WatchGuard Firebox rackmount appliances (M Series)

The current Firebox M Series

WatchGuard's rack-mount page lists eight current models. The M295 to M695 share a 1U chassis with multi-gig copper and SFP+ ports. The M4850, M5850 and M6850 are WatchGuard's "Firebox High Rackmount family": the M4850 is "the entry point", the M5850 sits "at the core" and the M6850 is "the top tier model", with 25G ports, redundant hot-swappable power and, on the M4850, an OCP 3.0 expansion bay.

Firebox M Series models and part numbers

Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.

Which M Series model?

Figures are WatchGuard datasheet figures, each datasheet linked under Vendor sources (the 'Ideal for' counts are from WatchGuard's comparison); throughput "will vary depending on the environment and configuration". Every M Series datasheet lists active/passive and active/active high availability.

Power, expansion and HA

• M295 to M695: a single power supply on a C14 inlet in WatchGuard's datasheets, from 38.4 W (M295) to 237 W (M695) maximum.
• M4850: "Dual hot-swappable, redundant power with 2x C14 inlet" and "Redundant, hot-swappable fan modules". Its OCP 3.0 expansion bay takes one optional module: "2.5 Gbps RJ45 x 4 or 25 Gbps SFP28 x 4 or 100 Gbps QSFP28 x 2". WatchGuard does not publish part numbers, so we add the module to your quote.
• M5850 and M6850: two hot-swappable power supplies ("12V, 50A (600W) Hot-swappable PSU x 2").
• High availability: two identical Fireboxes in an active/passive or active/active cluster, each with its own support or suite licence.

Security suites

Each M Series Firebox takes Standard Support or the Basic, Prime or Total Security Suite, chosen in our configurator. All three suites include IPS, Application Control, WebBlocker, spamBlocker, Gateway AntiVirus and more; Prime adds APT Blocker, DNSWatch and Shadow AI, and Total adds Network Management, IntelligentAV, ThreatSync (XDR) and EDR Core, with WatchGuard Cloud log retention of 45, 90 and 365 days respectively. Each M datasheet lists the EDR Core sensors included with Total (75 on the M295, 150 on the M395 and M495, 250 on the M595 and above). Every current M Series model is on WatchGuard's Prime list. Licence detail and renewals: WatchGuard Firebox licensing (opens in a new tab) on softwarelicensing.uk; the full suite table is on the T Series page.

What you order with it

Subscription and support part numbers for the hardware above. We confirm the right tier, term and quantity at quote.

WatchGuard Standard Support (Firebox)

WatchGuard Basic Security Suite (Firebox)

WatchGuard Prime Security Suite (Firebox)

WatchGuard Total Security Suite (Firebox)

WatchGuard Premium 4-Hour RMA subscription (optional)

Replacing an older M Series Firebox

WatchGuard names migration models for its retired rackmount Fireboxes: the M295 for the M270 and M290, the M395 or M495 for the M470, the M495 for the M590, the M595 or M695 for the M690, and the M4850 or M5850 for the M5600, among others. They are listed below; the full table is on WatchGuard end of life.

Lifecycle and replacements

Dates are the vendor's published end-of-sale and support dates. We can quote current replacements and plan the swap.

Warranty

WatchGuard says "All WatchGuard hardware includes a one-year hardware warranty", with advance hardware replacement available "with an active Support subscription". These are WatchGuard's terms; any support we add is confirmed at quote.

How to order

How ordering works. Press Add next to a part number and it goes into your basket; where a security subscription or support contract goes with the firewall, you choose it in the same step. Add any accessories, then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the firewalls, VPNs and policies as a project, with the scope confirmed at quote (see network installation). WatchGuard does not publish its part numbers, so the basket lines are by model and we add the part numbers to your quote.

Vendor sources

• WatchGuard: Firebox Rackmount Appliances (current model comparison widget, 8 models) (opens in a new tab)
• WatchGuard: Compare with previous models (opens in a new tab)
• WatchGuard: Firewall Security Services (Standard Support, Basic, Prime, Total; footnotes) (opens in a new tab)
• WatchGuard: Product List & SKUs ("Log in to your WatchGuard partner account to access SKU information.") (opens in a new tab)
• WatchGuard Trust Center: End of Life Policy (Product Life Cycle Milestones table) (opens in a new tab)
• WatchGuard Trust Center: Hardware Warranty (opens in a new tab)
• WatchGuard Firebox M295 datasheet (PDF) (opens in a new tab)
• WatchGuard Firebox M395 datasheet (PDF) (opens in a new tab)
• WatchGuard Firebox M495 datasheet (PDF) (opens in a new tab)
• WatchGuard Firebox M595 datasheet (PDF) (opens in a new tab)
• WatchGuard Firebox M695 datasheet (PDF) (opens in a new tab)
• WatchGuard Firebox M4850 datasheet (PDF) (opens in a new tab)
• WatchGuard Firebox M5850 datasheet (PDF) (opens in a new tab)
• WatchGuard Firebox M6850 datasheet (PDF) (opens in a new tab)