|
|
|
 XTM 830
Ideal for main offices / headquarters that need enterprise-grade performance, security. And for those that need fiber connections, the XTM 830 comes in a fiber mode (XTM 830-F). The XTM 8 Series has up to 5 Gbps firewall throughput, ten 1-Gb interfaces, and XTM-class security features including full HTTPS inspection, optional URL filtering, anti-spam, anti-virus, and intrusion prevention – no need to compromise on security to meet increasing network demands.
Every WatchGuard XTM 8 Series appliance ships with the Pro Version of the Fireware® XTM operating system, providing the advanced networking features that demanding networks require.
Flexible, centralized management tools allow administrators access from one intuitive console or a scriptable CLI, and include real-time monitoring and rich reporting. High availability (active/active), multi-WAN, server load balancing, and VLAN can be configured to ensure maximum uptime.
And when your organization grows, the XTM 810 and 820 series are easily scalable to the 830 to accommodate more users, additional security and networking features to meet escalating demands, without costly hardware replacements. All it takes to go from an XTM 810 to an XTM 820 or XTM 830 or from the XTM 820 to the XTM 830 is a simple license key ordered through CPU Distributing, Inc. and applying it to the same XTM 8 Series box you have. The same is true for upgrading your VPN Client Licenses.
___________________________________________________________________________________
The XTM 830 is available as an:
* XTM includes Gateway Anti-Virus, Intrusion Prevention Service, spamBlocker, WebBlocker, Reputation Enabled Defense, Application Control & LiveSecurity® Plus** (upgradeable to LiveSecurity® Gold***).
^ LiveSecurity® provides Hardware warranty with advance hardware replacement,12x5 Technical Support with 4-hour response (up to 5 incidents per subscription year on the web or phone), threat alerts, Firmware/Software Updates, and Online Training & Tools.
** LiveSecurity® Plus is included with every XTM 8 Series Security Bundles (appliance bundled with the XTM Security Suite). It provides Hardware warranty with advance hardware replacement, 24x7 Technical Support with 4-hour response (up to 5 incidents per subscription year on the web or phone), threat alerts, Firmware/Software Updates, and Online Training & Tools.
***LiveSecurity® Gold includes LiveSecurity® Plus features, but with 1-hour response time and unlimited incidents per subscription year on the web or phone.
With an XTM 830 Firewall appliance your network is . . .
SECURE
- Application-layer content inspection recognizes and blocks threats that stateful packet firewalls cannot detect.
- Wide-ranging proxy protection comes from robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
- A suite of security subscriptions boost protection in critical attack areas for complete unified threat managment.
- Includes Skype blocking – the first of a new generation of built-in application-blocking capabilities.
- Delivers integrated SSL VPN for simple, anywhere-anytime network access.
FAST and EFFICIENT
-
5 Gbps firewall throughput and 1.7 Gbps VPN throughput keeps data moving fast.
-
Best XTM Security Suite throughput in its class, even with strong security enabled.
-
Gigabit Ethernet ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
-
Active/active high availability with load balancing ensures maximum network uptime.
-
Scriptable CLI supports interoperability and allows easy integration into existing infrastructure for quick, direct connection.
- Interactive, real-time monitoring and reporting – at no additonal charge – gives you an unprecedented view into network security activity, so you can take immediate preventive or corrective actions.
- Intuitive management console centrally manages all security functions.
- Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.
- Role-based access control (RBAC) allows top administrator to create custom roles for granular control.
FLEXIBLE
-
Call setup security for VoIP means you don’t need to “wire around the firewall” to take advantage of the big cost savings that VoIP can generate.
-
WAN and VPN failover increase performance, redundancy, and reliability.
-
Multiple VPN choices deliver flexibility in remote access.
-
To maximize port utilization, any of the seven ports can be configured as Internal, External, or Optional.
-
Networking features, such as transparent bridge mode and multicast over VPN, allow you to add security without needing to change existing network infrastructure.
SCALABLE
-
Can upgrade the XTM 810 and XTM 820 to the XTM 830 for more performance and capacity with a simple license key.
-
Pair with WatchGuard XCS appliance for focused emphasis on messaging and content security.
-
Add powerful security subscriptions to block spam, control dangerous and inappropriate web surfing, prevent network intrusions, and stop viruses, spyware, trojans, and other malware at the gateway.
PREPARED FOR TOMORROW'S CHALLENGES
-
No need to compromise protection for strong performance or vice versa.
-
Multi-layered, interlocking security protects the network while throughput remains high.
-
Advanced networking features ensure reliability and the flexibility to meet changing business requirements.
-
Secure remote connectivity keeps mobile workforce online and productive.
-
Intuitive, centralized management gives you the control you need to manage efficiently.
-
Security and reporting tools, included at no extra cost, support industry and regulatory compliance.
Model Comparisons & Specifications:
|
Firewall Model |
810 |
|
830 |
830-F |
| Ideal For: |
Main offices / headquarters that need strong security and a solution that offers room for growth |
Main offices / headquarters looking for fast throughput and strong security that grows with changing needs. |
Main offices / headquarters that need enterprise-grade performance & security! |
Main offices / headquarters that need enterprise-grade performance, security AND Fiber connections! |
| Model Upgradeable? |
Yes: Upgrade to a higher model within the XTM 8 Series line by purchasing and applying a simple license key. No costly hardware redeployment necessary. |
N/A |
|
Throughput and Connections |
|
Firewall Throughput* |
3 Gbps |
4 Gbps |
5 Gbps |
|
VPN Throughput* |
1 Gbps |
1.4 Mbps |
1.7 Gbps |
| Aggregate XTM Throughput* |
1 Gbps |
1.3 Gbps |
1.6 Gbps |
|
Interfaces:
10/100/1000
I/O (USB)
Serial
Fiber |
10 copper
2
1
- |
10 copper
2
1
- |
10 copper
2
1
- |
6 copper
2
1
4 Fiber |
|
Nodes Supported (LAN IPs) |
|
|
Concurrent Sessions:
(Bi-directional) |
500,000 |
750,000
|
1,000,000
|
|
VLANs (Bridging, tagging, routed mode) |
200 |
300 |
400 |
|
Local User Database |
4,000 |
5,000 |
6,000 |
|
VPN Tunnels |
|
Branch Office VPN |
1,000 |
2,000 |
6,000 |
|
Mobile VPN IPSec Incl./Max. |
600 / 2,000 |
700 / 6,000 |
|
|
Mobile VPN SSL |
1,000 |
4,000 |
6,000 |
|
PPTP |
50 |
|
Security Features |
|
Firewall |
Stateful packet inspection, deep packet inspection, proxy firewall |
|
Application Proxies |
HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3 |
|
Threat Protection |
Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats and more |
|
VoIP |
H.323. SIP, call setup & session security |
|
Security Subscriptions |
Application Control, Gateway AV, Reputation Enabled Defense, WebBlocker, spamBlocker, Intrusion Prevention Service |
|
VPN & Authentication |
|
Encryption |
DES, 3DES, AES 128-, 192-, 256-bit |
|
IPSec |
SHA-1, MD5, IKE pre-shared Key, 3rd party cert import |
|
SSL |
Thin client, Web exchange |
|
PPTP |
Server & Passthrough |
|
VPN Failover |
Yes |
|
Single Sign-On |
Transparent Active Directory Authentication. |
|
XAUTH |
Radius, LDAP, Secure LDAP, Windows Active Directory |
|
Other User Authentication |
VASCO, RSA SecurID, web-based, local, Microsoft Terminal Services and Citrix |
|
Networking |
|
Operating System |
Fireware XTM Pro |
|
Routing |
Static, DynDNS (BGP4, OSPF, RIP v1/v2), Policy-based |
| High Availability |
Active/Passive, Active/Active with load balancing |
|
NAT |
Static, dynamic, 1:1, IPSec traversal, policy-base, Virtual IP for server load balancing |
| QoS |
8 priority queues, DiffServ, modified strict queuing |
| IP Address Assignment |
Static, DynDNS, PPPoE, DHCP (server, client, relay) |
|
Other Features |
Port Independence, Transparent/drop-in mode, Multi-WAN failover, Server load balancing, Multi-WAN load balancing |
|
Management: Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch Edge updates. |
|
Management Platform |
WatchGuard System Manager (WSM) v11 or higher |
|
Alarms & Notifications |
SNMP v2/v3, Email, Management System Alert |
|
Server Support |
Logging, Reporting, Quarantine, WebBlocker, Management |
|
Web UI |
Support Windows, Mac, Linux, and Solaris OS |
|
CLI |
Includes direct connect and scripting |
|
Support & Maintenance |
|
LiveSecurity Service |
30-days initial with appliance only. Units bundled with LiveSecurity available with 1, 2, or 3-year subscription. Incudes hardware warranty, 12x5 (LiveSecurity) or 24x7 (LiveSecurity Plus) technical support with 4-hour response time, software updates, threat alerts. Option to renew for 1, 2, or 3 years. |
|
Hardware |
|
Product
Dimensions |
Wired: 16.0" x 16.9" x 1.75" (40.7 x 43.0 x 4.4 cm) |
|
Shipping Dimensions |
21.26" x 22.25" x 5.12" (54.0 x 56.6 x 13.0 cm) |
|
Shipping Weight |
19.5 lbs (8.85 Kg) |
|
AC Power |
100-240 VAC autosensing |
|
Power Consumption |
U.S. 215 Watts (max), 734 BTU (max) |
|
Rack Mountable |
1U rack mount kit included |
| Temperature |
Operating: 32° F to 113° F / 0° C to 45° C
Storage: -40° F to 158° F / -40° C to 70° C |
| Relative Humidity |
Operating: 10% to 85% non-condensing
Storage: 10% to 95% non-condensing |
| Altitude |
Operating: 0 to 9,843 ft at 95° F (3,000m at 35° C)
Storage: 0 to 15,000 ft at 95° F (4,570m at 35° C) |
| MTBF |
50,174 hours @ 77° F (25° C) |
| Certifications |
| Security |
ICSA, FIPS 140-2 and EAL4+ in progress |
| Safety |
NRTL/C, CB |
| Hazardous Substance Compliance |
WEEE, RoHS, REACH |
* Throughput rates will vary based on environment & configuration
|
|
|
|
|
APC
