Meet the Next Generation Firewall
(NGFW)
Defining a Next Generation Firewall (NGFW):
An NGFW is an enterprise-class, high-performance gateway security
appliance that provides top-of-the-line firewalling, intrusion prevention,
and application control.
#1
Firewalling
#1
Intrusion
Prevention
#1
Application
Control
Data Centers
Who is an NGFW for?
Corporate
Headquarters
School
Systems
MSSPs
Industry Verticals
Typical NGFW and UTM Buyer Profiles
NGFW
UTM
Organization type
Data Centers, corporate HQs,
schools, MSSPs
Small to medium-sized
businesses, multi-site
branch office deployments
Organization size
(# of people)
1,000 – 20,000+
1 – 1,000+
Buyer
Dedicated security specialist
focused on policy, compliance,
and risk management
IT manager juggling
security, networking,
systems, applications, etc.
Why an NGFW?
Large, complex organizations demand high-speed, always-on networks that:
Secure corporate Internet traffic against hackers, malware, network attacks,
intrusion attempts, data theft, and other cybercrime.
Connect offices, remote and virtual employees.
Provide real-time and historical visibility into network, security, and user events.
 Allow visibility and fine-tuned control at the application level.
Introducing the Next Generation: WatchGuard XTM 2050
State-of-the-art in true line speed, security, network visibility, and manageability – at a
price that delivers unrivaled value to the enterprise customer.
XTM 2050: Fast Facts
20 Gbps Packet Filter Throughput
Up to 10 Gbps XTM Throughput
1.6 Gbps VPN Throughput
16x1 GB Copper Ports
2x10 GB SFP+ Fiber Ports
A “Hard to Kill” Feature Set
Redundant Power Supplies
Fans, NICs, and HDDs
What does this
Mean for You?
• No
FireCluster (for Full-box
Redundancy)
• Down
Software Failover Features,
including WAN f/o & VPN f/o
• Time
XTM 2050 Bundle: Formidable Enterprise-class Security
The XTM 2050 appliance
• This top-line, next generation firewall excels at defending corporate
resources while securely connecting users at the speed of enterprise.
Application Control
• Fine-grained control and unparalleled visibility over an industry-leading
1800+ applications lets you set and govern acceptable use policies.
Intrusion Prevention Service
• Scans traffic on all major protocols using continually updated signatures
to detect and block all types of threats.
LiveSecurity® Plus
• Maximize your security investment by utilizing our best-in-industry support and
maintenance package – or, upgrade to our Gold or Platinum level.
The XTM 2050: Blazing Firewall AND XTM Throughput
True Line Speed
The FortiGate product has speedy firewall
throughput, but incurs a hefty 97% performance
degradation when processing threats.
The XTM 2050: Formidable Security at a Compelling Price Point
WatchGuard XTM 2050 Versus:
SonicWall SuperMassive
E10100 and E10200
• The XTM 2050 provides
more robust security and
higher resistance to IPS
evasion techniques (TCP
Split Handshake attack,
fragmentation, etc.)
Fortigate-3040B
• The XTM 2050 provides
vastly superior real-time
visibility and simpler ease
of use in the areas of VPN,
application control, and
policy creation
Why Buy a WatchGuard XTM 2050 Versus a Competitor NGFW???
XTM 2050 crushes network threats while
maintaining a blazing fast throughput
XTM 2050 offers a broad, rich, intuitive feature
set that is unparalleled across the industry
Priced for unrivaled value
Additional Resources
NGFW Portal: www.watchguard.com/ngfw
XTM 2050 Specifications: http://www.watchguard.com/products/xtm2050/detailed-specs.asp
XTM 1050 / 2050 Datasheet:
http://www.watchguard.com/docs/datasheet/wg_ngfw_ds.pdf
Overview: Next Generation Firewalls for the Enterprise:
http://www.watchguard.com/docs/datasheet/wg_ngfw_overview.pdf
Questions & Answers
Tim.Helming@watchguard.com