Skip to content

WatchGuard Firebox T40 / T40 Wireless

Choose from the available models below. By default the first in stock option is shown.

Price:

$1,301.25

SKU: WGT40411-AU

If you can't find the item you are after in stock, please chat to us.  Supply chain issues mean these are often ordered directly from WatchGuard for each customer with a lead time of around 14 days.


Chat 7am to 10pm - 7 days a week

We love what we do!

Shipping Costs From

Standard - $15 or Express - $20

Want The Best Prices?

Request a quote


A small-footprint security powerhouse that brings enterprise-level network security to small branch offices.

 

WatchGuard’s Firebox T40 brings enterprise-level network security to small branch offices, in line with the reality of today's increasingly distributed work style. Firebox T40 appliances support the full Total Security Suite, bringing the breadth of WatchGuard’s security services to our most popular model of tabletop appliance for the first time.

 

This model is available as Wireless and Non Wireless and is purchased with a number of bundled subscription options.

  • What's in the Box
  • Datasheets and Guides

Click HERE to access the Datasheet

Click HERE to access the Installation Guide

Click HERE to access the Hardware Guide

Click HERE to see the Hardware Virtual 360


subscriptions & accessories

WatchGuard Parts & Accessories

T20 / T20 W

T35 Rugged

T40 / T40 W

T80

WatchGuard Firebox T20 and T20 Wireless
WatchGuard Firebox T35-R Rugged
WatchGuard Firebox T40 and T40 Wireless
WatchGuard Firebox T80

  • Which Model?
  • Which Subscription?
  • More protection?
  • Thinking  Wireless?

The WatchGuard Firebox Tabletop Appliance range is currently made up of 4 models.  These are ideal for small to midsize organizations looking for a small form factor, strong throughput and enterprise-grade security.  The table below highlights the main features of each model.


Options

T20

T35-R

T40

T80

Wireless Model Available

Yes

No

Yes

No

IP64-Rated

No

Yes

No

No

Multi-WAN / SD-WAN Support

Yes

Yes

Yes

Yes

Expansion Module Slot

No

No

No

Yes

Throughput

UTM (Full Scan)

154 Mbps

203 Mbps

300 Mbps

631 Mbps

Firewall (IMIX)

510 Mbps

480 Mbps

1000 Mbps

1320 Mbps

VPN (IMIX)

140 Mbps

96 Mbps

272 Mbps

416 Mbps

HTTPS (IPS Enabled, Full Scan)

126 Mbps

151 Mbps

178 Mbps

344 Mbps

Anti-Virus

328 Mbps

325 Mbps

623 Mbps

1150 Mbps

IPS (Full Scan)

271 Mbps

300 Mbps

510 Mbps

909 Mbps

Firewall (UDP 1518)

1700 Mbps

940 Mbps

3400 Mbps

4700 Mbps

VPN (UDP 1518)

485 Mbps

560 Mbps

880 Mbps

1400 Mbps

capacity

Interfaces (10/100/1000)

5

5

5 (1 x PoE+)

8 (2 x PoE+)

Concurrent Connections

100,000

1,300,000

500,000

500,000

VLANs

10

50

30

75

TDR Host Sensors Included

5

20

20

50

VPN Tunnels

Branch Office VPN

10

25

30

60

Mobile VPN

10

25

30

60

Our Serving suggestion

T20

T35-R

T40

T80

Internet Speed

<  100 Mbps

<  100 Mbps

<  200 Mbps

<  500 Mbps

Number of Users

< 10

< 10 

< 20

< 50

Paul's Quick Tip

So here's my quick tip for selecting a WatchGuard T Series firewall to meet your needs.  Having sold and managed literally thousands of firewalls across the world since I started in 1999, I have noticed one thing - Our browsing and data consuming habits effect a firewall's throughput.  All the tests above were preformed in labs and under controlled conditions.  


I would always recommend taking the slowest speed published - in this instance something like the HTTPS performance value and then dividing it by three.   This will give you, from our experience, the worst speed you will get under the heaviest load conditions.   Make sure this speed is faster than your internet connection and you will be good to go.


Example using a WatchGuard T20

HTTPS speed is 126 Mbps, divide this by 3 which gives you 42 Mbps.  This is the slowest we believe this firewall will run under the heaviest of loads.  Obviously if you want to turn some of the security services off, then you will make it run faster.


The Tech Geeks - Paul Sillars

Gio's Advice

Your firewall is nothing without a live and updating subscription.  Viruses, Malware and network threats, change almost hourly.  Purchasing a security subscription means that your firewall will always be receiving the latest threat signatures, virus protection updates and filter block lists.


The best bit is that an active security subscription also gives you free firmware updates, technical support from WatchGuard and hardware warranty for the duration of the subscription.


Never view a security subscription like the warranty for a car.   It is not there just in case something goes wrong, it is actually needed to make sure nothing goes wrong.  You are only truly being protected if your firewall is auto updating and has an active subscription.


Support

In addition to stateful firewalling, the Support license includes full VPN capabilities, and built-in SD-WAN

basic security

The Basic Security Suite includes all of the traditional network security services typical to a UTM appliance: IPS, antivirus, URL filtering, application control, spam blocking and reputation lookup. It also includes our centralized management and network visibility capabilities, as well as our standard 24x7 support.

TOTAL security

The Total Security Suite includes all services offered with the Basic Security Suite plus AI-powered malware protection, enhanced network visibility, endpoint protection, Cloud sandboxing, DNS filtering, and the ability to take action against threats right from WatchGuard Cloud, our network visibility platform.

support

basic security

total security

Stateful Firewall

A stateful firewall is simply not enough anymore, but is a start.  It allows source, destination, port and protocol blocking.

VPN

A VPN enables secure, encrypted connections between networks and devices at geographically separated locations.

SD-WAN

Businesses today require network solutions that can adapt to changing conditions to optimize network performance and reduce costs as needs change. With SD-WAN built-in, WatchGuard makes it easy to reduce the use of expensive MPLS or 4G/LTE and improve network resiliency, while maintaining security

Access Portal

A clientless VPN solution that provides secure remote access to common web applications that use HTML, HTML5, and JavaScript technologies. With the Access Portal, you do not need to install a software or hardware client.  Not available on the T20/T20-W or T35-R

Intrusion Prevention Service

Intrusion Prevention Service uses continually updated signatures to scan traffic on all major protocols, providing real-time protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows.

Application Control

Allow, block, or restrict access to applications based on a user’s department, job function, and time of day. It’s never been easier to decide who, what, when, where, why and how applications are used on your network.

WebBlocker

In addition to automatically blocking known malicious sites, WatchGuard WebBlocker delivers granular content and URL filtering tools to block inappropriate content, conserve network bandwidth, and increase employee productivity.

spamBlocker

Real-time, continuous, and highly reliable protection from spam and phishing attempts. WatchGuard spamBlocker is so fast and effective, it can review up to 4 billion messages per day, while providing effective protection regardless of the language, format, or content of the message.

Gateway Anti-Virus

Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats – including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by.

Reputation Enabled Defense

A powerful, Cloud-based web reputation service that aggregates data from multiple feeds to provide real-time protection from malicious sites and botnets, while dramatically improving web processing overhead.

Network Discovery

A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network, making it easy to see where you may be at risk. It helps ensure only authorized devices are connected while detecting all open ports and protocols.

ATP Blocker

Cloud sandboxing relies on an award-winning next-gen sandbox to detect and stop the most sophisticated attacks including ransomware and zero day threats. Detect and stop the most sophisticated attacks including ransomware, zero day threats, and other advanced malware designed to evade traditional network security defenses, with APT Blocker.

Threat Detection & Response

Unify network security and endpoint security capabilities to detect more threats and prevent potentially infected machines from introducing malware to the broader network with ThreatSync.

DNSWatch

Prevent phishing and reduce malware infections by detecting and blocking malicious DNS requests, redirecting users to a safe page with information to reinforce security best practices.

IntelligentAV

Automate malware discovery, and classify current and future threats in mere seconds with AI-powered IntelligentAV. Not available on the T20/T20-W or T35-R

WatchGuard Cloud Visibility Data Retention

WatchGuard Cloud is included in every Basic and Total Security Suite license. It provides full visibility into your network so that you can make timely, informed, and effective decisions about your network security anywhere, anytime.

1 Day

30 Days

Support

In addition to stateful firewalling, the Support license includes full VPN capabilities, and built-in SD-WAN.

Standard (24x7)

Standard (24x7)

Gold (24x7)

Watchguard Firebox T Series 360 degree views

WatchGuard Firebox T20 / T20 Wireless

Big Security in a Small Appliance

Perfect as a stand-alone firewall solution or as a VPN gateway for centralized traffic inspection, Firebox T20 is a small appliance that brings big security to small and home office environments.


It's no secret that attackers go for the weakest link when trying to get into a corporate network, and this is often a home office or small office user. Firebox T20 gives you a powerful tool for administering and enforcing policy across your extended network, allowing you to bring full UTM protection to remote workers and smaller sites for tighter security.

WatchGuard Firebox T40 / T40 Wireless

Enterprise-grade security for branch offices

A small-footprint security powerhouse that brings enterprise-level network security to small branch offices.


WatchGuard’s Firebox T40 brings enterprise-level network security to small branch offices, in line with the reality of today's increasingly distributed work style. Firebox T40 appliances support the full Total Security Suite, bringing the breadth of WatchGuard’s security services to our most popular model of tabletop appliance for the first time.

WatchGuard Firebox T80

High-performance security that evolves with your network

A customizable, high-performance tabletop firewall with optional port expansion modules to adapt to your changing needs.


Businesses today are dependent on fast, reliable and secure Internet connectivity, but struggle to find network security solutions that can keep up, let alone evolve as their needs change. Firebox T80 is one of the highest performing tabletop appliances on the market and offers optional port expansion modules for integrated fiber connectivity, so you can adapt as your connectivity needs change.

information hub

What happens if I don't renew my WatchGuard Subscription?

For the best protection a firewall will always need an active and configured security subscription.   If this has lapsed or your are thinking about not renewing it, then the following will happen.


1 - You will loose the option to get free support from the Manufacturer

2 - You will loose all hardware warranty and if your physical unit fails, you will no longer be able to get a free replacement

3 - Any firewall polices that use subscription services will need to be updated to remove them, otherwise they will often switch in to blocking mode.

Is support included in the subscription?

Support is included as standard in the 3 main subscription offerings - Standard Support, Basic Security & Total Security.   This support includes telephone and email support direct with WatchGuard, Firmware Updates and Hardware Warranty.

Is hardware warranty included?

If you have a current Standard Support, Basic Security or Total Security then hardware replacement is included for the length of time you keep that subscription current.  Please do note that in the case of hardware failure, WatchGuard will ship you a replacement from outside of Australia.   You may like to consider additional next business day hardware warranty services to supplement this, to get you back and running as quickly as possible.

What options do I have to get additional support if I get stuck?

We know that sometimes we just need that extra little bit of help and support.   The Tech Geeks have a team that are qualified to assist you and get your back on track as quickly as possible.   We offer rates from $150 + GST per hour and would be happy to quote for any work that you need help with.

Real world performance tests

The below tests have been conducted on a dedicated 1:1 uncontended 1Gb/s fibre connection