Enterprise-grade security for branch offices
A small-footprint security powerhouse that brings enterprise-level network security to small branch offices.
WatchGuard’s Firebox T40 brings enterprise-level network security to small branch offices, in line with the reality of today's increasingly distributed work style. Firebox T40 appliances support the full Total Security Suite, bringing the breadth of WatchGuard’s security services to our most popular model of tabletop appliance for the first time.
Total Security, Wherever You Need It
The Firebox T40 gives you a powerful tool for administering and enforcing policy across your extended network, allowing you to bring full UTM protection to branch offices and small retail sites for tighter security. With full support for the Total Security Suite, the T40 makes it possible to protect your smaller locations with advanced security services like Cloud sandboxing, AI-powered anti-malware, threat correlation and DNS-filtering.
Zero-Touch Remote Deployment
With the Firebox T40 you can avoid sending your team to every location a device is needed. Our Cloud-based RapidDeploy technology allows you to create and store Firebox configuration data in the Cloud and have an appliance directly shipped to its destination. Once the device arrives, a user only needs to plug it in – RapidDeploy will automatically download and apply your pre-determined configuration. Perfect for users at home!
Integrated Power over Ethernet (PoE+)
Firebox T40s include a special Power over Ethernet (PoE+) port to power a peripheral device such as a Cloud-managed wireless access point from WatchGuard or a third-party security camera, allowing you to extend the reach of your networks without having to run costly AC power to remote devices.
Secure SD-WAN That’s Easy
Businesses today require network solutions that can adapt to changing conditions to optimize network performance and reduce costs as needs change. With SD-WAN built in, Firebox T40 makes it easy to reduce the use of expensive MPLS or 4G/LTE and improve network resiliency, while maintaining security.
Wired or Wireless – Your Choice
Firebox T40 appliances are also available in a wireless model that includes optional dual-band 802.11ac technology for a faster wireless network connection, improved reliability, and expanded range on 2.4 GHz or the 5 GHz band. Segmenting traffic for users and guests is easy with the built-in wireless guest network.
Don’t Hesitate, Automate
As a highly automated platform, the Firebox T40 is perfect for time-strapped IT teams. WatchGuard’s unique Automation Core ensures secure user access to essential resources, blocks advanced threats from entering your network, keeps endpoints free of malware, and optimizes network performance, while requiring minimal interaction from your IT team.
A small-footprint security powerhouse that brings enterprise-level network security to small branch offices.
WatchGuard’s Firebox T40 brings enterprise-level network security to small branch offices, in line with the reality of today's increasingly distributed work style. Firebox T40 appliances support the full Total Security Suite, bringing the breadth of WatchGuard’s security services to our most popular model of tabletop appliance for the first time.
Total Security, Wherever You Need It
The Firebox T40 gives you a powerful tool for administering and enforcing policy across your extended network, allowing you to bring full UTM protection to branch offices and small retail sites for tighter security. With full support for the Total Security Suite, the T40 makes it possible to protect your smaller locations with advanced security services like Cloud sandboxing, AI-powered anti-malware, threat correlation and DNS-filtering.
Zero-Touch Remote Deployment
With the Firebox T40 you can avoid sending your team to every location a device is needed. Our Cloud-based RapidDeploy technology allows you to create and store Firebox configuration data in the Cloud and have an appliance directly shipped to its destination. Once the device arrives, a user only needs to plug it in – RapidDeploy will automatically download and apply your pre-determined configuration. Perfect for users at home!
Integrated Power over Ethernet (PoE+)
Firebox T40s include a special Power over Ethernet (PoE+) port to power a peripheral device such as a Cloud-managed wireless access point from WatchGuard or a third-party security camera, allowing you to extend the reach of your networks without having to run costly AC power to remote devices.
Secure SD-WAN That’s Easy
Businesses today require network solutions that can adapt to changing conditions to optimize network performance and reduce costs as needs change. With SD-WAN built in, Firebox T40 makes it easy to reduce the use of expensive MPLS or 4G/LTE and improve network resiliency, while maintaining security.
Wired or Wireless – Your Choice
Firebox T40 appliances are also available in a wireless model that includes optional dual-band 802.11ac technology for a faster wireless network connection, improved reliability, and expanded range on 2.4 GHz or the 5 GHz band. Segmenting traffic for users and guests is easy with the built-in wireless guest network.
Don’t Hesitate, Automate
As a highly automated platform, the Firebox T40 is perfect for time-strapped IT teams. WatchGuard’s unique Automation Core ensures secure user access to essential resources, blocks advanced threats from entering your network, keeps endpoints free of malware, and optimizes network performance, while requiring minimal interaction from your IT team.
Processor Architecture
- ARM Cortex-A53
Non-operating Altitude
- 0 - 4570 m
Bundled Software
- ###REMOVE###
Built-in Processor
- Yes
Processor Frequency
- 1000 MHz
Sustainability Compliance
- Yes
Processor Cores
- 4
Internal Memory Type
- DDR4
USB 3.2 Gen 1 (3.1 Gen 1) Type-A Ports Quantity
- 2
On/Off Switch
- Yes
Reset Button
- Yes
DHCP Server
- Yes
Storage Media Type
- SSD
Serial Ports Quantity
- 1
Mean Time Between Failures (MTBF)
- 157751 h
AC Input Voltage
- 100-240 V
DHCP Client
- Yes
Routing Protocols
- BGP, OSPF, RIP
Firewall Throughput
- 3400 Mbit/s
Branch Office VPN
- 30
Dynamic Routing
- Yes
Firewall (UDP 1518) Throughput
- 3.4 Gbit/s
Firewall (IMIX) Throughput
- 1 Gbit/s
VPN (IMIX) Throughput
- 272 Mbit/s
Current Connections (Proxy)
- 200000
Dynamic DNS (DDNS)
- Yes
Point-to-Point Protocol over Ethernet (PPPoE)
- Yes
Concurrent Connections
- 500000
IPS/IDS Throughput
- 510 Mbit/s
Maximum Firewall Connections Per Second
- 18000
Networking standards
- IEEE 802.1Q, IEEE 802.3ad
Package width
- 308 mm
Package depth
- 181 mm
Package height
- 261 mm
Harmonized System (HS) code
- 85176990
Height
- 43.2 mm
Width
- 203.2 mm
Depth
- 215.9 mm
Weight
- 880 g
Power consumption (typical)
- 25 W
Wi-Fi
- No
Security algorithms
- FIPS 140-2, TLS
Package weight
- 1.86 kg
Operating temperature (T-T)
- 0 - 40 °C
Operating relative humidity (H-H)
- 10 - 85%
Connectivity technology
- Wired
LED indicators
- Yes
Storage temperature (T-T)
- -40 - 70 °C
Storage relative humidity (H-H)
- 10 - 85%
Operating altitude
- 0 - 3000 m
Number of VLANs
- 50
Certification
- WEEE, FCC CAN/CSA C22.2 No.60950-1-07, 2nd ed. 2014-10 UL 60950-1, 2nd ed. 2014-10-14 IEC 60950-1:2005+A1:2009+A2:2013 IEC 62368-1: 2014 2nd ed. EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
Internal memory
- 4096 MB
Power Consumption (max)
- 60 W
Quality of Service (QoS) Support
- Yes
Ethernet LAN Data Rates
- 10,100,1000 Mbit/s
Ethernet LAN (RJ-45) Ports
- 5
Compliance Certificates
- CE, REACH, RoHS
Brand
- WatchGuard

EU Address:
Parkstraat 83 (haagsche Hof),
2514 JG,
The Hague,
The Netherlands
Website (EU): watchguard.com
Email (EU): uksales@watchguard.com
This product complies with the General Product Safety Regulation (GPSR) and meets all relevant EU safety standards.
If you have any questions or require further assistance, you can:
- Contact the manufacturer directly at the listed addresses or support emails.
- Email Northamber Product Safety at productsafety@northamber.com.