Firebox WGT36 - Firewall WatchGuard - Free user manual and instructions

USER MANUAL Firebox WGT36 WatchGuard

Firebox T35, T35-W, T55, T55-W

Copyright and Patent Information

Copyright© 1998–2017 WatchGuard Technologies, Inc. All rights reserved.

WatchGuard, the WatchGuard logo, Firebox, LiveSecurity, and any other mark listed as a trademark in the "Terms of Use" portion of the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies, Inc. and/or it's subsidiaries in the United States and/or other countries. All other trademarks are the property of their respective owners.

The Power Architecture and Power.org wordmarks and the Power and Power.org logos and related marks are trademarks and service marks licensed by Power.org.

Printed in the United States of America.

Part Number: Rev A

Revised: September 26, 2017

U.S. Patent Nos. 6,493,752; 6,597,661; D473,879. Other Patents Pending.

Complete copyright, trademark, patent, and licensing information can be found in the Copyright and Licensing Guide. You can find this document online at: http://www.watchguard.com/help/documentation/

Notice to Users

Information in this guide is subject to change without notice. Updates to this guide are posted at:

http://www.watchguard.com/help/documentation/hardware-guides

Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc.

ABOUT WATCHGUARD

WatchGuard® Technologies, Inc. is a global leader in network security, providing best-in-class Unified Threat Management, Next Generation Firewall, secure Wi-Fi, and network intelligence products and services to more than 75,000 customers worldwide. The company's mission is to make enterprise-grade security accessible to companies of all types and sizes through simplicity, making WatchGuard an ideal solution for Distributed Enterprises and SMBs. WatchGuard is headquartered in Seattle, Washington, with offices throughout North America, Europe, Asia Pacific, and Latin America. To learn more, visit WatchGuard.com.

For additional information, promotions and updates, follow WatchGuard on Twitter, @WatchGuard on Facebook, or on the LinkedIn Company page. Also, visit our InfoSec blog, Secplicity, for real-time information about the latest threats and how to cope with them at www.secplicity.org.

ADDRESS

505 Fifth Avenue South

Suite 500

Seattle, WA 98104

SUPPORT

www.watchguard.com/support

U.S. and Canada +877.232.3531

All Other Countries +1.206.521.3575

SALES

U.S. and Canada +1.800.734.9905

All Other Countries +1.206.613.0895

Chapter 1 Hardware Specifications .... 1

Fireware OS 1

Package Contents 2

Hardware Description.... 2

Environmental Requirements.... 5

Restore Factory Default Settings.... 6

Chapter 2 Safety Notices ....7

Safety Notice....7

Chapter 3 Warranty and Licensing Information ....11

Limited Hardware Warranty 11

Licensing 12

Hardware Specifications

WatchGuard® Firebox security appliances deliver unparalleled unified threat management, superior performance, ease of use, and value for your small organization or branch office. Our security subscriptions give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-based exploits, and blended threats. From firewall and VPN protection to secure remote access, WatchGuard Firebox appliances support a broad range of network environments.

This guide introduces the Firebox T35 and T55 RoHS-compliant (lead-free) hardware products. The Firebox T35 and T55 network security appliances are designed for small organizations and branch offices.

Fireware OS

Firebox T35 and T55 support WatchGuard's next generation UTM OS — Fireware® OS. Each Firebox includes Fireware OS and delivers exceptional protection against today's sophisticated threats to make sure that your business stays connected. For more information on the features of Fireware OS, see the current Fireware Help.

Package Contents

■ Firebox T35 or T55 appliance
■ Quick Start Guide
■ AC power adapter (12V/1.25A)
■ 1 straight-through Ethernet cable
■ 1 power cord (US) or 4 power cords (US, AU, EU, UK)

Hardware Description

Hardware Specifications

Firebox T35 / T35-W Firebox T55 / T55-W

Processor NXP T1024 Intel N3060

Memory: 2 GB 2 GB

Storage: 16 GB mSATA 16 GB mSATA

Power supply Input Ratings: 100-240VAC, MAX 1.8A@100VAC, 60-50Hz Output Ratings: 54V, Max 64.8W

Input Ratings: 100-240VAC, MAX 1.8A@100VAC, 60-50Hz Output Ratings: 54V, Max 64.8W

Dimensions D = 205.5mm (8")	D = 205.5mm (8")
W = 217mm (8.5")	W = 217mm (8.5")
H = 48mm (1.8")	H = 48mm (1.8")

Weight T55 0.88kg: (1.94 U.S. pounds)	T55 0.88kg: (1.94 U.S. pounds)
T55-W 0.9kg: (1.98 U.S. pounds)	T55-W 0.9kg: (1.98 U.S. pounds)

Interface Specifications

Network interfaces	5x 1000Base-TX, RJ45Interface 4-PoE supports PoE (Power over Ethernet), compliant with the IEEE 802.3at standard	5x 1000Base-TX, RJ45Interface 4-PoE supports PoE (Power over Ethernet), compliant with the IEEE 802.3at standard
Radio Type and Frequency Band (TT35-W, T55-W)	2.4 GHz 802.11 b/g/n5 GHz 802.11 a/n/ac	2.4 GHz 802.11 b/g/n5 GHz 802.11 a/n/ac
I/O interfaces	2 USB 2.01 RJ45 Serial Port	2 USB 2.01 RJ45 Serial Port

Front View

The front panel of the Firebox T55:

Watchesguard Firebox T55 Full Over 100% 10/10% Status Attn Node

Fail Over

The Fail Over indicator is lit when there is a WAN failover from the primary external interface to the backup interface. After the external interface connection fails back to the primary external interface, the indicator is not lit.

WAP

On the Firebox T35-W and T55-W models, the WAP indicator is lit when the appliance is activated as a wireless access point or a wireless client. The color indicates the active wireless radio band.

Indicator Indicator color Wireless Band

WAP Yellow 2.4 GHz radio band

Green 5 GHz radio band

Network interface status indicators

The Firebox has five network interfaces. There are two status indicators for each interface.

Indicator Indicator color Interface Status
1000 Yellow Link speed: 1000 Mbps
	Blinks (speed of blink increases as the data flow increases)	Data sent and received
10/100 Green Link speed: 10 Mbps or 100		Mbps
	Blinks (speed of blink increases as the data flow increases)	Data sent and received

Status

The Status indicator is lit when there is a management connection to the device. The Status indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line interface. It is also lit when the device is polled by WatchGuard System Manager.

Mode

The Mode indicator shows the status of the external network connection. If the device can connect to the external network and send traffic, the indicator is green. The indicator flashes if the device cannot send traffic to the external network.

Attn

The Attn indicator is yellow when you start the device with the Reset button pressed. For more information, see "Restore Factory Default Settings" on page 6

Power (

The power indicator is green when the device is on.

Rear View

Rear panel of the Firebox T55:

Red Siemens 74 network switch with ports and ports, no visible text or symbols on the device body

Network interfaces

The Ethernet interfaces have standard RJ45 connectors and support link speeds of 1, 100, or 1000 Mbps.

The Firebox T35 and T55 have five network interfaces. They are labeled 0/WAN, 1/LAN, 2, 3, 4-PoE. The highest numbered interface is a PoE (Power over Ethernet) interface, compliant with the IEEE 802.3at standard.

USB interfaces

The Firebox T35 and T55 have two USB interfaces. Connect a USB storage device to use for USB backup and restore, or to store a support snapshot. For more information, see the current Fireware Help.

Serial port (Console)

An RJ45 connector for the serial interface. An RJ45 serial cable is not included with the device.

Power switch

Controls the power supplied to the device. Move the switch to position 1 to power on the device, or position 0 to power it off.

Power input

An AC power adapter is included with your device. Connect the AC adapter to the device and to a power source. The power supply tip is plus (+) polarity. Use only the supplied AC power adapter.

Reset button

To reset the device, use the procedure in "Restore Factory Default Settings" on page 6.

AC Power Adapter

The ACpower adapter supplies power for the Firebox. A Firebox shipped outside the U.S. includes four power cables to connect to the AC power adapter. Use the correct power cable for the power source used in your country.

Caution

Do not connect this power adapter to any other WatchGuard product.

Wall Mounting Plate

The wall mounting plate (available separately) enables you to mount the Firebox on a wall in a good location to increase the wireless range.

To install the wall mounting plate:

1. Place the wall mounting plate horizontally against the wall where you want to install the Firebox.
2. Securely screw the wall mounting plate to the wall with four screws 1/8" (3 mm) wide and at least 3/4" (18 mm) long.
3. Align the two holes on the bottom of the Firebox with the two connection points on the mounting plate.
4. Push the Firebox toward the mounting plate, until the two connection points on the mounting plate are inside the holes on the bottom of the Firebox. Then press firmly down to seat the device on the plate.

To remove the Firebox from the mounting plate, push the Firebox up slightly, and then pull out, to separate the connection points on the mounting plate from the holes on the bottom of the Firebox.

Environmental Requirements

To safely install your Firebox, we recommend that you:

• Install it indoors.
• Put it in a secure area, such as a locked room, to block the device from people who do not have permission to use it
  ■ Connect it to a conditioned power supply to prevent damage from sudden power changes

Other environmental requirements:

Operating temperature 0 - 40°C (32 - 104°F)

Operating relative humidity 5% - 90% Non-condensing

Non-operating temperature -40 - 70°C (-40 - 158°F)

Non-operating relative humidity 5% – 90% Non-condensing

Restore Factory Default Settings

If you have a problem in your configuration file that you cannot correct, you can restore the factory default settings and start from a new configuration file. For example, if you do not know the administrator account passphrase, or if a power interruption causes damage to the Fireware XTM OS, you can restore the Firebox device to the factory default settings and build your configuration again.

To set the device to the factory default settings:

1. Power off the Firebox.
2. Press and hold the Reset button on the back of the Firebox.
3. While you continue to hold the Reset button, power on the Firebox.
4. Continue to hold the button until the Attn indicator begins to flash. Then release the button. Do not power off the Firebox yet.
5. Wait until the Attn indicator stays lit and does not flash.

This process can take 75 seconds or more.

You must start the device again before you can connect to it. If you do not, when you try to connect to the device, a web page appears with the message, "Your device is running from a backup copy of firmware." This message also appears if the Reset button is stuck in the depressed position. If you continue to see this message, check the Reset button and start the device again.

1. Power off the Firebox.
2. Power on the Firebox.

The Power indicator is lit and the Firebox restarts with factory-default settings.

Safety Notices

Safety Notice

All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Read these instructions carefully before you operate the product, and refer to them as needed for continued safe operation of your product.

Product Safety Certification

The WatchGuard product is safety certified for these standards::

■ CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10
■ UL 60950-1, Second Edition 2014-10-14
■ IEC 60950-1, 2005+A1:2009+A2:2013
■ EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013

Safety Warning

• Do not place objects on the power cord.
• Do not obstruct the ventilation openings. These openings prevent overheating of the Firebox.
• Never push objects of any kind into slots or openings on this equipment. If you make contact with a voltage point or short out a part, it can result in fire or electrical shock.
• When removing or installing an appliance, follow the general installation safety instructions provided in this Hardware Guide to avoid injury or damage to the device.
• You must disconnect the AC power cord from the Firebox before you remove the cover of the Firebox for any reason.
• There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries according to the manufacturer's instructions.

Disclaimer

WatchGuard shall not be held liable if the end user alters, modifies, or repairs any WatchGuard hardware appliance.

Warranty and Licensing Information

Limited Hardware Warranty

This Limited Hardware Warranty (the "Warranty") applies to the enclosed hardware product, not including any associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the "Product"). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. ("WatchGuard") and you agree as set forth below or on the reverse side of this card, as applicable:

1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the "Warranty Period"): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specifications.

This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other than WatchGuard except for the replacement or inclusion of specified components authorized in, and performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed by force majeure events, accidents, power spikes or similar events, or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof.

1. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above, WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any software, firmware, information or data contained in, stored on, or integrated with any returned Products.

2. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR, AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO, OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT).

3. LIMITATION AND LIABILITY. WATCHGUARD'S LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING

ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.

1. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington, U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or use of the product or associated documentation to any country to which such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product, and supersedes any prior purchase order, communications, advertising or representations concerning the Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITY'S OBLIGATIONS UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY. No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard.

Licensing

Some components of the WatchGuard System Manager software and Fireware OS are distributed with source code covered under one or more third party or open source licenses.

You can find full licensing information in the product documentation on the WatchGuard public web site at http://www.watchguard.com/help/documentation/

To get the source code covered by this license, contact WatchGuard Technical Support at:

United States or Canada: 877.232.3531

All other countries: +1.360.482.1083

You can download the source code at no charge. If you request the material be sent to you on CD-ROM, there is a \$35 charge for administration and shipping.