The Firebox M670 firewalls are specifically engineered for midsize and distributed enterprises that are struggling to effectively and affordably secure networks in the face of explosive growth in bandwidth rates, encrypted traffic, video use, and connection speeds.
WatchGuard M670 – Up to 30 Gbps Firewall, 7 Gbps VPN, 5 Gbps UTM; Basic configuration – 8 Gb Ethernet interfaces, expansion module support.
FEATURES & BENEFITS
-
Up to 34 Gbps firewall throughput. Turn on all security scanning engines and still see up to an amazing 5.4 Gbps throughput.
-
All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA.
-
Gain critical insights about network security, from anywhere and at any time, with WatchGuard Dimension.
- Customize your port configuration to meet current needs, knowing you have the flexibility to adapt as the network evolves. This is how to future-proof your network and eliminate costly rip-and- replace scenarios.
- High availability capabilities ensure maximum uptime. Buy two Firebox M470, M570 & M670s for an active/ passive high availability pair and receive 50% off the cost of the second device.
Product Details
Quick Spec:
| PHYSICAL AND POWER SPECIFICATIONS | M670 |
| Product Dimensions | 16.85” x 12.6” x 1.73” (42.8 x 32 x 4.4 cm) |
| Shipping Dimension | 22” x 21” x 5” (55.9 x 53.3 x 12.7 cm) |
| Shipping Weight | 18 lbs (8.17 kg) |
| AC Power | 100-240 VAC Autosensing |
| Power Consumption
Rack Mountable |
U.S. 75 Watts (max), 256 BTU/hr (max)
1U rack mount kit included |
|
ENVIRONMENT |
OPERATING | STORAGE |
| Temperature |
32° F to 104° F
0° C to 40° C
|
14° F to 158° F
-10° C to 70° C
|
| Relative Humidity | 5% to 90% non-condensing |
5% to 90% non-condensing |
| Altitude | 0 to 9,843 ft at 95° F (3,000 m at 35° C) |
0 to 15,000 ft at 95° F (4,570 m at 35° C) |
| MTBF | 51,644 hours @ 77° F (25° C) | 51,644 hours @ 77° F (25° C) |
SPECIFICATIONS:
| Firebox | M670 |
| Throughput | |
| Firewall (UDP 1518) | 34 Gbps |
| Firewall (IMIX) | 11.2 Gbps |
| VPN (UDP 1518) | 7.6 Gbps |
| VPN (IMIX) | 2.6 Gbps |
| HTTPS (IPS enabled) | 4.0 Gbps |
| AntiVirus | 6.2 Gbps |
| IPS (fast/full scan) | 10.4/5.6 Gbps |
| UTM (fast/full scan) | 5.4/4.2 Gbps |
| Capacity | |
| Interfaces 10/100/1000 | 8 |
| I/O interfaces | 1 serial/2 USB |
| Concurrent connections | 8,500,000 |
| Concurrent connections (proxy) | 920,000 |
| New connections per second | 140,000 |
| VLANs | 750 |
| WSM licenses (incl) | 4 |
| TDR Host Sensors included | 250 |
| Authenticated users limit | Unrestricted |
| VPN Tunnels | |
| Branch Office VPN | 750 |
| Mobile VPN | 750 |
| Security Features | |
| Firewall | Stateful packet inspection, deep packet inspection, proxy firewall |
| Application proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3, SMTP, IMAPS, POP3S and Explicit Proxy |
| Threat protection | DoS attacks, fragmented & malformed packets, blended threats & more |
| VoIP | H.323, SIP, call setup and session security |
| Filtering options | Browser Safe Search, Google for Business |
| VPN & Authentication | |
| Cloud providers | AWS (Static/Dynamic), Azure (Static/Dynamic) |
| Encryption | AES 256-128 bit, 3DES, DES |
| IPSec | SHA-2, IKE v1/v2, IKE pre-shared key, 3rd party cert, Suite B |
| Single sign-on | Windows, Mac OS X, mobile operating systems, RADIUS |
| Authentication | RADIUS, LDAP, Windows Active Directory, VASCO, RSA SecurID, internal database, Duo, SMS Passcode |
| Management | |
| Logging and notifications | WatchGuard, Syslog, SNMP v2/v3 |
| User interfaces | Centralized console (WSM), Web UI, scriptable CLI |
| Reporting | WatchGuard Dimension includes over 100 pre-defined reports, executive summary and visibility tools |
| Certifications | |
| Security* | ICSA Firewall, ICSA IPSec VPN, CC EAL4+, FIPS 140-2 |
| Safety | NRTL/C, CB |
| Network | IPv6 Ready Gold (routing) |
| Hazardous substance control | WEEE, RoHS, REACH |
| Networking | |
| Routing | Static, Dynamic (BGP4, OSPF, RIP v1/v2), Policy-based routing |
| High Availability | Active/passive, active/active with load balancing |
| QoS | 8 priority queues, DiffServ, modified strict queuing |
| IP address assignment | Static, DHCP (server, client, relay), PPPoE, DynDNS |
| NAT | Static, dynamic, 1:1, IPSec traversal, policy-based, Virtual IP for server load balancing |
| Link aggregation | 802.3ad dynamic, static, active/backup |
| Other features | Port Independence, Multi-WAN failover and load balancing, server load balancing, host header redirection, USB modem as a dedicated interface |
Documentation: https://www.watchguard.com/wgrd-resource-center/docs/firebox-m470-m570-and-m670.
