WatchGuard Firebox Cloud Small
Extending the WatchGuard Security Perimeter to the Public Cloud
Our Price: £843.99
Inc. VAT: £1,012.79
Our Price: £1,068.83
Inc. VAT: £1,282.60
Our Price: £1,141.46
Inc. VAT: £1,369.75
Our Price: £1,826.34
Inc. VAT: £2,191.61
Our Price: £1,764.08
Inc. VAT: £2,116.90
Our Price: £3,223.77
Inc. VAT: £3,868.52
*Special Pricing for qualifying competitive trade-in products.
Our Price: £1,342.09
Inc. VAT: £1,610.51
*Special Pricing for qualifying competitive trade-in products.
Our Price: £2,770.65
Inc. VAT: £3,324.78
More pricing below, click here!
Please Note: All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
Overview:
It’s a fact - businesses are migrating services from on-premises servers into the cloud. Email servers, web servers, customer relationship management systems (CRMs), and file storage are migrating to cloud services. With so much sensitive data moving to the cloud, security is essential. WatchGuard’s Firebox Cloud allows network administrators to extend their security perimeter to protect servers running in public cloud environments.
While cloud service providers are responsible for the security of the cloud, protecting your sensitive data as it moves to and from the cloud falls to you. Under this shared responsibility model, it is crucial that administrators take every step possible to defend their data and deflect cyber criminals. WatchGuard Firebox Cloud brings the protection of WatchGuard’s leading Firebox Unified Threat Management (UTM) appliances to public cloud environments. Firebox Cloud can quickly and easily be deployed to protect servers in a public cloud from attacks such as botnets, cross-site scripting, SQL injection attempts, and other intrusion vectors.
Features & Benefits
- Quickly and easily protect VPCs from attacks such as botnets, cross-site scripting, SQL injection attempts, and other intrusion vectors
- Save time with a streamlined UI built for each cloud platform
- Simplify the process of establishing secure connections to your public cloud environment
- Increase visibility with WatchGuard’s leading network visibility solution, Dimension
- Purchase your way, with multiple purchasing options available
Enhance Your Public Cloud Security
WatchGuard Firebox Cloud brings the protection of WatchGuard's leading Firebox Unified Threat Management (UTM) appliances to public cloud environments. Firebox Cloud can quickly and easily be deployed to protect a Virtual Private Cloud (VPC) from attacks such as botnets, cross-site scripting, SQL injection attempts, and other intrusion vectors.
Available for AWS and Microsoft Azure
WatchGuard's Firebox Cloud was built specifically to run within AWS and Microsoft Azure and provides a streamlined user interface (UI) that removes elements that aren't relevant to the selected cloud environment. Firebox Cloud also simplifies the process of establishing secure connections to your public cloud environment by enabling WatchGuard-to-WatchGuard VPN tunnels.
Multiple Purchasing Options Available
WatchGuard has made it easy to get your Firebox Cloud instance up and running in the cloud by providing multiple ways to purchase. You can purchase a Bring-Your-Own-License (BYOL) from a WatchGuard Partner to ensure you benefit from the skills and expertise of a Partner you trust.
Big Data Visibility for Public Cloud Security
WatchGuard Firebox Cloud is completely compatible with WatchGuard Dimension, a cloud-ready network security visibility solution that comes standard with WatchGuard's flagship Unified Threat Management and Next Generation Firewall platform. Dimension provides a suite of big data visibility and reporting tools that instantly identify and distill key security issues and trends, and deliver valuable insights to set meaningful security policies across all your environments.
Compare Models:
Firebox Cloud Small | Firebox Cloud Medium | Firebox Cloud Large | Firebox Cloud XLarge | |
---|---|---|---|---|
Throughput and Connections | ||||
Firewall throughput1 | 2 Gbps | 4 Gbps | 8 Gbps | Unrestricted |
Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
VPN and Authentication | ||||
Branch Office VPN | 50 | 600 | 6,000 | 10,000 |
Mobile VPN with SSL | 50 | 600 | 6,000 | 10,000 |
Mobile VPN with IPSec | 50 | 600 | 6,000 | 10,000 |
Authenticated Users | 500 | 3,000 | 6,000 | Unrestricted |
1 Throughput rates will vary based on environment & configuration.
Management
- Management Platform
WatchGuard Web UI - Alarms and Notifications
SNMP v2/v3, Email, Management System Alert - Server Support
Logging, Reporting, Quarantine, WebBlocker, Management - Web UI
Supports Windows, Mac, Linux, and Solaris OS - CLI
Includes direct connect and scripting
Security
- Firewall
Stateful packet inspection, deep application inspection, proxy firewall - Application Proxies
HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323 - Intrusion Protection
Blocks DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more - Security Subscriptions
Application Control, Reputation Enabled Defense, WebBlocker, Gateway AntiVirus, Intrusion Prevention Service, APT Blocker, Data Loss Prevention, Threat Detection & Response
VPN & Authentication
- Encryption
DES, 3DES, AES 128-, 192-, 256-bit - IPSec
SHA-2, MD5, IKE/IKEv2 pre-shared Key, 3rd party cert import - SSL
Thin client - PPTP
Server & Passthrough - VPN Failover
Yes - Single Sign-On
Transparent Active Directory Auth. - XAUTH
Radius, LDAP, Windows Active Directory - Other User Authentication
VASCO, RSA SecurID, web-based, local
Networking
- Operating System
Fireware - IP Address Assignment
DHCP Client - Routing
Static, dynamic (BGP4, OSPF, RIP v1/v2), policy-based - QoS
8 priority queues, diffserv, modified strict queuing - NAT
Static, dynamic, 1:1, IPSec NAT traversal, policy-based, virtual IP for server load balancing - Other Networking
Port independence
Feature Differences:
Because Firebox Cloud is optimized to protect servers in an AWS virtual private cloud, some setup requirements, configuration options, and available features are different from other Firebox models. This section summarizes the differences between Firebox Cloud and other Fireboxes.
Administration
You must use Fireware Web UI to administer your instance of Firebox Cloud. You can use WatchGuard Dimension to monitor the traffic and security status of the networks your Firebox protects.
You cannot use a WatchGuard Management Server, Policy Manager, or Dimension to administer your instance of Firebox Cloud.
Licensing and Services
All supported features and services are included with Firebox Cloud. Firebox Cloud supports these WatchGuard subscription services:
- Application Control
- WebBlocker
- Gateway AV
- Geolocation
- Intrusion Prevention Service (IPS)
- Reputation Enabled Defense
- Botnet Detection
- Data Loss Prevention
- APT Blocker
- Threat Detection
For the Bring Your Own License option, you must activate a license key for Firebox Cloud on the WatchGuard website, and add the feature key to your instance of Firebox Cloud.
For Firebox Cloud with a Pay As You Go license, the Threat Detection and Response service does not include Host Sensor licenses.
Network Interfaces
Firebox Cloud supports two to eight interfaces. It supports one external interface (eth0), and up to seven private interfaces (eth1-eth7). All Firebox Cloud interfaces use DHCP to request an IP address. You assign an Elastic IP (EIP) address to the external interface. The internal IP addresses are assigned based on the private networks assigned to your AWS instance.
Because AWS assigns the network interface IP addresses to the instance of Firebox Cloud, you cannot configure the network interfaces in Fireware Web UI. The Network > Interfaces configuration page is not visible in Fireware Web UI for Firebox Cloud.
Default Firebox Configuration
When you launch an instance of Firebox Cloud, it automatically starts with a default configuration. For Firebox Cloud with a BYOL license, you must get a feature key to enable configuration of all features.
The Firebox Cloud Setup Wizard runs the first time you connect to Fireware Web UI. In the wizard you accept the End User License Agreement and choose new passphrases.
After you run the setup wizard, the default configuration for Firebox Cloud is different from other Firebox models in these ways:
- All interfaces use DHCP to obtain an IPv4 primary IP addresses
- Firebox Cloud allows more than one Device Administrator to connect at the same time
- You can connect to any interface for administration with Fireware Web UI
- The default policies allow management connections and pings to Firebox Cloud, but do not allow outbound traffic from private subnets through Firebox Cloud
- Licensed subscription services are not configured by default
Feature Differences
Firebox Cloud supports most policy and security features available on other Firebox models. It supports a subset of networking features appropriate for the AWS environment. For supported features, the available configuration settings are the same as for any other Firebox. Most features and options that are not supported for Firebox Cloud do not appear in Fireware Web UI.
Networking features not supported:
- Drop-in mode and Bridge mode
- DHCP server and DHCP relay
- PPPoE
- IPv6
- Multi-WAN (includes sticky connections and policy-based routing)
- Static ARP entries
- Link Aggregation
- VLAN Bridge interface
- Modem
- FireCluster
- Gateway Wireless Controller
- Mobile VPN with SSL Bridge VPN Traffic option
Policies and Security Services not supported:
- Explicit-proxy and Proxy Auto-Configuration (PAC) files
- Quotas
- spamBlocker and Quarantine Server
- Network Discovery
- Mobile Security
Authentication features not supported:
- Hotspot
- Single Sign-On (SSO)
System Administration features not supported:
- Dimension (Dimension for monitoring is supported)
- Management by WatchGuard Management Server or Policy Manager
- Logon disclaimer for device management connections
- USB drive for backup and restore
Features you cannot configure from Fireware Web UI:
- Change the logging settings for default packet handling options
- Edit the name of an existing policy
- Add a custom address to a policy
- Use a host name (DNS lookup) to add an IP address to a policy
- Add or edit a secondary PPPoE interface
In Fireware Web UI, it is possible to configure some features, such as IPv6 routes, that are not supported for Firebox Cloud. This does not enable the unsupported feature, and does no harm.
Fireware Web UI Differences
For Firebox Cloud, some pages in Fireware Web UI includes information about the Firebox Cloud EC2 instance.
The Front Panel DashboardFor Firebox Cloud, Front Panel dashboard includes this information about the Firebox Cloud EC2 instance:
- Instance ID
- Instance Type
- Availability Zone
The VM Information System Status page in Fireware Web UI includes more details about the Firebox Cloud EC2 instance. To go to the VM Information page, select System Status > VM Information.
The VM Information page includes this information:
- Instance ID
- Instance Type
- Availability Zone
- Public Hostname
- Public IPv4 Address
- Security Group
- Public Key
The Interfaces Dashboard
The Interfaces Dashboard page in Fireware Web UI includes information about the AWS virtual network interfaces associated with each Firebox Cloud interface.
The Interfaces page includes this information:
- Interface ID - The elastic network interface (eni) ID
- Public Hostname - The public DNS host name for the external interface
- Public IPv4 address - The public IPv4 IP address for the external interface
- Local Hostname - The private DNS host name for the network interface
- Device Number - The interface number
- VPC ID - The ID of the VPC where the instance of Firebox Cloud is deployed
- Link Status - The link status of each interface (Up or Down)
- DNS Servers - The list of the DNS servers that generate the IP address for the external interface
Use Cases:
The subsequent use cases describe some of the ways Firebox Cloud can add security to your AWS virtual networks.
Protect Servers Deployed on AWS
To provide protection to one or more virtual servers that are accessible from the Internet, you can install a Firebox Cloud instance. Your instance of Firebox Cloud is then the gateway for inbound connections to your servers from the internet. You configure policies and security services on your instance of Firebox Cloud to control traffic to your virtual servers.
Branch Office VPN Gateway
You can configure your Firebox Cloud as a branch office VPN (BOVPN) gateway endpoint so you can maintain a secure VPN connection between your AWS network resources and other networks protected by a Firebox or compatible VPN gateway endpoint. Firebox Cloud supports all the same VPN features as other Firebox models.
Mobile VPN Gateway
You can also enable Firebox Cloud to accept VPN connections from SSL, IPSec, and L2TP mobile VPN clients, and configure policies to control user and group access to your protected AWS network resources.
Please note: Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.
* Firebox T10-D (DSL) is available in Europe & Australia. Supports ADSL2+VDSL2/ ADSL on WAN port with integrated modem.
**Not available on Firebox T10, T10-W, T10-D
Documentation:
Download the WatchGuard Firebox Cloud Datasheet (.PDF)
Pricing Notes:
- All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
- Pricing and product availability subject to change without notice.
Our Price: £843.99
Inc. VAT: £1,012.79
Our Price: £1,068.83
Inc. VAT: £1,282.60
Our Price: £1,141.46
Inc. VAT: £1,369.75
Our Price: £1,826.34
Inc. VAT: £2,191.61
Our Price: £1,764.08
Inc. VAT: £2,116.90
Our Price: £3,223.77
Inc. VAT: £3,868.52
*Special Pricing for qualifying competitive trade-in products.
Our Price: £1,342.09
Inc. VAT: £1,610.51
*Special Pricing for qualifying competitive trade-in products.
Our Price: £2,770.65
Inc. VAT: £3,324.78
Our Price: £1,149.33
Inc. VAT: £1,379.20
Our Price: £2,753.04
Inc. VAT: £3,303.65
Our Price: £542.21
Inc. VAT: £650.65
Our Price: £1,298.24
Inc. VAT: £1,557.89
Our Price: £282.56
Inc. VAT: £339.07
Our Price: £672.03
Inc. VAT: £806.44
Our Price: £133.64
Inc. VAT: £160.37
Our Price: £324.56
Inc. VAT: £389.47
Our Price: £282.56
Inc. VAT: £339.07
Our Price: £282.56
Inc. VAT: £339.07
Our Price: £282.56
Inc. VAT: £339.07
Our Price: £282.56
Inc. VAT: £339.07
Our Price: £282.56
Inc. VAT: £339.07
Our Price: £175.64
Inc. VAT: £210.77
Our Price: £423.84
Inc. VAT: £508.61
*Special Pricing with the Trade Up Program
Our Price: £1,487.36
Inc. VAT: £1,784.83
*Special Pricing with the Trade Up Program
Our Price: £2,943.60
Inc. VAT: £3,532.32
*Special Pricing with the Trade Up Program
Our Price: £885.50
Inc. VAT: £1,062.60
*Special Pricing with the Trade Up Program
Our Price: £1,573.84
Inc. VAT: £1,888.61
Our Price: £263.47
Inc. VAT: £316.16
Our Price: £630.03
Inc. VAT: £756.04