Network Security and Malware Defense

• Overview of Firewall and VPN Consulting Services
• Check Point Software Consulting
• Palo Alto Networks PA-Series Firewalls Consulting
• Fortinet FortiGate Firewall Consulting
• WatchGuard Consulting
• SonicWall Consulting
• Symantec Raptor and VelociRaptor Consulting

For two decades Progent has provided remote and on-premises firewall and cybersecurity consulting services. Progent can assist organizations to maintain their legacy WatchGuard firewalls or design and execute a smooth migration to WatchGuard's modern firewalls.

WatchGuard's Security Services
In addition to offering a comprehensive suite of on-premises and cloud-based management and visibility tools, WatchGuard has developed an extensive catalog of security services that work with WatchGuard's Firebox T and M Series firewall appliances and with Firebox Cloud and FireboxV virtual firewalls. These services are available on a subscription basis and are packaged in two major bundles called the Basic Security Suite and the Total Security Suite. WatchGuard also offers these services individually for deployments with specific security requirements.

WatchGuard's Basic Security Suite services include:

• Intrusion Protection Service (IPS): Real-time traffic scanning on all key protocols based on continually updated signatures to defend against network threats such as spyware, SQL injections, cross-site scripting, and buffer overflows
• Application Control: Apps can be allowed, blocked, or assigned restricted access based on specified criteria such as department, job function, or time of day
• WebBlocker URL Filtering: Known malicious web sites can be blocked and inappropriate content can be filtered automatically to conserve network bandwidth and promote productivity
• spamBlocker: Real-time detection and filtering of spam and phishing attempts in any language or format and regardless of content
• Gateway AntiVirus (GAV): Continuously updated signature-based identification and blocking of known spyware, viruses, trojans, worms, rogueware and blended threats, plus heuristic analysis of suspicious data constructions and actions to block new variants
• Reputation Enabled Defense (RED): Cloud-based reputation lookup service aggregates data from multiple feeds to block malicious web sites and botnets
• Network Discovery: Generates intuitive visual maps of all nodes on the network to help ensure only authorized devices are connected and for easy detection of open ports and protocols

• APT Blocker: Next-generation cloud sandboxing identifies and blocks advanced threats like ransomware, zero-day attacks, and other modern malware designed to sidestep traditional security defense
• Data Loss Protection (DLP): Scans text and files transferred via email, web, or FTP to prevent sensitive corporate data from intentional or inadvertent exfiltration
• Threat Detection and Response: Rapid correlation of network and endpoint security events using enterprise-grade threat intelligence to identify, prioritize, and respond to attacks
• DNSWatch: Blocks malicious DNS requests such as phishing attacks and redirects users to a safe page with information to reinforce awareness of security best practices
• Dimension Command: Network control tools including single-click firewall re-configuration, VPN management, and access to specific security appliances via a web interface

• Access Portal: Secure access to cloud apps plus clientless RDP and SSH access to internal resources
• IntelligentAV: Signature-less anti-malware uses AI to automate malware discovery and deep statistical analysis to classify current and future malware

WatchGuard's Firebox T-Series firewalls are tabletop appliances intended for use in a home office, branch, or small office. WatchGuard's M-Series Firebox firewalls are rackmount 1RU appliances designed to support from 60 to 7,400 users at sites ranging from small businesses to the central headquarters of distributed enterprises. All M-Series models include multiple switch ports and higher-end devices offer modular port options to meet the needs of a broad range of environments. The devices also leverage multi-core processing for high-performance Unified Threat Management (UTM) and HTTPS inspection.

For a detailed look at WatchGuard's Firebox T and M Series firewalls, visit WatchGuard firewall integration and support consultants.

WatchGuard's Legacy Products Supported by Progent
WatchGuard has been providing security appliances to small and midsize businesses for more than two decades and has a substantial base of customers running legacy firewall/VPN technology. Progent's firewall experts have extensive backgrounds supporting WatchGuard security products and can provide world-class consulting, management, and troubleshooting support services for legacy WatchGuard hardware and software. Progent can also help you migrate from your outdated firewall products, such as the Firebox X Series, to current WatchGuard technology.

WatchGuard's XTM Series Firewalls
WatchGuard's XTM series of security appliances offer firewall, VPN, HTTPS content inspection, and VoIP support and are powered by WatchGuard's Fireware XTM OS software. WatchGuard's XTM integrated firewall/VPN routers replace the earlier Firebox X family and offer better performance, more features, and easier management. These advanced devices use Fireware XTM or Fireware XTM Pro as the default operating system, which supports features such as centralized management, HTTPS inspection, application blocking, VoIP security, privilege-based roles, logging, reporting, and monitoring.

XTM 2 Series Firewall/VPN Appliances: WatchGuard's XTM 2 Series of integrated firewall/VPN appliances are desktop appliances designed to handle the secure connectivity requirements of remote offices and small businesses. Each model has three 10/100 Ethernet ports and three 10/100/1000 ports, each has a wireless version, and each comes with the Fireware XTM operating system as standard and is upgradeable to the Fireware XTM Pro version. The entry-level XTM 21 has firewall throughput of 110 Mbps and VPN throughput of 35 Mbps. The device supports up to 10,000 concurrent sessions and five IPsec VPN tunnels. The mid-range XTM 22 has firewall throughput of 150 Mbps and VPN throughput of 55 Mbps. The device supports up to 20,000 concurrent sessions and 20 IPsec VPN tunnels. The top-of-the-line XTM 22 has firewall throughput of 195 Mbps and VPN throughput of 55 Mbps. The device supports up to 30,000 concurrent sessions and 50 IPsec VPN tunnels.

WatchGuard XTM 5 Series Firewall/VPN Appliances: WatchGuard's XTM 5 Series of firewall/VPN devices come in a desktop form factor and are intended for remote offices and small businesses. Each model has one 10/100 Ethernet port and six 10/100/1000 ports, and each comes standard with the Fireware XTM operating system and can be upgraded to Fireware XTM Pro. The XTM 505 has firewall throughput of 850 Mbps and VPN throughput of 210 Mbps. The XTM 505 firewall supports up to 40,000 concurrent sessions and 65 IPsec VPN tunnels. The XTM 510 offers firewall throughput of 1.4 Gbps and VPN throughput of 350 Mbps, supports up to 50,000 concurrent sessions, and allows 75 IPsec VPN tunnels. The high-end WatchGuard XTM 530 firewall/VPN appliance has firewall throughput of 2.3 Gbps and VPN throughput of 750 Mbps. The device supports up to 350,000 concurrent sessions and 600 IPsec VPN tunnels.

WatchGuard XTM 8 Series Firewall/VPN Appliances: The WatchGuard's XTM 8 Series of firewalls come in a desktop or 1U rack-mountable chassis and are intended for the data centers of mid-size businesses. Each model has 10 10/100/1000 ports, and each comes standard with the Fireware XTM Pro operating system, which supports BGP4, OSPF, and RIP v1/v2 routing as well as high-availability options. The XTM 810 has firewall throughput of 3 Gbps and VPN throughput of 1 Gbps. The XTM 810 supports up to 500,000 concurrent sessions and 1,000 IPsec VPN tunnels. The XTM 820 offers firewall throughput of 4 Gbps and VPN throughput of 1.4 Gbps, supports up to 750,000 concurrent sessions, and allows 2,000 IPsec VPN tunnels. The top-of-the-line WatchGuard XTM 830 firewall/VPN appliance has firewall throughput of 5 Gbps and VPN throughput of 1.7 Gbps. The device supports up to 1 million concurrent sessions and 6,000 IPsec VPN tunnels.

WatchGuard XTM 1050 Firewall/VPN Appliance: WatchGuard's XTM 1050 Firewall comes in a 2U rack mountable chassis and is engineered for enterprise-class environments requiring a practical price/performance tradeoff. The WatchGuard XTM 1050 Firewall/VPN appliance has 12 10/100/1000 ports and each comes standard with the Fireware XTM Pro operating system. The XTM 1050 has firewall throughput of 10 Gbps and VPN throughput of 2 Gbps. The device supports up to 2.5 million concurrent sessions and 7,000 IPsec VPN tunnels.

WatchGuard's Firebox Family of Firewalls
WatchGuard Firebox SOHO Series Firewall/VPN Appliances: WatchGuard's Firebox SOHO Firewall/VPN appliance is a desktop connectivity solution for small or remote offices with up to 10 users. The Firebox SOHO includes five 10BaseT Ethernet ports and delivers packet filter throughput of 9 Mbps. With an optional license, the Firebox SOHO can support five IPsec VPNs with a maximum throughput of 1.3 Mbps. WatchGuard's SOHO 6 firewall/VPN appliance has packet filter throughput of 75 Mbps. With an optional license, the Firebox SOHO can support 10 IPsec VPNs with a maximum throughput of 20 Mbps. The Firebox SOHO 6 supports up to 7,000 concurrent sessions.

WatchGuard Firebox Edge e-Series Firewall/VPN Appliances: WatchGuard's Firebox Edge e-Series of firewall/VPN devices come in a desktop form factor and are intended for remote offices and single-office businesses. Each model has six 10/100 Ethernet ports, has optional wireless support, and supports 100 Mbps firewall throughput and 35 Mbps VPN throughput. Each model comes standard with the Fireware XTM operating system and can be upgraded to the Fireware XTM Pro version. The entry-level Firebox Edge X10e can support 3,000 concurrent sessions and five IPsec VPN tunnels. The mid-range Firebox Edge X20e can support 4,000 concurrent sessions and 15 IPsec VPN tunnels. The top-of-the-line Firebox Edge X55e can support 5,000 concurrent sessions and 25 IPsec VPN tunnels.

WatchGuard Firebox Core e-Series Firewall/VPN Appliances: WatchGuard's Firebox Core e-Series of firewall/VPN appliances are 1U rack-mountable devices intended for small businesses and branch offices. Each model comes standard with the Fireware XTM operating system and can be upgraded to the Fireware XTM Pro version. The entry-level Firebox Core X550e includes four 10/100/1000 Ethernet ports and offers firewall throughput of 390 Mbps and VPN throughput of 200 Mbps. The Firebox Core X550e can support 12,500 concurrent sessions and 35 IPsec VPN tunnels. The mid-range Firebox Core X750e includes eight 10/100/1000 Ethernet ports and offers firewall throughput of 1 Gbps and VPN throughput of 260 Mbps. The Firebox Core X750e can support 37,500 concurrent sessions and 100 IPsec VPN tunnels. The top-of-the-line Firebox Core X1250e includes eight 10/100/1000 Ethernet ports and offers firewall throughput of 1.5 Gbps and VPN throughput of 260 Mbps. The Firebox Core X1250e can support 100,000 concurrent sessions and 600 IPsec VPN tunnels.

WatchGuard Firebox Peak e-Series Firewall/VPN Appliances: WatchGuard's Peak e-Series Firewall/VPN Appliances are 1U rack-mountable devices intended for medium-size enterprises and data centers. Each model has eight 10/100/1000 Ethernet ports and each comes standard with the Fireware XTM Pro operating system. The Firebox Peak X5500e offers firewall throughput of 2 Gbps, VPN throughput of 400 Mbps, and can support 250,000 concurrent sessions. The mid-range Firebox Peak X6500e offers firewall throughput of 2.3 Gbps, VPN throughput of 600 Mbps, and can support 375,000 concurrent sessions. The high-end Firebox Peak X8500e offers firewall throughput of 2.3 Gbps, VPN throughput of 600 Mbps, and can support 500,000 concurrent sessions. The Firebox Peak X8500e also has the option of substituting four fiber interfaces in place of four of the copper Ethernet ports.

WatchGuard Firebox SSL Core VPN Gateway: The Firebox SSL Core VPN Gateway provides universal access to an application or network resource with no connectors, modules, or client management issue. The client is automatically updated whenever the user connects to the network This appliance offers two access modes to extend your network's reach. In Secure Access client mode. authorized users connect using an auto-updating, Web-deployed client for an in-office experience, accessing any application or network resource. This mode also provides client failover capabilities to keep remote connections always up and running. In Kiosk mode, authorized users can use Web-enabled handhelds, laptops, desktops, and Internet kiosks whose browsers support SSL in Java and Microsoft Windows environments for secure access to Web applications, Citrix servers, and other Web-based network resources.

How Progent Can Help with WatchGuard Firewall/VPN Appliances
Progent's firewall consultants can help you maintain and troubleshoot WatchGuard firewall and VPN environments and assist you to choose, configure and manage a WatchGuard Firewall/VPN appliance that fits your security strategy and IT budget. Progent can also help you integrate WatchGuard products with security technology from other vendors and provide a one-stop resource for support, training, and security consulting.

Progent's engineers have been awarded the security industry's top certifications including CISM, CISSP-ISSAP, CISA, and GIAC. These experts can provide a broad range of services to help businesses of any size to build and validate a strong security profile. Security services available from Progent include:

• Security compliance assessment and remediation
• 24x7 security monitoring with real-time alerts
• Company-wide security planning
• Post-attack recovery services

Contact Progent for Security Consulting and Troubleshooting
To contact Progent about WatchGuard support services, call Progent at 800-993-9400 or visit Contact Progent.