Hardware-firewall WatchGuard Firebox Cloud Medium

Public cloud environments often lack the robust perimeter defenses that on-premises networks enjoy, leaving virtual private clouds and hosted services vulnerable to network attacks and web exploits. The WatchGuard Firebox Cloud Medium closes this gap by delivering enterprise-grade firewall protection as a virtual appliance, engineered for medium-sized deployments that demand consistent throughput and strong encryption.

Who is it for

This firewall is built for organizations running workloads on AWS, Azure, VMware ESXi, or Microsoft Hyper-V. It suits medium-sized enterprises supporting up to 3000 users and networks that rely on BGP4, OSPF, or RIP routing protocols. Cloud-hosted email, web, CRM, and file storage services all benefit from its layered defenses.

Main features

• 4 Gbit/s firewall throughput and 2.5 Gbps UTM throughput for responsive security inspection.
• AES encryption at 128-, 192-, and 256-bit strengths secures data in transit.
• Full routing protocol support (BGP4, OSPF, RIP) simplifies integration into existing cloud network designs.
• Includes the Total Security Suite: IPS, Gateway AntiVirus, URL Filtering, Application Control, APT Blocker, DLP, TDR, Spam Blocker, and Reputation Enabled Defense.
• Centralized management via WatchGuard Cloud, Web UI, or CLI, with WatchGuard Dimension for visibility and reporting.
• Active/passive high availability clustering ensures resilience for critical cloud services.

Specifications

• Firewall throughput: 4 Gbit/s (raw) / 2.5 Gbps (VPN) / 400 Mbps (UTM with all services on).
• Concurrent connections: 750,000; new connections per second: 20,000.
• VPN tunnels: 150 branch office, 250 mobile.
• Virtual interfaces: up to 10.
• Recommended resources: 4 vCPUs, 8 GB RAM, 80 GB storage.
• Licensing: subscription-based, includes 1-year Total Security Suite.
• Deployment: public cloud (AWS, Azure) and virtualization platforms (VMware ESXi, Microsoft Hyper-V).

Tips

Allocate the recommended vCPU and RAM resources to avoid performance bottlenecks during deep packet inspection. Use WatchGuard Dimension to monitor cloud security events and generate compliance reports. For multi-region deployments, consider active/passive clustering to maintain uptime during failover scenarios.