Call a Specialist Today! 020 3958 0663
Free Shipping! Free Shipping!

WatchGuard XTM 520 Series Firewall Appliance
Next-Generation Firewall for Small to Midsized Businesses

Trade Up Program

Sorry, this unit has been discontinued and is no longer available for purchase, replace by Firebox M270, M370, M470, M570. If you currently own this Model, please click here to participate in the WatchGuard Trade-Up Program! You can also purchase available renewals below. End of Sale (EOS): 03 Dec 2012. End of Life (EOL) for the XTM 520 is 03 Dec 2017 - you will not be able receive support after this date even with a 1 Year contract.

Live Demo Box, Click here!

WatchGuard XTM 520 Series Overview:

WatchGuard XTM 5 Series appliances deliver a new class of performance driven security for growing mid-size businesses. The 5 Series offers up to 2.3 Gbps firewall throughput and security features including full HTTPS inspection and VoIP support. Organizations that want room to easily scale their network security can move up to greater performance, more users, and additional security and networking features to meet escalating demands, without costly hardware replacements

Why buy an all-in-one solution?

An all-in-one XTM network security solution integrates complete protection while slashing the time and cost associated with managing multiple single-point security products. All security capabilities work together for a holistic, comprehensive approach to network protection. Your IT staff has more time to focus on other areas of network administration, and your business saves money on support and hardware costs.

With a WatchGuard® XTM 5 Series solution, your network is:

Secure:

  • Application-layer content inspection recognizes & blocks threats that stateful packet firewalls cannot detect.
  • Wide-ranging proxy protection comes from robust security on HTTP, HTTPS, FTP, SMTP, POP3, DNS, TCP/UDP.
  • A suite of security subscriptions boosts protection in critical attack areas for complete threat management.
  • Security subscriptions boost protection in critical attack areas for complete unified threat management.
  • Provides integrated SSL VPN for simple, anywhere-anytime network access.
  • Includes Skype blocking – first of the next generation of built-in application-blocking capabilities.

Efficient:

  • Up to 2.3 Gbps rewall throughput and up to 750 Mbps VPN throughput keep data moving.
  • Best UTM throughput in its class, even with strong security enabled.
  • Gigabit Ethernet ports support high-speed LAN backbone infrastructures and gigabit WAN connections.
  • Active/active high availability with load balancing ensures maximum network uptime.
  • Scriptable CLI supports interoperability and allows easy integration into existing infrastructure.
  • Interactive, real-time monitoring and reporting – at no additional charge – give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
  • Intuitive management console centrally manages all security functions.
  • Role-based access control (RBAC) allows lead administrators to create custom roles for granular control.
  • Drag-and-drop Branch Office VPN setup – three clicks and your remote office is connected.

Flexible:

  • Call setup security for VoIP means you don’t need to “wire around the firewall” to take advantage of the big cost savings that VoIP can generate.
  • WAN and VPN failover increase performance, redundancy, and reliability.
  • Multiple VPN choices deliver flexibility in remote access.
  • To maximize port utilization, any of the seven ports can be con gured as Internal, External, or Optional.
  • Networking features, such as transparent bridge mode and multicast over VPN, allow you to add security without needing to change existing network infrastructure.

Scalable:

  • Upgrade to a higher model within the line for more performance and capacity with a simple license key.
  • Pair with WatchGuard XCS appliance for focused emphasis on messaging and content security.
  • Move up to the “Pro” version of the Fireware XTM operating system for advanced networking features, including active/active high availability, VLAN support, multi-WAN and server load balancing, dynamic routing, and QoS.
  • Add powerful security subscriptions to block spam, control dangerous and inappropriate web surfing, prevent network intrusions, and stop viruses, spyware, trojans, and other malware at the gateway.

Prepared for Tomorrow's Challenges:

  • No need to compromise protection for strong performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.
  • Advanced networking features ensure reliability and the exibility to meet changing business requirements.
  • Secure remote connectivity keeps mobile workforce online and productive.
  • Security and reporting tools, included at no extra cost, support industry and regulatory compliance.

Features:

Fast 2.3 Gbps throughputFast 2.3 Gbps throughput
The XTM 5 Series puts other appliances in its class to shame with up to 2.3 Gbps for firewall throughput and 800 Mbps XTM throughput, even with security services and deep packet inspection enabled. The 5 Series delivers formidable per-formance for exceptional value.

Faster, safe web surfingFaster, safe web surfing
Add a simple subscription to Reputation Enabled Defense to your XTM solution and your organization will have faster web performance and even stronger security - with no additional hardware to buy.

3 ways to manage your appliance3 ways to manage your appliance
Now you have the power to choose how you manage your WatchGuard appliance including, WatchGuard System Manager, the command line interface, and a web UI for access from anywhere, anytime.

Fireware XTM includedFireware XTM included
Our newest Fireware XTM OS increases security and networking capabilities. When you're ready, it's easy to upgrade to the Pro version of the OS for even more features.

Reporting in the BrowserReporting in the Browser
Provides a web-based, customizable reports portal designed to be hosted with direct Internet access for easy report selection and viewing.

Maximum network uptimeMaximum network uptime
With a Fireware Pro OS upgrade comes high availability capabilities - active/active and active/passive - to ensure your network is always up and running.

Application ControlApplication Control
Control the use of Web 2.0 and other applications on your network for tighter security, better use of bandwidth, and greater productivity.

Self Health MonitoringSelf Health Monitoring
Health monitoring for the WSM logging and reporting system helps minimize disruptions and maintain high service levels in these critical functions.

Remote/External Log Server/Report Server DBRemote/External Log Server/Report Server DB
MSSPs and larger organizations can now take advantage of the ability to isolate logging and reporting on a separate PC for high performance, scalability, and redundancy.

An investment in your securityAn investment in your security
Model upgradability ensures your network security investment is protected with the ability to easily upgrade its performance, capacity, and security capabilities as business requirements change and new threats emerge.

Green securityGreen security
Our firewalls are designed with efficiency in mind, consuming very little energy. Compare our power consumption to other security products and see how WatchGuard can make your data center more energy efficient. Green up your network with WatchGuard.

 

Specifications:

WatchGuard Model XTM 505 XTM 510 XTM 520 XTM 530
Throughput & Connections
Firewall Throughput* 1.5 Gbps 1.8 Gbps 2.2 Gbps 2.6 Gbps
VPN Throughput* 210 Mbps 350 Mbps 550 Mbps 750 Mbps
AV Throughput* 520 Mbps 625 Mbps 760 Mbps 900 Mbps
IPS Throughput* 500 Mbps 600 Mbps 735 Mbps 870 Mbps
XTM Throughput* 330 Mbps 395 Mbps 480 Mbps 570 Mbps
Interfaces 10/100 1 copper 1 copper 1 copper 1 copper
Interfaces 10/100/1000 6 copper 6 copper 6 copper 6 copper
I/O Interfaces 1 Serial / 2 USB 1 Serial / 2 USB 1 Serial / 2 USB 1 Serial / 2 USB
Nodes Supported (LAN IPs) Unrestricted Unrestricted Unrestricted Unrestricted
Concurrent Connections 40,000 50,000 100,000 350,000
New connections per second 12,000 12,000 12,000 12,000
VLANs bridging, tagging, routed mode 75 75 75 75
WSM licenses (incl) 4 4 4 4
Local user database 500 500 1,000 2,500
VPN Tunnels (included / Maximum)
Branch Office VPN 65 75 200 600
Mobile VPN IPSec 5 / 75 25 / 100 50 / 300 400 / 1,000
Mobile VPN SSL 1 / 65** 1 / 75** 1 / 300** 1 / 600**
PPTP 50 50 50 50
Security Features
Firewall Stateful packet inspection, deep packet inspection, proxy firewall
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3
Threat Protection Blocks spyware, DoS attacks, fragmented packets, malformed packets, blended threats, and more
VoIP H.323. SIP, call setup and session security
Security Subscriptions Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Intrusion Prevention Service, Reputation Enabled Defense
VPN & Authentication
Encryption DES, 3DES, AES 128-, 192-, 256-bit
IPSec SHA-1, IKE pre-shared key, 3rd party cert
VPN Failover Yes
SSL Thin client, Web exchange
PPTP Server and Passthrough
Single Sign-on Transparent Active Directory Authentication
XAUTH Radius, LDAP, Windows Active Directory
Other user authentication VASCO, RSA SecurID, web-based, local
Management
Management Platform WatchGuard System Manager (WSM)
Alarms and Notifications SNMP v2/v3, Email, Management System Alert
Server Support Logging and Reporting with Server Health status, Quarantine, WebBlocker, Management
Web UI Supports Windows, Mac, Linux, and Solaris OS
Command Line Interface Includes direct connect and scripting
Standard Networking
QoS 8 priority queues, DiffServ, modified strict queuing
IP Address Assignment Static, DynDNS, PPPoE, DHCP (server, client, relay)
Certifications
Security ICSA, FIPS 140-2 and EAL4+ in progress
Safety NRTL/C, CB
Network IPv6 Ready Gold (routing)
Hazardous Substance Control WEEE, RoHS, REACH
Dimensions and Power
Product Dimensions 11.25" x 17" x 1.75" (28.6 x 43.2 x 4.5 cm)
Shipping Dimensions 18" x 21" x 5.25" (45.7 x 53.3 x 13.3 cm)
Shipping Weight 16.1 lbs (7.3 Kg)
AC Power 100-240 VAC Autosensing
Power Consumption U.S. 50 Watts (max), 171 BTU (max)
Rack Mountable 1U rack mount kit included
Environment
  Operating Storage
Temperature 32° F to 104° F (0° C to 40° C) -40° F to 158° F (-40° C to 70° C)
Relative Humidty 10% to 85% non-condensing 10% to 95% non-condensing
Altitude 0 to 9,843 ft at 95° F (3,000 m at 35° C) 0 to 15,000 ft at 95° F (4,570 m at 35° C)
MTBF 51,644 hours @ 77° F (25° C) 51,644 hours @ 77° F (25° C)


Powered by Fireware® XTM and XTM Pro***

As network requirements become more complex, it's easy to upgrade to the Pro version of the OS with a simple software license key.

Networking Features Fireware XTM Fireware XTM Pro
Routing Static, dynamic routing (RIP) Dynamic (BGP4, OSPF, RIP v1/2), Policy-base
High Availability - Active/passive, active/active with load balancin
NAT Static, dynamic, 1:1, IPSec traversal, policy-based Virtual IP for server load balancing
SSL 1 SSL tunnel available Maximum number of SSL tunnels available
Other Features Port Independence, transparent/drop-in mode, multi-WAN failover Server load balancing, multi-WAN load balancing
* Throughput rates will vary based on environment & configuration
** Maximum number available with upgrade to Fireware XTM Pro
*** The XTM 515, XTM 525, XTM 535 and XTM 545 Series ship with Fireware XTM Pro installed.

Model Comparision:

WatchGuard Model XTM 505 XTM 510 XTM 520 XTM 530
Ideal For Main offices that need performance-driven security that's priced right Main offices / headquarters that want security with fast throughput and room to grow Main offices / headquarters looking for enterprise-grade performance and security in an all-in-one solution Main offices / headquarters that require enterprise-grade performance and powerful security with flexible, centralized management
Hardware
Model Upgradeable N/A
Interfaces 6: 10/100/1000 and 1:10/100 6: 10/100/1000 and 1:10/100 6: 10/100/1000 and 1:10/100 6: 10/100/1000 and 1:10/100
Security
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only N/A N/A N/A N/A
User Authentication with transparent Windows authentication
Performance
Firewall Throughput** 1.5 Gbps 1.8 Gbps 2.2 Gbps 2.6 Gbps
VPN Throughput** 210 Mbps 350 Mbps 550 Mbps 750 Mbps
AV Throughput** 520 Mbps 625 Mbps 760 Mbps 900 Mbps
IPS Throughput** 500 Mbps 600 Mbps 735 Mbps 870 Mbps
XTM Throughput** 330 Mbps 395 Mbps 480 Mbps 570 Mbps
Concurrent Sessions*
(bi-directional)
40,000 50,000 100,000 350,000
VPN Tunnels
Branch Office VPN Tunnels (Max.) 65 75 200 600
Mobile VPN with SSL (Incl/Max) 1 / 65 1 / 75 1 / 300 1 / 600
Mobile VPN with IPSec Client Licenses (Bundled) 5 25 50 400
Mobile VPN with IPSec Tunnels (Max.) 75 100 300 1,000
VPN Authentication
Management
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates. 4-device WatchGuard System Manager license included with purchase.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN 75 75 75 75
Policy-Based Routing Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro
WAN Failover
Multi-WAN Load Balancing Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro
Server Load Balancing Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro
Traffic Management/QoS
High Availability Active/Active or Active/Passive Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro
Dynamic Routing Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro Optional with Fireware XTM Pro
VoIP (SIP and H.323)Support
Networking Features
Application Control Included with Security Bundle Optional Optional Optional
Reputation Enabled Defense Included with Security Bundle Optional Optional Optional
spamBlocker with Virus Outbreak Detection Included with Security Bundle Optional Optional Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS) Included with Security Bundle Optional Optional Optional
WebBlocker with HTTPS URL filtering Included with Security Bundle Optional Optional Optional
LiveSecurity® Service 1-year and 3-year subscriptions available
*Concurrent sessions here represent the number of bi-directional connections.
**Throughput rates will vary based on environment & configuration.

Product View:

WatchGuard XTM 5 Series - Product View

Options & Upgrades:

WatchGuard Security Suite

Turn your WatchGuard XTM security appliance into a complete threat management solution with a WatchGuard Security Suite.

Application ControlApplication Control
Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth.

WebBlockerWebBlocker
WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks.

Gateway AntiVirusGateway AntiVirus
Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time.

LiveSecurity ServiceLiveSecurity Service
LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.

Reputation Enabled DefenseReputation Enabled Defense
Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead.

spamBlockerspamBlocker
spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry.

Intrusion Prevention ServiceIntrusion Prevention Service
Intrusion Prevention Serviceworks hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.

Documentation:

Download the WatchGuard XTM 5 Series Datasheet (PDF).

It appears you don't have a PDF plugin for this browser. No biggie... you can click here to download the PDF file.

Pricing Notes:

WatchGuard Products
XTM 520 Series XTM Pro Upgrades
Mobile VPN (IPSec) License Pack for XTM Series - 250 Users
#WG018435
Our Price: £4,016.47
Inc. VAT: £4,819.76
WatchGuard Remote Installation Service
WatchGuard Remote Installation Service
#WG001101
Our Price: £537.72
Inc. VAT: £645.26
Accessories
Rack Mount Kit for XTM 8 and 5 Series
*Please Note - new appliance purchases include this kit.
#WG8544
Our Price: £16.57
Inc. VAT: £19.88
Cable Kit for XTM 8 and 5 Series
*Please Note - new appliance purchases include this kit.
#WG8543
Our Price: £20.71
Inc. VAT: £24.85