Introduction

WatchGuard XTM 2050 NG firewall appliance is a top level security device in XTM series and is capable of supporting up to 2,500,000 bi-directional concurrent sessions. WatchGuard XTM 2050 NG firewall appliance also supports unlimited numbers of LAN IPs in the network, which makes WatchGuard XTM 2050 NG firewall appliance a perfect security solution for large enterprises, large college campuses and huge corporate premises. The device is best suited for the scenarios where up to 0% network and security downtime is required. Because of hot swappable NICs and hard drives, WatchGuard XTM 2050 NG firewall appliance provides no interruption in security and network during hardware failure. Moreover, this security appliance includes license for 4-device management tool at no additional cost. 4-device management tool allows administrators to manage and administer up to 4 WatchGuard devices from a single interface and from a central location, hence remarkably expediting the entire management and administration process.

Who Should Buy?

WatchGuard XTM 2050 NG firewall appliance is manufactured and is useful in:

• Large Enterprises – Enterprises that fall under the category of large-scale and have huge corporate premises can use WatchGuard XTM 2050 NG firewall appliance in order to protect the entire network of the organization from internal and external threats. With the help of this security appliance, such enterprises can experience uninterrupted network connectivity and Internet uptime.
• Large College Campuses – Colleges that are expanded in large areas and have multiple campuses representing different departments can use WatchGuard XTM 2050 NG firewall appliance as a perfect security solution for their networks. Because WatchGuard XTM 2050 NG firewall appliance has built-in fiber-optic interfaces, such colleges can connect campuses of different departments with the help of fiber-optic media using them as backbone cables for high data transmission.

What Purposes It Serves?

WatchGuard XTM 2050 NG firewall appliance allows security administrators to:

• Use Fiber Optic Media – Since WatchGuard XTM 2050 NG firewall appliance is designed and developed for large scale industries and huge college campuses, it allows administrators to connect multiple departments/campuses via fiber-optic media, hence providing high-speed and Electromagnetic Interference (EMI) free data transmission.
• Uninterrupted Network Security – WatchGuard XTM 2050 NG firewall appliance has hot swappable power supply, fans, NICs and hard drives. Because of such features, the entire network can experience uninterrupted security from internal and external threats and up to 0% network downtime.

Top Features and Benefits

• VPN Connections – WatchGuard XTM 2050 NG firewall appliance supports:
• ✓ VPN Failover
• ✓ 2 Gbps of VPN throughput
• ✓ 10000 VPN tunnels to branch offices
• ✓ 20000 Mobile VPN IPsec tunnels
• ✓ 20000 Mobile VPN SSL tunnels
• Security – Since WatchGuard XTM 2050 NG firewall appliance is a dedicated security device especially designed for large enterprises and huge college campuses, it supports:
• ✓ 20 Gbps firewall throughput
• ✓ Threat Protection (from Denial of Service (DoS) attacks, spyware, malicious elements, etc.)
• ✓ Deep Packet Inspection (DPI)
• ✓ Stateful Packet Inspection
• ✓ Proxy Firewall
• ✓ Up to 10 Gbps Extensible Threat Management (XTM) throughput
• ✓ 10 Gbps Intrusion Prevention Services (IPS) throughput
• Networking – Apart from other general networking features, WatchGuard XTM 2050 NG firewall appliance also supports:
• ✓ High Availability (Active/Passive and Active/Active load balancing)
• ✓ Multi-WAN load balancing
• ✓ Multi-WAN failover
• ✓ NAT (Static, Dynamic,  IPsec NAT traversal, Virtual IP for Server Load Balancing)
• Voice over IP (VoIP) – Security administrators can also manage VoIP by:
• ✓ H.323
• ✓ SIP
• ✓ Session Security
• Single Sign-on (SSO) – This feature allows administrators to integrate WatchGuard XTM 2050 NG firewall appliance with an existing Windows Active Directory environment to configure one time authentication. Single Sign-on (SSO) prevents users from providing their credentials every time they try to access data or resources through the network.

Hardware Specifications – Hardware specifications of a WatchGuard XTM 2050 NG firewall appliance include:

• 16 x 10/100/1000 copper interfaces
• 4 x 10G SFP+ fiber-optic interfaces
• 2 USB interfaces
• 1 serial interface
• 1 management interface
• Up to 500 VLANS

Paid Subscriptions

In order to enhance the security of the network, and make the WatchGuard XTM 2050 NG firewall appliance work even more efficiently, security administrators can purchase any or all available subscriptions:

• Application Control – Security administrators can purchase subscription for Application Control that allows them to monitor and control the access of web applications such as Skype, etc.
• Reputation Enabled Defense – Reputation Enabled Defense (RED) adds an additional layer of security to the network by preventing users from accessing malicious webpages.
• WebBlocker – This subscription allows security administrators to block unwanted websites, hence restricting users from accessing inappropriate contents available on the Internet.
• Intrusion Prevention Service – Security administrators can purchase this subscription in order to detect and automatically prevent any intrusion attempts into the network.
• SpamBlocker – This subscription secures the network from unwanted virus oriented spam emails, hence allowing secure communication between internal and external networks.
• Gateway Antivirus – This subscription protects the network from virus attacks. When this subscription is purchased, viruses are blocked at the gateway itself.

Upgrades

No model or operating system upgrade is required as WatchGuard XTM 2050 NG firewall appliance already as Fireware XTM Pro included in it and supports hot swappable hard drives and NICs. However security administrators are strongly recommended to purchase additional subscriptions to add other security measures in order to make the network completely secure.