CyberIndexBeta

WatchGuard Firebox

WatchGuard TechnologiesNetwork Firewall (primary)Compare with others in Network Firewall

Product

On-premises firewall/UTM appliance line managed via WatchGuard Cloud. The Appliance Sizing Tool recommends the Firebox model that best fits your network today and provides headroom to scale as performance and security demands grow. FireCloud Gateway for Firebox instantly extends secure access to remote users and private applications without the complexity of legacy VPN deployments. Whether you’re securing a small office, a distributed enterprise, or cloud infrastructure, our next-generation firewall (NGFW) lineup includes tabletop and rackmount appliances, virtual FireboxV solutions, and Firebox Cloud for seamless network protection. It is available as a hardware appliance.

Current Version
2026.4
Product Page
watchguard.com/…/wgrd-products
Market
EnterpriseSMB
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-28

Vendor

WatchGuard has sold network security appliances from Seattle since 1996, and sells them almost entirely through managed service providers rather than direct — around 25,000 of them, with partners in 179 countries and roughly 1,250 staff. It is privately held, owned by the investment firm Vector Capital. The firewall is the core product: WatchGuard Firebox, a line of appliances from small-office boxes to rack-mounted units, managed from WatchGuard Cloud, with WatchGuard AuthPoint for multi-factor authentication beside it. Endpoint security is a more recent and acquired business. WatchGuard bought Panda Security in 2020, and the products it sells today under the names WatchGuard EDR, WatchGuard EPDR and WatchGuard Endpoint Security 360 descend from Panda's endpoint technology. Both brands appear in this index, and their laboratory results come from the same underlying engine — worth knowing before reading a WatchGuard score and a Panda score as independent evidence. Vendor page →

Website
watchguard.com
Country
United States
Headquarters
Seattle, United States
Year Established
1996
Customers
1.5M organisations
Users
10M devices protected
Revenue
$252.1M (2022)

Platforms

Hardware Appliancenative

Target Market

Enterprise secondarySMB primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)Not known
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANnative
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

1 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 2026.4platform not recordedreleased 2026-10-27

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

NetSecOPEN Network Security Test

Tested: Firebox T402021-04-16lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

All results

NetSecOPEN Network Security TestNetSecOPEN — Firebox T40, Fireware 12.6.4 (UNH-IOL)2021-04-16
HTTPS Throughput (inspected): 0.197 GbpsHTTPS Connections/s: 101
NetSecOPEN Network Security TestNetSecOPEN — Firebox M5800, Fireware 12.6.2 (UNH-IOL)2020-12-06
HTTPS Throughput (inspected): 5 GbpsHTTPS Connections/s: 1653

Certifications

Common Criteria5 expiredshow 5 certificates ▾
FIPS 140-32 activeshow 2 certificates ▾
NetSecOPEN CertificationCertified2 activeshow 2 certificates ▾

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 2026.4evidence
  • 2026-10-13New versionNew version: 2026.3.2evidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedSD-WAN: built inevidence
  • 2026-10-07Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-07Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-06Capability addedCentral Management Console: optional moduleevidence
  • 2026-10-06Capability addedApplication Control: optional moduleevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): optional moduleevidence
  • 2026-10-06Capability addedVPN Gateway: built inevidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertification expired: Common Criteria (EAL4)evidence
  • 2026-10-06Certification addedCertification expired: Common Criteria (EAL2)evidence
  • 2026-10-06Certification addedCertification expired: Common Criteria (EAL4)evidence
  • 2026-10-06Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-02Certification addedCertification expired: Common Criteria (EAL4)evidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20New versionNew version: Firewareevidence
  • 2026-09-20Platform addedRuns on Hardware Applianceevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence
  • 2026-09-19Product updatedAlso sold to: Enterpriseevidence
  • 2026-09-19Product updatedSold to: SMBevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.