-day attacks, and other modern malware designed to sidestep traditional security defense
• Data Loss Protection (DLP): Scans text and files transferred via email, web, or FTP to prevent sensitive corporate data from intentional or inadvertent exfiltration
• Threat Detection and Response: Rapid correlation of network and endpoint security events using enterprise-grade threat intelligence to identify, prioritize, and respond to attacks
• DNSWatch: Blocks malicious DNS requests such as phishing attacks and redirects users to a safe page with information to reinforce awareness of security best practices
• Dimension Command: Network control tools including single-click firewall re-configuration, VPN management, and access to specific security appliances via a web interface

• Access Portal: Secure access to cloud apps plus clientless RDP and SSH access to internal resources
• IntelligentAV: Signature-less anti-malware uses AI to automate malware discovery and deep statistical analysis to classify current and future malware

WatchGuard's Firebox T35-R is a ruggedized firewall designed to deliver high performance while operating in harsh environments. The T35-R firewall is IP64-rated and can withstand extreme temperature, moisture, and dust without requiring a special enclosure. Zero-Touch remote deployment allows you to define and save configuration information in the Cloud, ship a Firebox T35-R firewall appliance to its intended venue, and simply plug in the unit. The Firebox T35-R will automatically download and apply your specified configuration, eliminating the need to dispatch security experts to each harsh environment site. Firebox T35-R includes SCADA IPS signatures to block known exploits of industrial control systems (ICS). This model incorporates five 1 10/100/1000 Gb LAN switch interfaces. The T35-R appliance delivers UDP 1518 firewall throughput of 940 Mbps, UDP 1518 VPN throughput of 560 Mbps, and IPS full-scan throughput of 300 Mbps. The firewall can handle up to 1,300,000 concurrent connections and supports 25 VPN tunnels.

WatchGuard's Firebox T55 firewall is designed to support midsize businesses and distributed enterprises with up to 30 users at a site. This model incorporates five 1 Gb LAN switch ports, one with PoE. The unit supports firewall throughput of 1 Gbps, VPN throughput of 360 Mbps, and IPS throughput of 636 Mbps. The firewall can handle up to 1,300,000 concurrent connections and 40 branch office VPN tunnels. The Firebox T55-W includes 802.11ac Wi-Fi. The Firebox T70 stands out as a tabletop firewall appliance that can support the fastest fiber-to-the-premises speed. The unit is intended for midsize businesses and distributed enterprises, supports up to 60 users, and includes five 1 Gb interfaces with two Power-over-Ethernet (PoE) ports to support peripherals like WiFi access points or security cameras. The appliance delivers firewall throughput of 4 Gbps, VPN throughput of 740 Mbps, and IPS throughput of 1.5 Gbps. The unit supports up to 800,000 concurrent connections and 50 VPN tunnels.

WatchGuard's Firebox T25 firewall is designed to support small venues such as virtual offices and homes with up to 5 users at a site. This series incorporates five 1 Gb LAN interfaces, and a wireless version includes dual-band 802.11ax Wi-Fi 6 technology. The unit supports firewall throughput of 3.14 Gbps, VPN throughput of 1.02 Gbps, and IPS throughput of 525 Mbps. The T25 firewall can handle up to 1,300,000 concurrent connections, 16,000 new connections per second, and 10 VPN tunnels.

WatchGuard's Firebox T45 desktop firewall is intended for small organizations with up to 20 users at a site. The T45 series incorporates five 1 Gb LAN interfaces with one integrated PoE port for powering peripheral devices. The T45-W version offers Wi-Fi 6 support. The T45 appliance delivers firewall throughput of 3.94 Gbps, VPN throughput of 1.58 Gbps, and IPS throughput of 716 Mbps. The T25 firewall supports up to 3,850,000 concurrent connections, 26,500 new connections per second, and 30 VPN tunnels. WatchGuard's Firebox T85 is a high-performance desktop firewall designed for organizations with up to 50 employees or for use in high-traffic venues. The T85 model includes eight integrated 1 Gb LAN interfaces, two with PoE, and supports an optional 1 SFP+ port. The T45-W version offers Wi-Fi 6 support. The T85 unit provides firewall performance of 4.96 Gbps, VPN throughput of 2.04 Gbps, and IPS throughput of 1.28 Gbps. The T85 firewall supports up to 3,850,000 concurrent connections, 35,000 new connections per second, and 60 VPN tunnels.

WatchGuard's M-Series Firebox Firewalls
WatchGuard's M-Series Firebox firewalls are rackmount 1RU appliances designed to support from 60 to 7,500 users at sites ranging from small businesses to the central headquarters of distributed enterprises. All M-Series models include multiple switch ports and higher-end devices offer modular port options to meet the needs of a broad range of environments. The devices also deliver high Unified Threat Management (UTM) and HTTPS inspection performance. The Firebox M270 is designed to support up to 60 users and includes eight 1 Gb switch ports. The unit delivers firewall throughput of 4.9 Gbps, VPN throughput of 1.6 Gbps, and IPS throughput of 1.5 Gbps. The firewall can handle up to 2,000,000 concurrent connections and 50 branch office VPN tunnels. The Firebox M370 can support up to 150 users and includes eight 1 Gb interfaces. The appliance offers firewall throughput of 8 Gbps, VPN throughput of 4.6 Gbps, and IPS throughput of 4.8 Gbps. The unit supports up to 3,300,000 concurrent connections and 100 VPN tunnels.

The Firebox M470 is designed for SMBs, supports up to 450 users, includes eight Gb switch ports, and accepts an optional I/O module that can have eight Gb ports, eight Gb fiber ports, or four 10Gb fiber ports. The appliance delivers firewall throughput of 19.6 Gbps, VPN throughput of 5.2 Gbps, and IPS throughput of 5.7 Gbps. The firewall can handle up to 3,800,000 concurrent connections and 250 branch office VPN tunnels. The Firebox M570 can support up to 600 users and includes the same interface options as the M470. The device delivers firewall throughput of 26.6 Gbps, VPN throughput of 5.8 Gbps, and IPS throughput of 8 Gbps. The unit supports up to 8,300,000 concurrent connections and 100 VPN tunnels. The Firebox M670 can support up to 850 users and includes the same interface options as the M470 and M570 firewalls. The appliance supports firewall throughput of 34 Gbps, VPN throughput of 7.6 Gbps, and IPS throughput of 10.4 Gbps. The unit supports up to 8,500,000 concurrent connections and 7500 VPN tunnels.

The Firebox M4600 is designed for deployment at the headquarters of distributed enterprises. The firewall supports up to 1,550 users, includes eight Gb switch ports, and accepts an optional I/O module that can have eight Gb ports, eight Gb fiber ports, four 10Gb fiber ports, or two 40Gb fiber ports. The appliance supports firewall throughput of 40 Gbps, VPN throughput of10 Gbps, and IPS throughput of 13 Gbps. The firewall can handle up to 7,500,000 concurrent connections and 5000 branch office VPN tunnels. The top-of-the-line Firebox M5600 can support up to 7,500 users and includes the same interface options as the M4600 firewall. The unit supports firewall throughput of 60 Gbps, VPN throughput of 10 Gbps, and IPS throughput of 18 Gbps. The unit supports up to 12,700,000 concurrent connections and unlimited VPN tunnels.

The Watchguard Firebox M290 is designed for small and midsize organizations with up to 60 users. The M290 has one empty bay for an expansion module, with options for 8 x 1 Gb copper, 4 x 1 Gb copper, 4 x SFP, 2 x SFP+, or 4 x 1/2.5/5 Gb multi-speed ports. PoE+ is not supported. The appliance offers firewall performance of 5.8 Gbps, VPN throughput of 2.4 Gbps, and IPS throughput of 1.3 Gbps. The M290 firewall supports up to 3,500,000 concurrent connections, 34,000 new connections per second, and 75 branch office VPN tunnels. The Watchguard Firebox M390 is intended for small and midsize businessess with up to 150 users. Like the M290, the M390 has an I/O expansion bay. Available interface options include 8 x 1 Gb copper, 4 x 1 Gb copper, 4 x SFP, 2 x SFP+, or 4 port multi-speed ports. PoE+ is not supported. The M390 delivers firewall throughput of 18 Gbps, VPN speed of 5.2 Gbps, and IPS performance of 3.3 Gbps. The firewall supports up to 4,500,000 concurrent connections, 98,000 new connections per second, and 250 branch VPN tunnels.

The Watchguard Firebox M590 is designed for midsize and distributed enterprises with up to 600 users. The M590 has an open bay for an I/O expansion module, with options for 8 x 1 Gb copper, 4 x 1 Gb copper, 4 x SFP, 2 x SFP+, or 4 x 1/2.5/5 Gb multi-speed POE+ ports. The POE ports can be used to power WatchGuard Wi-Fi Access Points. The M590 appliance supports firewall throughput of 20.0 Gbps, VPN performance of 6.84 Gbps, and IPS throughput of 4.6 Gbps. The M590 allows up to 6,000,000 concurrent connections, 132,000 new connections per second, and 500 VPN tunnels. The Watchguard Firebox M690 is intended for midsize and distributed enterprise with up to 850 users. Like the M590, the M690 has an I/O expansion bay for customizing port configurations. The M690 offers firewall throughput of 29.7 Gbps, VPN performance of 10.0 Gbps, and IPS performance of 5.8 Gbps. The firewall supports up to 15,000,000 concurrent connections, 146,000 new connections per second, and 1,000 branch office VPN tunnels.

The Watchguard Firebox M4800 is designed for distributed hub-and-spoke type deployments with up to 1,500 users. The M4800 comes with two open bays that can support any combination of 4 x 10 Gb fiber, 8 x 1 Gb fiber, 8 x 1 Gb copper, and 2 x 40 Gb fiber. The M4800 appliance supports firewall throughput of 49.6 Gbps, VPN performance of 16.4 Gbps, and IPS throughput of 8.1 Gbps. The M4800 allows up to 15,000,000 concurrent connections, 254,000 new connections per second, and 5,000 VPN tunnels. Watchguard's Firebox M5800 is intended for use as a hub appliance deployed at a corporate headquarters where it can support up to 7,500 users. Like the M4800, the M5800 has two I/O expansion bays for flexible port configurations and high port density. The M5800 offers firewall throughput of 87.0 Gbps, VPN performance of 18.8 Gbps, and IPS performance of 12.5 Gbps. The firewall supports up to 30,800,000 concurrent connections, 328,000 new connections per second, and unrestricted branch office VPN tunnels.

WatchGuard's Legacy Products Supported by Progent
WatchGuard has been providing security appliances to small and midsize businesses for more than two decades and has a substantial base of customers running legacy firewall/VPN technology. Progent's firewall experts have extensive backgrounds supporting WatchGuard security products and can provide world-class consulting, management, and troubleshooting support services for legacy WatchGuard hardware and software. Progent can also help you migrate from your outdated firewall products, such as the Firebox X Series, to current WatchGuard technology.

WatchGuard's XTM Series Firewalls
WatchGuard's XTM series of security appliances offer firewall, VPN, HTTPS content inspection, and VoIP support and are powered by WatchGuard's Fireware XTM OS software. WatchGuard's XTM integrated firewall/VPN routers replace the earlier Firebox X family and offer better performance, more features, and easier management. These advanced devices use Fireware XTM or Fireware XTM Pro as the default operating system, which supports features such as centralized management, HTTPS inspection, application blocking, VoIP security, privilege-based roles, logging, reporting, and monitoring.

XTM 2 Series Firewall/VPN Appliances: WatchGuard's XTM 2 Series of integrated firewall/VPN appliances are desktop appliances designed to handle the secure connectivity requirements of remote offices and small businesses. Each model has three 10/100 Ethernet ports and three 10/100/1000 ports, each has a wireless version, and each comes with the Fireware XTM operating system as standard and is upgradeable to the Fireware XTM Pro version. The entry-level XTM 21 has firewall throughput of 110 Mbps and VPN throughput of 35 Mbps. The device supports up to 10,000 concurrent sessions and five IPsec VPN tunnels. The mid-range XTM 22 has firewall throughput of 150 Mbps and VPN throughput of 55 Mbps. The device supports up to 20,000 concurrent sessions and 20 IPsec VPN tunnels. The top-of-the-line XTM 22 has firewall throughput of 195 Mbps and VPN throughput of 55 Mbps. The device supports up to 30,000 concurrent sessions and 50 IPsec VPN tunnels.

WatchGuard XTM 5 Series Firewall/VPN Appliances: WatchGuard's XTM 5 Series of firewall/VPN devices come in a desktop form factor and are intended for remote offices and small businesses. Each model has one 10/100 Ethernet port and six 10/100/1000 ports, and each comes standard with the Fireware XTM operating system and can be upgraded to Fireware XTM Pro. The XTM 505 has firewall throughput of 850 Mbps and VPN throughput of 210 Mbps. The XTM 505 firewall supports up to 40,000 concurrent sessions and 65 IPsec VPN tunnels. The XTM 510 offers firewall throughput of 1.4 Gbps and VPN throughput of 350 Mbps, supports up to 50,000 concurrent sessions, and allows 75 IPsec VPN tunnels. The high-end WatchGuard XTM 530 firewall/VPN appliance has firewall throughput of 2.3 Gbps and VPN throughput of 750 Mbps. The device supports up to 350,000 concurrent sessions and 600 IPsec VPN tunnels.

WatchGuard XTM 8 Series Firewall/VPN Appliances: The WatchGuard's XTM 8 Series of firewalls come in a desktop or 1U rack-mountable chassis and are intended for the data centers of mid-size businesses. Each model has 10 10/100/1000 ports, and each comes standard with the Fireware XTM Pro operating system, which supports BGP4, OSPF, and RIP v1/v2 routing as well as high-availability options. The XTM 810 has firewall throughput of 3 Gbps and VPN throughput of 1 Gbps. The XTM 810 supports up to 500,000 concurrent sessions and 1,000 IPsec VPN tunnels. The XTM 820 offers firewall throughput of 4 Gbps and VPN throughput of 1.4 Gbps, supports up to 750,000 concurrent sessions, and allows 2,000 IPsec VPN tunnels. The top-of-the-line WatchGuard XTM 830 firewall/VPN appliance has firewall throughput of 5 Gbps and VPN throughput of 1.7 Gbps. The device supports up to 1 million concurrent sessions and 6,000 IPsec VPN tunnels.

WatchGuard XTM 1050 Firewall/VPN Appliance: WatchGuard's XTM 1050 Firewall comes in a 2U rack mountable chassis and is engineered for enterprise-class environments requiring a practical price/performance tradeoff. The WatchGuard XTM 1050 Firewall/VPN appliance has 12 10/100/1000 ports and each comes standard with the Fireware XTM Pro operating system. The XTM 1050 has firewall throughput of 10 Gbps and VPN throughput of 2 Gbps. The device supports up to 2.5 million concurrent sessions and 7,000 IPsec VPN tunnels.

WatchGuard's Firebox Family of Firewalls
WatchGuard Firebox SOHO Series Firewall/VPN Appliances: WatchGuard's Firebox SOHO Firewall/VPN appliance is a desktop connectivity solution for small or remote offices with up to 10 users. The Firebox SOHO includes five 10BaseT Ethernet ports and delivers packet filter throughput of 9 Mbps. With an optional license, the Firebox SOHO can support five IPsec VPNs with a maximum throughput of 1.3 Mbps. WatchGuard's SOHO 6 firewall/VPN appliance has packet filter throughput of 75 Mbps. With an optional license, the Firebox SOHO can support 10 IPsec VPNs with a maximum throughput of 20 Mbps. The Firebox SOHO 6 supports up to 7,000 concurrent sessions.

WatchGuard Firebox Edge e-Series Firewall/VPN Appliances: WatchGuard's Firebox Edge e-Series of firewall/VPN devices come in a desktop form factor and are intended for remote offices and single-office businesses. Each model has six 10/100 Ethernet ports, has optional wireless support, and supports 100 Mbps firewall throughput and 35 Mbps VPN throughput. Each model comes standard with the Fireware XTM operating system and can be upgraded to the Fireware XTM Pro version. The entry-level Firebox Edge X10e can support 3,000 concurrent sessions and five IPsec VPN tunnels. The mid-range Firebox Edge X20e can support 4,000 concurrent sessions and 15 IPsec VPN tunnels. The top-of-the-line Firebox Edge X55e can support 5,000 concurrent sessions and 25 IPsec VPN tunnels.

WatchGuard Firebox Core e-Series Firewall/VPN Appliances: WatchGuard's Firebox Core e-Series of firewall/VPN appliances are 1U rack-mountable devices intended for small businesses and branch offices. Each model comes standard with the Fireware XTM operating system and can be upgraded to the Fireware XTM Pro version. The entry-level Firebox Core X550e includes four 10/100/1000 Ethernet ports and offers firewall throughput of 390 Mbps and VPN throughput of 200 Mbps. The Firebox Core X550e can support 12,500 concurrent sessions and 35 IPsec VPN tunnels. The mid-range Firebox Core X750e includes eight 10/100/1000 Ethernet ports and offers firewall throughput of 1 Gbps and VPN throughput of 260 Mbps. The Firebox Core X750e can support 37,500 concurrent sessions and 100 IPsec VPN tunnels. The top-of-the-line Firebox Core X1250e includes eight 10/100/1000 Ethernet ports and offers firewall throughput of 1.5 Gbps and VPN throughput of 260 Mbps. The Firebox Core X1250e can support 100,000 concurrent sessions and 600 IPsec VPN tunnels.

WatchGuard Firebox Peak e-Series Firewall/VPN Appliances: WatchGuard's Peak e-Series Firewall/VPN Appliances are 1U rack-mountable devices intended for medium-size enterprises and data centers. Each model has eight 10/100/1000 Ethernet ports and each comes standard with the Fireware XTM Pro operating system. The Firebox Peak X5500e offers firewall throughput of 2 Gbps, VPN throughput of 400 Mbps, and can support 250,000 concurrent sessions. The mid-range Firebox Peak X6500e offers firewall throughput of 2.3 Gbps, VPN throughput of 600 Mbps, and can support 375,000 concurrent sessions. The high-end Firebox Peak X8500e offers firewall throughput of 2.3 Gbps, VPN throughput of 600 Mbps, and can support 500,000 concurrent sessions. The Firebox Peak X8500e also has the option of substituting four fiber interfaces in place of four of the copper Ethernet ports.

WatchGuard Firebox SSL Core VPN Gateway: The Firebox SSL Core VPN Gateway provides universal access to an application or network resource with no connectors, modules, or client management issue. The client is automatically updated whenever the user connects to the network This appliance offers two access modes to extend your network's reach. In Secure Access client mode. authorized users connect using an auto-updating, web-deployed client for an in-office experience, accessing any application or network resource. This mode also provides client failover capabilities to keep remote connections always up and running. In Kiosk mode, authorized users can use web-enabled handhelds, laptops, desktops, and Internet kiosks whose browsers support SSL in Java and Microsoft Windows environments for secure access to web applications, Citrix servers, and other web-based network resources.

How Progent Can Help with WatchGuard Firewall/VPN Appliances
Progent's firewall consultants can help you maintain and troubleshoot WatchGuard firewall and VPN environments and assist you to choose, configure and manage a WatchGuard Firewall/VPN appliance that fits your security strategy and IT budget. Progent can also help you integrate WatchGuard products with security technology from other vendors and provide a one-stop resource for support, training, and security consulting.

Progent's engineers have been awarded the security industry's top certifications including CISM, CISSP-ISSAP, CISA, and GIAC. These experts can provide a broad range of services to help businesses of any size to build and validate a strong security profile. Security services available from Progent include:

• Security compliance assessment and remediation
• 24x7 security monitoring with real-time alerts
• Company-wide security planning
• Post-attack recovery services

Contact Progent for Security Consulting and Troubleshooting
To contact Progent about WatchGuard support services, call Progent at 800-993-9400 or visit Contact Progent.