Skip to content

Chat 9am to 10pm - 7 days

We love what we do!

Flat Rate Shipping Costs

Standard - $15 or Express - $20

Want The Best Prices?

Request a quote


HomeFirewalls / WatchGuard / Firebox M Series

If you can't find the item you are after in stock, please chat to us. Supply chain issues mean these are often ordered directly from WatchGuard for each customer with a lead time of around 14 days.

M290

Prices From

$3,928.37

Available with bundled subscriptions

M390

Prices From

$5,910.41

Available with bundled subscriptions

M590

Prices From

$11,749.39

Available with bundled subscriptions

M690

Prices From

$19,847.19

Available with bundled subscriptions

subscriptions & Accessories

WatchGuard Parts & Accessories

M290

M390

M590

M690

WatchGuard Firebox M290
WatchGuard Firebox M390
WatchGuard Firebox M590
WatchGuard Firebox M690

  • Which Model?
  • Which Subscription?
  • More protection?
  • Thinking  Wireless?

The WatchGuard Firebox Tabletop Appliance range is currently made up of 4 models.  These are ideal for small to midsize organizations looking for a small form factor, strong throughput and enterprise-grade security.  The table below highlights the main features of each model.


Options

M290

M390

M590

M690

Redundant Power Supplies

No

No

Yes

Yes

Multi-WAN / SD-WAN Support

Yes

Yes

Yes

Yes

Expansion Module Slot

Yes

Yes

Yes

Yes

Throughput

UTM (Full Scan)

1180 Mbps

2400 Mbps

3300 Mbps

4600 Mbps

VPN (IMIX)

800 Mbps

1800 Mbps

2200 Mbps

3200 Mbps

HTTPS (IPS Enabled, Full Scan)

696 Mbps

1320 Mbps

1900 Mbps

2900 Mbps

Anti-Virus

1470 Mbps

3100 Mbps

5000 Mbps

6200 Mbps

IPS (Full Scan)

1300 Mbps

3300 Mbps

4600 Mbps

5800 Mbps

Firewall (UDP 1518)

5800 Mbps

18000 Mbps

20000 Mbps

29700 Mbps

VPN (UDP 1518)

2400 Mbps

5200 Mbps

6840 Mbps

10000 Mbps

capacity

Interfaces (10/100/1000)

8

8

8 & 2 x SFP+

8 & 2 x SFP+ & 2 x 10Gb Multispeed

Concurrent Connections

3 500 000

4 500 000

6 000 000

15 000 000

VLANs

100

250

750

1000

TDR Host Sensors Included

75

150

250

250

WSM Licenses Included

4

4

4

4

VPN Tunnels

Branch Office VPN

75

250

500

1000

Mobile VPN

75

250

500

1000

Our Serving suggestion

M290

M390

M590

M690

Internet Speed

<  500 Mbps

< =  1000 Mbps

<=  1500 Mbps

<=  2000 Mbps

Number of Users

< 100

< 150

< 250

< 500

Paul's Quick Tip

So here's my quick tip for selecting a WatchGuard M Series firewall to meet your needs.  Having sold and managed literally thousands of firewalls across the world since I started in 1999, I have noticed one thing - Our browsing and data consuming habits effect a firewall's throughput.  All the tests above were preformed in labs and under controlled conditions.  


I would always recommend taking the slowest speed published - in this instance something like the HTTPS performance value and then dividing it by three.   This will give you, from our experience, the worst speed you will get under the heaviest load conditions.   Make sure this speed is faster than your internet connection and you will be good to go.


Example using a WatchGuard M290

HTTPS speed is 696 Mbps, divide this by 3 which gives you 232 Mbps.  This is the slowest we believe this firewall will run under the heaviest of loads.  Obviously if you want to turn some of the security services off, then you will make it run faster.


Don't take my word for it though.  Have a look at the real world performance tests we have conducted below.

The Tech Geeks - Paul Sillars

Gio's Advice

Your firewall is nothing without a live and updating subscription.  Viruses, Malware and network threats, change almost hourly.  Purchasing a security subscription means that your firewall will always be receiving the latest threat signatures, virus protection updates and filter block lists.


The best bit is that an active security subscription also gives you free firmware updates, technical support from WatchGuard and hardware warranty for the duration of the subscription.


Never view a security subscription like the warranty for a car.   It is not there just in case something goes wrong, it is actually needed to make sure nothing goes wrong.  You are only truly being protected if your firewall is auto updating and has an active subscription.


Support

In addition to stateful firewalling, the Support license includes full VPN capabilities, and built-in SD-WAN

basic security

The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, antivirus, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as our standard 24x7 support.

TOTAL security

The Total Security Suite includes all services offered with the Basic Security Suite plus AI-powered malware protection, enhanced network visibility, endpoint protection, Cloud sandboxing, DNS filtering, and the ability to take action against threats right from WatchGuard Cloud, our network visibility platform.

support

basic security

total security

Stateful Firewall

A stateful firewall is simply not enough anymore, but is a start.  It allows source, destination, port and protocol blocking.

VPN

A VPN enables secure, encrypted connections between networks and devices at geographically separated locations.

SD-WAN

Businesses today require network solutions that can adapt to changing conditions to optimize network performance and reduce costs as needs change. With SD-WAN built-in, WatchGuard makes it easy to reduce the use of expensive MPLS or 4G/LTE and improve network resiliency, while maintaining security

Access Portal

A clientless VPN solution that provides secure remote access to common web applications that use HTML, HTML5, and JavaScript technologies. With the Access Portal, you do not need to install a software or hardware client.  Not available on the T20/T20-W or T35-R

Intrusion Prevention Service

Intrusion Prevention Service uses continually updated signatures to scan traffic on all major protocols, providing real-time protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows.

Application Control

Allow, block, or restrict access to applications based on a user’s department, job function, and time of day. It’s never been easier to decide who, what, when, where, why and how applications are used on your network.

WebBlocker

In addition to automatically blocking known malicious sites, WatchGuard WebBlocker delivers granular content and URL filtering tools to block inappropriate content, conserve network bandwidth, and increase employee productivity.

spamBlocker

Real-time, continuous, and highly reliable protection from spam and phishing attempts. WatchGuard spamBlocker is so fast and effective, it can review up to 4 billion messages per day, while providing effective protection regardless of the language, format, or content of the message.

Gateway Anti-Virus

Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats – including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by.

Reputation Enabled Defense

A powerful, Cloud-based web reputation service that aggregates data from multiple feeds to provide real-time protection from malicious sites and botnets, while dramatically improving web processing overhead.

Network Discovery

A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network, making it easy to see where you may be at risk. It helps ensure only authorized devices are connected while detecting all open ports and protocols.

ATP Blocker

Cloud sandboxing relies on an award-winning next-gen sandbox to detect and stop the most sophisticated attacks including ransomware and zero day threats. Detect and stop the most sophisticated attacks including ransomware, zero day threats, and other advanced malware designed to evade traditional network security defenses, with APT Blocker.

Threat Detection & Response

Unify network security and endpoint security capabilities to detect more threats and prevent potentially infected machines from introducing malware to the broader network with ThreatSync.

DNSWatch

Prevent phishing and reduce malware infections by detecting and blocking malicious DNS requests, redirecting users to a safe page with information to reinforce security best practices.

IntelligentAV

Automate malware discovery, and classify current and future threats in mere seconds with AI-powered IntelligentAV. Not available on the T20/T20-W or T35-R

WatchGuard Cloud Visibility Data Retention

WatchGuard Cloud is included in every Basic and Total Security Suite license. It provides full visibility into your network so that you can make timely, informed, and effective decisions about your network security anywhere, anytime.

1 Day

30 Days

Support

In addition to stateful firewalling, the Support license includes full VPN capabilities, and built-in SD-WAN.

Standard (24x7)

Standard (24x7)

Gold (24x7)

information hub

What happens if I don't renew my WatchGuard Subscription?

For the best protection a firewall will always need an active and configured security subscription.   If this has lapsed or your are thinking about not renewing it, then the following will happen.


1 - You will loose the option to get free support from the Manufacturer

2 - You will loose all hardware warranty and if your physical unit fails, you will no longer be able to get a free replacement

3 - Any firewall polices that use subscription services will need to be updated to remove them, otherwise they will often switch in to blocking mode.

Is support included in the subscription?

Support is included as standard in the 3 main subscription offerings - Standard Support, Basic Security & Total Security.   This support includes telephone and email support direct with WatchGuard, Firmware Updates and Hardware Warranty.

Is hardware warranty included?

If you have a current Standard Support, Basic Security or Total Security then hardware replacement is included for the length of time you keep that subscription current.  Please do note that in the case of hardware failure, WatchGuard will ship you a replacement from outside of Australia.   You may like to consider additional next business day hardware warranty services to supplement this, to get you back and running as quickly as possible.

What options do I have to get additional support if I get stuck?

We know that sometimes we just need that extra little bit of help and support.   The Tech Geeks have a team that are qualified to assist you and get your back on track as quickly as possible.   We offer rates from $150 + GST per hour and would be happy to quote for any work that you need help with.

Real world performance tests

The below tests have been conducted on a dedicated 1:1 uncontended 1Gb/s fibre connection