WatchGuard Firebox T125-W Wireless Tabletop Firewall for Branch Offices
Up to 2.28 Gbps firewall throughput, Wi-Fi 7 built in, 4x 1Gb and 1x 2.5Gb ports, 10 Branch Office VPNs

WatchGuard Firebox T125-W

Security Services

A stateful firewall is simply not enough anymore. Every business needs a full arsenal of scanning engines to protect their network. WatchGuard Firebox is a Unified Security Platform that protects your entire network from intrusions, phishing attempts, malware, ransomware and more.

Protect Your Network with Security Services

A Package for Every Level of Security

All WatchGuard appliances come standard with a Support license that includes full VPN capabilities and built-in SD WAN. Looking for more? Choose our Basic or Total Security Suite:

Basic Security Suite

The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, antivirus, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as our standard 24x7 support.

Total Security Suite

The Total Security Suite includes all services offered with the Basic Security Suite plus AI-powered malware protection, enhanced network visibility, endpoint protection, Cloud sandboxing, DNS filtering, and the ability to take action against threats right from WatchGuard Cloud, our network visibility platform.

Get it all with the Total Security Suite

Find out which fits the needs of your network. Designed for maximum protection against sophisticated threats, our security services are packaged to take the guesswork out of network security.

	Support	Basic Security	Total Security
Stateful Firewall
VPN
SD-WAN
Access Portal*
Intrusion Prevention Service
Application Control
WebBlocker
spamBlocker
Gateway AntiVirus
Reputation Enabled Defense
Network Discovery
APT Blocker
Threat Detection & Response
DNSWatch
IntelligentAV**
WatchGuard Cloud Visibility Data Retention		1 Day	30 Days
Support	Standard (24x7)	Standard (24x7)	Gold (24x7)

*Not available on Firebox T15/T15-W, T20/T20-W, or T35-R. Total Security Suite required for M270, M370, M470, M570, M670, FireboxV and Firebox Cloud
**Not available on Firebox T15/T15-W, T20/T20-W, or T35-R

Support Program

24x7 Technical Support
No matter which WatchGuard network security appliance you buy, your support needs will be covered 24 x 7 by our in-house team of highly trained technical experts.

Hardware Warranty
WatchGuard’s hardware warranty includes advance hardware replacement to ensure that a replacement appliance is shipped immediately if a fault is identified.

Software Updates
WatchGuard continually enhances the capabilities of its operating system software and services. Your Support license gives you access to all new releases at no cost.

Download the WatchGuard Total Security Datasheet (PDF).

Download the WatchGuard Support Program Datasheet (PDF).

WatchGuard Products

WatchGuard Firebox T125-W with Basic Security Suite

Includes: Appliances (Basic Security Suites include Standard Support(24x7), Application Control, WebBlocker, spamBlocker, Gateway Antivirus, Intrusion Prevention Service, Reputation Enabled Defense, and Network Discovery)

WatchGuard Firebox T125-W with 1 Year Basic Security Suite

#T125-W
List Price: ~~$1,180.00~~
Our Price: Request A quote

Get a Quote

More pricing below, click here!

Please Note: All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.

Overview:

HIGH_SPEED SECURITY, ESPECIALLY DESIGNED FOR REMOTE SITES

Engineered for today’s agile workforces, the T125 combines advanced threat protection with SD-WAN compatibility, making it ideal for small sites, branch offices, and remote locations. It offers enterprise-level networking in a compact design, equipped with dualband SMA antennas for wireless flexibility and 2.5 Gbps-capable interfaces for high-speed connectivity. With all logging and reporting features included at no additional cost, users gain access to over 100 dashboards and reports, including PCI and HIPAA standards.

COMPLEXITY-FREE SECURITY FOR MODERN NETWORKS

Firewall security is about more than just speeds and feeds. Whether you're working in hybrid or cloud-native setups, our Firebox models offer more than basic network functions. The Firebox T Series is designed specifically for the customer’s network and backed by trusted MSP experts. The result: quicker deployment, better performance, and advanced AI-driven threat detection.

Precise and powerful performance for modern SMBs

AI-powered intelligent AV and APT blocking with sandboxing

Sturdy metal case with sustainable, reduced-waste design

Specifications:

WatchGuard Firebox T125-W-W	Specifications
THROUGHPUT¹
UTM (full scan)²	510 Mbps
Firewall (IMIX)	660 Mbps
VPN (IMIX)	480 Mbps
HTTPS Content Inspection (IPS enabled)³	270 Mbps
Antivirus	88 Mbps
IPS (full scan)	725 Mbps
Firewall (UDP 1518)	2.28 Gbps
VPN (UDP 1518)	1.44 Gbps
CAPACITY
Interfaces	1 x 2.5 GbE, 4 x 1 GbE
I/O interfaces	1 Serial/2 USB-A 3.2
Concurrent connections	3,850,000
Concurrent connections (Proxy)	125,000
New connections per second	26,500
VLANs	Unlimited
WSM licenses (incl)	0
TDR Host Sensors included	5
VPN TUNNELS
Branch Office VPN	10
Mobile VPN	10
SECURITY FEATURES
Firewall	Stateful packet inspection, TLS decryption, proxy firewall
Application proxies	HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS, and Explicit Proxy IMAPS and Explicit Proxy
Threat protection	DoS attacks, fragmented & malformed packets, blended threats
Filtering options	Browser Safe Search, Google for Business
VPN
Site to Site VPN	IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke
Remote Access VPN	IKEv2, IPSec, L2TP, TLS
VISIBILITY
Logging and notifications	WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3
Reporting	WatchGuard Cloud includes over 100 pre-defined reports, executive summary and visibility tools
CERTIFICATIONS
Security	Pending: CC, FIPS 140-3
Safety	NRTL/CB
Network	IPv6 Ready Gold (routing)
Hazardous substance control	WEEE, RoHS, REACH
NETWORKING
SD-WAN	Multi-WAN failover, dynamic path selection, jitter/loss/latency measurement
Dynamic Routing	RIP, OSPF, BGP
High Availability	Active/passive, active/active
QoS	802.1Q, DSCP, IP Precedence
Traffic Management	By policy or application
IP address assignment	Static, DHCP (server, client, relay), PPPoE, DynDNS
NAT	Static, dynamic, 1:1, IPSec traversal, policy-based
Link aggregation	802.3ad dynamic, static, active/backup

PHYSICAL AND POWER SPECIFICATIONS
Product Dimensions	9” x 8.25” x 1.7” (230 x 210 x 44mm)
Shipping Dimensions	12.2” x 9.8”x 3.9” (311 x 250 x 98 mm)
Product Weight	T125: 2.92 lbs (2.07 kg) T125-W: 3.11 lbs (2.17 kg)
Shipping Weight	T125: 4.52 lbs (2.05 kg) T125-W: 4.80 lbs (2.18 kg)
Power Consumption	25 Watts (Max)
Power	100-240 VAC Autosensing
MTBF	701,687 hours
ENVIRONMENT	OPERATING	STORAGE
Temperature	32° F to 104° F (0° C to 40° C)	-40° F to 158° F (-40° C to 70° C)
Relative Humidity	10% to 85% non-condensing	10% to 85% non-condensing
Altitude	0 to 9,843 ft at 95° F (3,000 m at 35° C)	0 to 15,000 ft at 95° F (4,570 m at 35° C)

Note:

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration. Max firewall throughput tested via direct connection using 1518 byte UDP frame based on RFC 2544 methodology. All testing performed on Fireware version 12.6.
UTM throughput is measured using HTTP traffic with AV, IPS, and Application Control enabled, and does not account for all security services available on the appliance.

Supports and Services:

Strong Security at Every Layer

Uniquely architected to be the industry’s smartest, fastest, and most effective network security products, WatchGuard solutions deliver in-depth defenses against advanced malware, ransomware, botnets, trojans, viruses, drive-by downloads, data loss, phishing, and much more.

	Standard Support	Basic Security	Total Security
Stateful Firewall
VPN
SD-WAN
Access Portal*
Intrusion Prevention Service (IPS)
Application Control
WebBlocker (URL/Content Filtering)
spamBlocker (Anti-Spam)
Gateway AntiVirus
Reputation Enabled Defense
Network Discovery
APT Blocker
DNSWatch
IntelligentAV**
ThreatSync (XDR)
EDR Core
WatchGuard Cloud Log Data Retention Report Data Retention		90 Days 1 Day	365 Days 30 Days
Support	Standard (24x7)	Standard (24x7)	Gold (24x7)

*Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R. Total Security Suite required for M270, M370, M470, M570, M670, FireboxV and Firebox Cloud.
**Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R.

Documentation:

Download the WatchGuard Firebox T125-W Datasheet (PDF).

Pricing Notes:

All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
Pricing and product availability subject to change without notice.