Compare XTM 800 Series Models

WatchGuard® Model WatchGuard XTM 850 WatchGuard XTM 860 WatchGuard XTM 870
Ideal For Main offices/headquarters that need strong security and a solution that offers room for growth. Main offices/headquarters looking for fast throughput and strong security that grows with changing needs. Main offices/headquarters that need enterprise-grade performance & security
Hardware
Model Upgradeable to XTM 860, 870 to XTM 870 N/A
Interfaces 14: 10/100/1000 14: 10/100/1000 14: 10/100/1000***
Security
Application Proxies HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323 HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323 HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)  Yes  Yes  Yes
Wireless Models Only N/A N/A N/A
User Authentication with transparent Windows authentication  Yes  Yes  Yes
Performance
Firewall Throughput 8 Gbps 11 Gbps 14 Gbps
VPN Throughput 8 Gbps 8 Gbps 10 Gbps
AV Throughput 4 Gbps 5.5 Gbps 7 Gbps
IPS Throughput 5 Gbps 7 Gbps 9 Gbps
UTM Throughput 3 Gbps 4 Gbps 5.7 Gbps
Concurrent Sessions*
(bi-directional)
1,000,000 1,250,000 1,500,000
VPN Tunnels
Branch Office VPN Tunnels (Max.) 5,000 6,000 7,000
Mobile VPN with SSL/L2TP (Incl/Max) 10,000 12,000 14,000
Mobile VPN with IPSec Client Licenses (Bundled) 10,000 12,000 14,000
Mobile VPN with IPSec Tunnels (Max.) 10,000 12,000 14,000
VPN Authentication
Management
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates. 4-device WatchGuard System Manager license included with purchase. 5-device bonus pack comes with activation. 4-device WatchGuard System Manager license included with purchase. 5-device bonus pack comes with activation. 4-device WatchGuard System Manager license included with purchase. 5-device bonus pack comes with activation.
Networking Features
Dynamic NAT  Yes  Yes  Yes
Static NAT  Yes  Yes  Yes
One to One NAT  Yes  Yes  Yes
VLAN 750 750 1,000
Policy-Based Routing  Yes  Yes  Yes
WAN Failover  Yes  Yes  Yes
Multi-WAN Load Balancing  Yes  Yes  Yes
Server Load Balancing  Yes  Yes  Yes
Traffic Management/QoS  Yes  Yes  Yes
High Availability Active/Active or Active/Passive  Yes  Yes  Yes
Dynamic Routing  Yes  Yes  Yes
VoIP (SIP and H.323) Support  Yes  Yes  Yes
Additional Security Subscriptions
LiveSecurity® Service LiveSecurity Plus with 24/7 support included with Security Bundle LiveSecurity Plus with 24/7 support included with Security Bundle LiveSecurity Plus with 24/7 support included with Security Bundle
Application Control Optional Optional Optional
APT Blocker Optional Optional Optional
Data Loss Prevention Optional Optional Optional
Gateway AntiVirus Optional Optional Optional
Intrusion Prevention Service (IPS) Optional Optional Optional
Reputation Enabled Defense Optional Optional Optional
spamBlocker with Virus Outbreak Detection Optional Optional Optional
WebBlocker with HTTPS URL filtering Optional Optional Optional

*Concurrent sessions here represent the number of bi-directional connections.

Throughput rates are determined using multiple flows through multiple ports and will vary depending on environment and configuration. Contact us directly for help determining the right model for your network.

***XTM 870 appliances are available with 6 copper and 8 fiber 10/100/1000 interfaces under the model number XTM 870-F.