WatchGuard XTM 2520 Series Next-Generation Firewall
Fully Extensible, Enterprise-Class Protection & Productivity Safeguards

Features:

Best-of-Breed Security

• Application-layer content inspection recognizes and blocks threats that stateful packet firewalls cannot detect.
• Powerful subscription-based security services boost protection in critical attack areas for multiple layers of defense. By partnering with leading technology providers, WatchGuard is able to integrate best-of-breed security components into one UTM platform for stronger security at big cost savings.
• Application Control keeps unproductive, inappropriate, and dangerous applications off limits.
• Intrusion Prevention Service delivers in-line protection from malicious exploits, including buffer overflows, SQL injections, and cross-site scripting attacks.
• WebBlocker controls access to sites that host objectionable material or pose security risk.
• Gateway AntiVirus (GAV) scans traffic on all major protocols to stop threats.
• spamBlocker delivers continuous protection from unwanted and dangerous email.
• Reputation Enabled Defense ensures faster, safer web surfing with cloud-based reputation
• Data Loss Prevention (DLP) automatically inspects data in motion for corporate policy violations.

Easy to Manage

• WatchGuard Dimension™ is a public and private cloud-ready security visibility solution that instantly turns raw data into security intelligence.
• Interactive, real-time monitoring and reporting - at no additional charge - give an unprecedented view into network security activity so you can take immediate preventive or corrective actions.
• Intuitive management console centrally manages all security functions.
• Fast, secure remote configuration and rapid deployment tools make it easy for large distributed enterprises and managed service providers to grow their businesses.
• Extend best-in-class UTM security to the WLAN by adding WatchGuard’s Wireless Access Points.
• Drag-and-drop Branch Office VPN setup - three clicks and your remote office is connected.

Highest UTM Performance in the Industry

• Firewall throughput of up to 35 Gbps to keep traffic moving.
• Best UTM throughput in its class - up to 10 Gbps - even with strong security enabled.
• No need to compromise protection for fast performance or vice versa. Multi-layered, interlocking security protects the network while throughput remains high.
• WAN and VPN failover provide redundancy for increased reliability.
• XTM 1525-RP and XTM 2520 models include four 10 Gb fiber ports, with 850 nm multimode SFP+ transceiver modules included for each interface.

Detailed Specifications:

*Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.

Product Comparison:

*Concurrent sessions here represent the number of bi-directional connections.

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration.

Options & Upgrades:

Security Subscriptions

Data Loss Prevention (DLP) XTM DLP prevents data breaches by scanning text and common file types to detect sensitive information. A predefined library of over 200 rules for 18 countries makes creating and updating corporate data policies as easy as point and click.	Application Control Application Control enables IT administrators to monitor and control access to web and business applications to enforce policy, and protect productivity and network bandwidth.
Reputation Enabled Defense Reputation Enabled Defense delivers a powerful, cloud-based URL reputation service that protects web users from malicious web pages, while dramatically improving web processing overhead.	WebBlocker WebBlocker content and URL filtering subscription helps eliminate legal liabilities resulting from inappropriate web surfing, while increasing employee productivity and protection from web-based attacks.
spamBlocker spamBlocker is the best in the industry at distinguishing legitimate communication from spam outbreaks in real time, blocking nearly 100% of unwanted emails and the viral payloads they carry.	Gateway AntiVirus Gateway AntiVirusis a fully integrated, signature-based security subscription that identifies and blocks known spyware, viruses, trojans, and blended threats in real time.
Intrusion Prevention Service Intrusion Prevention Serviceworks hand-in-hand with your WatchGuard firewall's application layer content inspection to provide real-time protection from threats, including SQL injections, cross-site scripting, and buffer overflows.	LiveSecurity Service LiveSecurity Service, a high-value support and maintenance program that you activate online when you register your product. LiveSecurity delivers technical support, hardware warranty with advance hardware replacement, the latest software updates, and threat alerts.

Documentation:

Download the XTM 1520, 1525, and 2520 Series Datasheet (PDF).