D ATA S H E E T

FIREBOX T85
Up to 4.96 Gbps firewall throughput, 8 x 1Gb ports,
60 Branch Office VPNs

HIGH-PERFORMANCE SECURITY THAT EVOLVES WITH YOUR NETWORK

Businesses today are dependent on fast, reliable, and secure Internet connectivity, but struggle to find network security solutions that can keep
up, let alone evolve as their needs change. Firebox T85 is one of the highest-performing tabletop appliances on the market and offers optional
port expansion modules for integrated fiber connectivity, so you can adapt as your connectivity needs change.

“WatchGuard Firebox T Series firewalls offer a versatile security appliance that’s well suited to deployments
in home, and small to medium-size office environments. They offer a remarkable range of security features,
intuitive management, and throughput your users need to keep up with the pace of business.”
~ Dean Calvert, CEO, Calvert Technologies

TOTAL SECURITY, WHEREVER YOU NEED IT FEATURES & BENEFITS

Firebox T85 gives you a powerful tool for administering and enforcing policy across • 8 Gigabit Ethernet ports support
your extended network, allowing you to bring full UTM protection to small and midsize
high-speed LAN backbone
environments for tighter security. With full support for the Total Security Suite, T85 makes
it possible to protect your smaller locations with advanced security services like Cloud
infrastructures & gigabit WAN
sandboxing, AI-powered anti-malware, threat correlation, and DNS filtering. connections.

• Two Integrated PoE+ ports for

QUICK AND SIMPLE DEPLOYMENT
powering peripheral devices.
Zero-touch deployment makes it possible to eliminate much of the labor involved in setting
up a Firebox to connect to your network - all without having to leave your office. A robust,
• Adapt as your network evolves with
Cloud-based deployment and configuration tool comes standard with WatchGuard Firebox
optional SFP+ fiber and 4G/LTE
appliances. Local staff connects the device to power and the Internet, and the appliance
connects to the Cloud for all its configuration settings. port expansion modules.

Firebox T85 includes two Power over Ethernet (PoE+) ports to power a peripheral device • All logging and reporting functions
allowing you to extend the reach of your network without running costly AC power to remote included with purchase, with
devices. With a port expansion bay, the T85 allows you to customize your port configuration over 100 dashboards and reports
with an SFP+ port for integrated fiber and LTE connectivity right from the appliance. including PCI and HIPAA.

UNIFIED SECURITY PLATFORM® ARCHITECTURE

WatchGuard’s Unified Security Platform framework is built from the ground up to enable
a single console solution for provisioning, deploying, managing, and monitoring an
integrated portfolio of advanced cybersecurity solutions and services. This comprehensive
portfolio of endpoint, multi-factor authentication, Wi-Fi, and network security solutions
(including Firebox firewall appliances) helps stop the attempted discovery and exploitation
of vulnerable systems, phishing, ransomware, intrusions, and advanced malware across all
users, environments, and devices. Our Unified Security Platform architecture replaces the old
patchwork security approach and makes it possible to extend security capabilities to every
computing environment where your business operates.

NETWORK OPTIMIZATION WITH SD-WAN

Firebox T85 makes network optimization easy. With integrated SD-WAN, you can decrease
your use of expensive MPLS or cellular connections and inspect traffic from small offices while
improving the resiliency and performance of your network.

U.S. SALES +1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com WatchGuard Technologies, Inc.
 F I R E B OX T 85
Firebox T85 TECHNICAL SPECIFICATIONS
THROUGHPUT 1
UTM (full scan) 2 943 Mbps
Firewall (IMIX) 2.40 Gbps
VPN (IMIX) 680 Mbps
HTTPS Content Inspection
576 Mbps
(IPS enabled) 3
LEDs
Antivirus 1.53 Gbps
IPS (full scan) 1.28 Gbps
Firewall (UDP 1518) 4.96 Gbps
VPN (UDP 1518) 2.04 Gbps
CAPACITY
USB Network Interfaces Power Switch
Interfaces 10/100/1000 8
I/O interfaces 1 Serial/2 USB
PHYSICAL AND POWER SPECIFICATIONS
Concurrent connections 3,850,000
Product Dimensions (W x D x H) 8.09” x 11.41” x 1.7” (205.5mm x 290mm x 43 mm)
Concurrent connections (Proxy) 290,000
New connections per second 35,500
Product Weight 5.82 lbs (2.6 kg)

VLANs 75 Shipping Dimensions (W x D x H) 14.99” x 12.17” x 4.08” (380.5mm x 309.2mm x 103.7 mm)

WSM licenses (incl) 0 Shipping Weight 6.83 lbs (3.1 kg)

EDR Core licenses 50 Power 90-264 VAC Autosensing
VPN TUNNELS Power Consumption No PoE: 27 Watts
Branch Office VPN 60 2x PoE: 96 Watts

Mobile VPN 60 MTBF 1,155,348 hours

SECURITY FEATURES
Stateful packet inspection, TLS decryption, ENVIRONMENT OPERATING STORAGE
Firewall
proxy firewall
Temperature 32 °F to 104 °F (0 °C to 40 °C) -40 °F to 158 °F (-40 °C to 70 °C)
HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS,
Application proxies
IMAPS and Explicit Proxy Relative Humidity 10% to 85% 10% to 85%
non-condensing non-condensing
DoS attacks, fragmented & malformed packets,
Threat protection
blended threats Altitude 0 to 9,843 ft at 95 °F 0 to 15,000 ft at 95 °F
(0 to 3,000 m at 35 °C) (0 to 4,570 m at 35 °C)
Filtering options Browser Safe Search, Google for Business
VPN STRONG SECURITY AT EVERY LAYER
Site to Site VPN
IKEv2, IPSec, Policy and Route Based Tunnels, Uniquely architected to be the industry’s smartest, fastest, and most
TLS hub and spoke effective network security products, WatchGuard solutions deliver in-depth
Remote Access VPN IKEv2, IPSec, L2TP, TLS defenses against advanced malware, ransomware, botnets, trojans, viruses,
VISIBILITY drive-by downloads, phishing and much more. Total and Basic Security Suite
WatchGuard Cloud & Dimension, Syslog, packages are available on all Firebox solutions.
Logging and notifications
SNMP v2/v3
SUPPORT BASIC SECURITY TOTAL SECURITY
WatchGuard Cloud includes over 100 pre-defined
Reporting Stateful Firewall ✓ ✓ ✓
reports, executive summary and visibility tools
VPN ✓ ✓ ✓
CERTIFICATIONS SD-WAN ✓ ✓ ✓
Security Pending: CC, FIPS 140-2 Access Portal* ✓ ✓ ✓
Safety NRTL/CB Intrusion Prevention Service (IPS) ✓ ✓
Application Control ✓ ✓
Network IPv6 Ready Gold (routing)
WebBlocker ✓ ✓
Hazardous substance control WEEE, RoHS, REACH spamBlocker ✓ ✓
NETWORKING Gateway AntiVirus ✓ ✓
Multi-WAN failover, dynamic path selection, Reputation Enabled Defense ✓ ✓
SD-WAN ✓ ✓
jitter/loss/latency measurement Network Discovery

Dynamic Routing RIP, OSPF, BGP

APT Blocker ✓
DNSWatch ✓
High Availability Active/passive, active/active
IntelligentAV** ✓
QoS 802.1Q, DSCP, IP Precedence ThreatSync (XDR) ✓
Traffic Management By policy or application EDR Core ✓
WatchGuard Cloud
IP address assignment Static, DHCP (server, client, relay), PPPoE, DynDNS Log Data Retention 90 Days 365 Days
Report Data Retention 1 Day 30 Days
NAT Static, dynamic, 1:1, IPSec traversal, policy-based
Support Standard (24 x 7) Standard (24 x 7) Gold (24 x 7)
Link aggregation 802.3ad dynamic, static, active/backup *Not available on Firebox T20/T20-W, T25/T25-W, or T35-R. Total Security Suite required for M270, M370, M470, M570, M670, FireboxV and Firebox Cloud.
**Not available on Firebox T20/T20-W, T25/T25-W, or T35-R.

For details, talk to your authorized WatchGuard reseller or visit

1
Throughput rates are determined using multiple flows through multiple ports and will vary www.watchguard.com.
depending on environment and configuration. Max firewall throughput tested via direct * Not available on Firebox T20/T20-W, T25/T25-W, or T35-R. Total Security Suite required for
connection using 1518 byte UDP frame based on RFC 2544 methodology. All testing performed M270, M370, M470, M570, M670, FireboxV and Firebox Cloud.
on Fireware version 12.6. ** Not available on Firebox T20/T20-W, T25/T25-W, or T35-R.
2
UTM throughput is measured using HTTP traffic with AV, IPS, and Application Control enabled,
and does not account for all security services available on the appliance.
Contact your WatchGuard reseller or call WatchGuard directly (1.800.734.9905) for help
3
HTTPS throughput is measured per NetSecOPEN methodology - 256k response with determining the right model for your network. Visit www.watchguard.com/sizing to access
TLS1.2 AES256 + SHA-256. the online Product Sizing Tool.

U.S. SALES +1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com WatchGuard Technologies, Inc.
No express or implied warranties are provided for herein. All specifications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. ©2023 WatchGuard Technologies, Inc. All rights reserved.
WatchGuard, the WatchGuard logo, Firebox, DNSWatch, IntelligentAV and Unified Security Platform are trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of
their respective owners. Part No. WGCE67650_051523