Firebox® seria M - M4600/M5600

Firebox M4600 & M5600

Top of the line, with modular port options that allow businesses to create their ideal M4600 or M5600 deployment, and dual-redundant power supplies for highest performance and uptime. These appliances are ideal for the central headquarters location of a large distributed enterprise organization, offering optimal flexibility to evolve the appliance over time.

Top of the Line Performance & Security

Diagram: Hub-and-spoke Deployment

With firewall throughput of up to 60 Gbps and UTM throughput up to 11 Gbps, the Firebox M4600 and M5600 are our fastest Firebox appliances ever. This level of performance, paired with powerful security, flexible high-port density, redundant power supplies, and affordability makes these the ideal solutions for distributed, hub-and-spoke type deployment scenarios.

Typically deployed at the corporate headquarters, these appliances serve as the “hub” appliance, responsible for managing and securing all communications between the head office and all remote employee and small business sites. WatchGuard Dimension, which is included at no additional cost, provides a suite of big data visibility and reporting tools that instantly identify and distill key network security threats, issues and trends, accelerating the ability to set meaningful security policies across the entire network.

What’s more, the Firebox M4600 and M5600 allow businesses to add the network interface modules that best suit their environment.

WatchGuard® Model WatchGuard Firebox® M670 WatchGuard Firebox® M4600 WatchGuard Firebox® M5600
Ideal For Midsize business and distributed enterprise Headquarters for distributed enterprises Headquarters for distributed enterprises
Model Upgradeable N/A N/A N/A
Interfaces 8 Gb (included); Optional 8 Gb, 8 Gb fiber, 4 x 10 Gb fiber 8 Gb (included); Optional 8 Gb, 8 Gb fiber, 4 10Gb fiber, 2 40Gb fiber 8 Gb, 4 10Gb fiber (included); Optional 8 1Gb, 8 1Gb fiber, 4 10Gb fiber, 2 40Gb fiber
Intrusion Prevention
Wireless Models N/A N/A N/A
User Authentication with transparent Windows authentication On On On
Firewall Throughput 34 Gbps 40 Gbps 60 Gbps
VPN Throughput 7.6 Gbps 10 Gbps 10 Gbps
AV Throughput 6.2 Gbps 9 Gbps 12 Gbps
IPS Throughput 10.4 Gbps 13 Gbps 18 Gbps
UTM Throughput 5.4 Gbps 8 Gbps 11 Gbps
Concurrent Sessions* 8,500,000 7,500,000 12,700,000
VPN Tunnels      
Branch Office VPN Tunnels 750 5,000 Unrestricted
Mobile VPN with SSL/L2TP 750 10,000 Unrestricted
Mobile VPN with IPSec 750 10,000 Unrestricted
Optional Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates. 4-device WatchGuard System Manager license included with purchase 4-device WatchGuard System Manager license included with purchase 4-device WatchGuard System Manager license included with purchase
Networking Features      
Dynamic NAT On On On
Static NAT On On On
One to One NAT On On On
VLAN 750 1,000 Unrestricted
SD-WAN Dynamic Path Selection On On On
WAN Failover On On On
Multi-WAN Load Balancing On On On
Server Load Balancing On On On
Traffic Management/QoS On On On
High Availability Active/Active or Active/Passive On On On
Dynamic Routing On On On
VoIP (SIP and H.323) Support On On On
Additional Security Subscriptions      
Support and Maintenance Program 24x7 Support included with Security Suite 24x7 Support included with Security Suite 24x7 Support included with Security Suite
Access Portal Optional Optional Optional
Application Control Optional Optional Optional
APT Blocker Optional Optional Optional
Data Loss Prevention Optional Optional Optional
DNSWatch Optional Optional Optional
Gateway AntiVirus Optional Optional Optional
IntelligentAV Optional Optional Optional
Intrusion Prevention Service (IPS) Optional Optional Optional
Network Discovery Optional Optional Optional
Reputation Enabled Defense Optional Optional Optional
spamBlocker with Virus Outbreak Detection Optional Optional Optional
Threat Detection and Response Optional Optional Optional
WebBlocker with HTTPS URL filtering Optional Optional Optional


Icon: Total Security


Total Protection

Every network needs a full arsenal of scanning engines to protect against spyware, viruses, malicious apps, data leakage, botnets and more. WatchGuard’s award-winning network security platform not only provides the most complete suite of unified security controls on the market today, but we have consistently been the first to offer solutions for addressing new and evolving network threats including ransomware and advanced malware.

Icon: Future-Proof


Future-Proof Your Network

When IT pros have greater port density options, they can customize their port configuration to meet current needs, while ensuring the flexibility to adapt as the network evolves. Module options for the M4600 and M5600 include 4 x 10Gb fiber, 8 x 1Gb fiber, 8 x 1Gb copper, 2 x 40Gb fiber, 1 x 40Gb copper – and any combination of these can be deployed in the M4600 and M5600 two empty bays. Just Imagine, no more costly rip-and-replace scenarios.

Illustration: Network Visibility


Always Know What's Happening on Your Network

WatchGuard understands the importance of network visibility and continues to deliver industry-leading solutions that help customers detect harmful activities before they become massive problems. With WatchGuard Dimension you can pinpoint significant network activities to take immediate corrective or diagnostic actions directly from the interactive, real-time monitoring. All logging and reporting functions also included with purchase, with over 100 dashboards and reports including PCI and HIPAA.

Icon: RapidDeploy


Easily Deploy & Manage Many Appliances

Distributed organizations will especially appreciate the intuitive tools that support policy creation, management, and enforcement across multiple locations. Avoid having network administrators onsite to configure remote devices with WatchGuard’s zero-touch RapidDeploy feature. RapidDeploy saves time and resources on initial configuration and deployment of network security by enabling IT to simply ship new devices to remote locations and have them automatically download templated configurations.

Icon: NSS Labs Recommends Firebox M4600


Coveted NSS Rating Goes to Firebox M4600

When NSS Labs published its 2017 Security Value Map™ for Next Generation Firewalls (NGFW) report, WatchGuard garnered a Recommended rating. Our Firebox M4600 earned this status because of its excellent overall scores in every area of testing – including security effectiveness, performance, stability and reliability, as well as total cost of ownership.



Quick Facts
  • 3 ways to manage your appliance, including feature-rich intuitive centralized console, a command line interface, or web UI for access from anywhere, anytime.
  • Even with all UTM security scanning engines enabled, UTM throughput can reach over 11 Gbps.
  • To maximize port utilization, any of the ports can be configured as Internal, External, or Optional.
  • High availability ensures maximum uptime. Buy two M4600s or M5600s for an active/passive high availability pair and receive 50% off the cost of the second device.


For more information, please contact to:

Damian Gołuch
Product Manager
tel. +48 664 753 900