Free Shipping On Many Orders Over $350 (Exclusion Apply)

Chat To Us - 7am-10pm - 7 Days A Week

WatchGuard Firebox M5800

Choose from the available models below. By default the first in stock option is shown.



SKU: WGM58001

If you can't find the item you are after in stock, please chat to us.  Supply chain issues mean these are often ordered directly from WatchGuard for each customer with a lead time of around 14 days.

Chat 7am to 10pm - 7 days a week

We love what we do!

Shipping Costs From

Standard - $20 or Express - $30

Want The Best Prices?

Request a quote

With firewall throughput of up to 87 Gbps and UTM throughput up to 11.3 Gbps, the Firebox M4800 and M5800 are our fastest Firebox appliances ever. This level of performance, paired with powerful security, flexible high port density, redundant power supplies, and affordability makes these the ideal solutions for distributed, hub-and-spoke type deployment scenarios.


Typically deployed at the corporate headquarters, these appliances serve as the “hub” appliance, responsible for managing and securing all communications between the head office and all remote employee and small business sites.


WatchGuard Cloud, which is included at no additional cost, provides a suite of big data visibility and reporting tools that instantly identify and distil key network security threats, issues and trends, accelerating the ability to set meaningful security policies across the entire network.


WatchGuard’s Firebox M4800 and M5800 allow businesses to add the network interface modules that best suit their environment.



Up to 87 Gbps firewall throughput. Turn on all security scanning engines and still see an amazing 11.3 Gbps throughput.
All logging and reporting functions included with purchase, with over 100 dashboards and reports including PCI and HIPAA.
Customize your port configuration to meet current needs, knowing you have the flexibility to adapt as the network evolves. This is how to future-proof your network and eliminate costly rip-and-replace scenarios.
Redundant hot-swap power supplies ensure maximum availability.
Access Portal is a clientless VPN solution that comes standard with every Firebox and provides secure remote access to remote users. 

Liquid error (templates/product.gem-1662354232-template line 25): Could not find asset snippets/apd.liquid

subscriptions & accessories

WatchGuard Parts & Accessories





WatchGuard Firebox M290
WatchGuard Firebox M390
WatchGuard Firebox M590
WatchGuard Firebox M690

  • Which Model?
  • Which Subscription?
  • More protection?
  • Thinking  Wireless?

The WatchGuard Firebox Tabletop Appliance range is currently made up of 4 models.  These are ideal for small to midsize organizations looking for a small form factor, strong throughput and enterprise-grade security.  The table below highlights the main features of each model.






Redundant Power Supplies





Multi-WAN / SD-WAN Support





Expansion Module Slot






UTM (Full Scan)

1180 Mbps

2400 Mbps

3300 Mbps

4600 Mbps


800 Mbps

1800 Mbps

2200 Mbps

3200 Mbps

HTTPS (IPS Enabled, Full Scan)

696 Mbps

1320 Mbps

1900 Mbps

2900 Mbps


1470 Mbps

3100 Mbps

5000 Mbps

6200 Mbps

IPS (Full Scan)

1300 Mbps

3300 Mbps

4600 Mbps

5800 Mbps

Firewall (UDP 1518)

5800 Mbps

18000 Mbps

20000 Mbps

29700 Mbps

VPN (UDP 1518)

2400 Mbps

5200 Mbps

6840 Mbps

10000 Mbps


Interfaces (10/100/1000)



8 & 2 x SFP+

8 & 2 x SFP+ & 2 x 10Gb Multispeed

Concurrent Connections

3 500 000

4 500 000

6 000 000

15 000 000






TDR Host Sensors Included





WSM Licenses Included





VPN Tunnels

Branch Office VPN





Mobile VPN





Our Serving suggestion





Internet Speed

<  500 Mbps

< =  1000 Mbps

<=  1500 Mbps

<=  2000 Mbps

Number of Users

< 100

< 150

< 250

< 500

Paul's Quick Tip

So here's my quick tip for selecting a WatchGuard M Series firewall to meet your needs.  Having sold and managed literally thousands of firewalls across the world since I started in 1999, I have noticed one thing - Our browsing and data consuming habits effect a firewall's throughput.  All the tests above were preformed in labs and under controlled conditions.  

I would always recommend taking the slowest speed published - in this instance something like the HTTPS performance value and then dividing it by three.   This will give you, from our experience, the worst speed you will get under the heaviest load conditions.   Make sure this speed is faster than your internet connection and you will be good to go.

Example using a WatchGuard M290

HTTPS speed is 696 Mbps, divide this by 3 which gives you 232 Mbps.  This is the slowest we believe this firewall will run under the heaviest of loads.  Obviously if you want to turn some of the security services off, then you will make it run faster.

Don't take my word for it though.  Have a look at the real world performance tests we have conducted below.

The Tech Geeks - Paul Sillars

Gio's Advice

Your firewall is nothing without a live and updating subscription.  Viruses, Malware and network threats, change almost hourly.  Purchasing a security subscription means that your firewall will always be receiving the latest threat signatures, virus protection updates and filter block lists.

The best bit is that an active security subscription also gives you free firmware updates, technical support from WatchGuard and hardware warranty for the duration of the subscription.

Never view a security subscription like the warranty for a car.   It is not there just in case something goes wrong, it is actually needed to make sure nothing goes wrong.  You are only truly being protected if your firewall is auto updating and has an active subscription.


In addition to stateful firewalling, the Support license includes full VPN capabilities, and built-in SD-WAN

basic security

The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, antivirus, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as our standard 24x7 support.

TOTAL security

The Total Security Suite includes all services offered with the Basic Security Suite plus AI-powered malware protection, enhanced network visibility, endpoint protection, Cloud sandboxing, DNS filtering, and the ability to take action against threats right from WatchGuard Cloud, our network visibility platform.


basic security

total security

Stateful Firewall

A stateful firewall is simply not enough anymore, but is a start.  It allows source, destination, port and protocol blocking.


A VPN enables secure, encrypted connections between networks and devices at geographically separated locations.


Businesses today require network solutions that can adapt to changing conditions to optimize network performance and reduce costs as needs change. With SD-WAN built-in, WatchGuard makes it easy to reduce the use of expensive MPLS or 4G/LTE and improve network resiliency, while maintaining security

Access Portal

A clientless VPN solution that provides secure remote access to common web applications that use HTML, HTML5, and JavaScript technologies. With the Access Portal, you do not need to install a software or hardware client.  Not available on the T20/T20-W or T35-R

Intrusion Prevention Service

Intrusion Prevention Service uses continually updated signatures to scan traffic on all major protocols, providing real-time protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows.

Application Control

Allow, block, or restrict access to applications based on a user’s department, job function, and time of day. It’s never been easier to decide who, what, when, where, why and how applications are used on your network.


In addition to automatically blocking known malicious sites, WatchGuard WebBlocker delivers granular content and URL filtering tools to block inappropriate content, conserve network bandwidth, and increase employee productivity.


Real-time, continuous, and highly reliable protection from spam and phishing attempts. WatchGuard spamBlocker is so fast and effective, it can review up to 4 billion messages per day, while providing effective protection regardless of the language, format, or content of the message.

Gateway Anti-Virus

Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats – including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by.

Reputation Enabled Defense

A powerful, Cloud-based web reputation service that aggregates data from multiple feeds to provide real-time protection from malicious sites and botnets, while dramatically improving web processing overhead.

Network Discovery

A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network, making it easy to see where you may be at risk. It helps ensure only authorized devices are connected while detecting all open ports and protocols.

ATP Blocker

Cloud sandboxing relies on an award-winning next-gen sandbox to detect and stop the most sophisticated attacks including ransomware and zero day threats. Detect and stop the most sophisticated attacks including ransomware, zero day threats, and other advanced malware designed to evade traditional network security defenses, with APT Blocker.

Threat Detection & Response

Unify network security and endpoint security capabilities to detect more threats and prevent potentially infected machines from introducing malware to the broader network with ThreatSync.


Prevent phishing and reduce malware infections by detecting and blocking malicious DNS requests, redirecting users to a safe page with information to reinforce security best practices.


Automate malware discovery, and classify current and future threats in mere seconds with AI-powered IntelligentAV. Not available on the T20/T20-W or T35-R

WatchGuard Cloud Visibility Data Retention

WatchGuard Cloud is included in every Basic and Total Security Suite license. It provides full visibility into your network so that you can make timely, informed, and effective decisions about your network security anywhere, anytime.

1 Day

30 Days


In addition to stateful firewalling, the Support license includes full VPN capabilities, and built-in SD-WAN.

Standard (24x7)

Standard (24x7)

Gold (24x7)

information hub

What happens if I don't renew my WatchGuard Subscription?

For the best protection a firewall will always need an active and configured security subscription.   If this has lapsed or your are thinking about not renewing it, then the following will happen.

1 - You will loose the option to get free support from the Manufacturer

2 - You will loose all hardware warranty and if your physical unit fails, you will no longer be able to get a free replacement

3 - Any firewall polices that use subscription services will need to be updated to remove them, otherwise they will often switch in to blocking mode.

Is support included in the subscription?

Support is included as standard in the 3 main subscription offerings - Standard Support, Basic Security & Total Security.   This support includes telephone and email support direct with WatchGuard, Firmware Updates and Hardware Warranty.

Is hardware warranty included?

If you have a current Standard Support, Basic Security or Total Security then hardware replacement is included for the length of time you keep that subscription current.  Please do note that in the case of hardware failure, WatchGuard will ship you a replacement from outside of Australia.   You may like to consider additional next business day hardware warranty services to supplement this, to get you back and running as quickly as possible.

What options do I have to get additional support if I get stuck?

We know that sometimes we just need that extra little bit of help and support.   The Tech Geeks have a team that are qualified to assist you and get your back on track as quickly as possible.   We offer rates from $150 + GST per hour and would be happy to quote for any work that you need help with.

Real world performance tests

The below tests have been conducted on a dedicated 1:1 uncontended 1Gb/s fibre connection