3.4Gbps, 5x Gigabit Ethernet, 1x PoE+, NXP LS1043A 1.0GHz Quad-Core, 4GB DDR4, 16GB mSATA, 2x USB 3.0
WatchGuard Firebox T40. Firewall throughput: 3400 Mbit/s, Firewall (UDP 1518) throughput: 3.4 Gbit/s, Firewall (IMIX) throughput: 1 Gbit/s. Processor architecture: ARM Cortex-A53, Processor frequency: 1000 MHz, Mean time between failures (MTBF): 157751 h. Networking standards: IEEE 802.1Q, IEEE 802.3ad. Security algorithms: FIPS 140-2, TLS. Routing protocols: BGP, OSPF, RIP
Enterprise-grade security for branch offices
A small-footprint security powerhouse that brings enterprise-level network security to small branch offices.
WatchGuard’s Firebox T40 brings enterprise-level network security to small branch offices, in line with the reality of today’s increasingly distributed work style. Firebox T40 appliances support the full Total Security Suite, bringing the breadth of WatchGuard’s security services to our most popular model of tabletop appliance for the first time.
Total Security, Wherever You Need It
The Firebox T40 gives you a powerful tool for administering and enforcing policy across your extended network, allowing you to bring full UTM protection to branch offices and small retail sites for tighter security. With full support for the Total Security Suite, the T40 makes it possible to protect your smaller locations with advanced security services like Cloud sandboxing, AI-powered anti-malware, threat correlation and DNS-filtering.
Zero-Touch Remote Deployment
With the Firebox T40 you can avoid sending your team to every location a device is needed. Our Cloud-based RapidDeploy technology allows you to create and store Firebox configuration data in the Cloud and have an appliance directly shipped to its destination. Once the device arrives, a user only needs to plug it in – RapidDeploy will automatically download and apply your pre-determined configuration. Perfect for users at home!
Integrated Power over Ethernet (PoE+)
Firebox T40s include a special Power over Ethernet (PoE+) port to power a peripheral device such as a Cloud-managed wireless access point from WatchGuard or a third-party security camera, allowing you to extend the reach of your networks without having to run costly AC power to remote devices.
Secure SD-WAN That’s Easy
Businesses today require network solutions that can adapt to changing conditions to optimize network performance and reduce costs as needs change. With SD-WAN built in, Firebox T40 makes it easy to reduce the use of expensive MPLS or 4G/LTE and improve network resiliency, while maintaining security.
Wired or Wireless – Your Choice
Firebox T40 appliances are also available in a wireless model that includes optional dual-band 802.11ac technology for a faster wireless network connection, improved reliability, and expanded range on 2.4 GHz or the 5 GHz band. Segmenting traffic for users and guests is easy with the built-in wireless guest network.
Don’t Hesitate, Automate
As a highly automated platform, the Firebox T40 is perfect for time-strapped IT teams. WatchGuard’s unique Automation Core ensures secure user access to essential resources, blocks advanced threats from entering your network, keeps endpoints free of malware, and optimizes network performance, while requiring minimal interaction from your IT team.
Full specifications for this model are listed below.
| Concurrent connections | 500000 |
|---|---|
| Processor frequency | 1000 MHz |
| Internal memory | 4096 MB |
| pa_i_ethernetlanrj4_2312_1 | 5 |
| Serial ports quantity | 1 |
| Connectivity technology | Wired |
| Weight | 880 g |
| Power consumption (typical) | 25 W |
| Operating altitude | 0 – 3000 m |
| Storage relative humidity (H-H) | 10 – 85% |
| Operating temperature (T-T) | 0 – 40 °C |
| Operating relative humidity (H-H) | 10 – 85% |
| Storage temperature (T-T) | -40 – 70 °C |
| Non-operating altitude | 0 – 4570 m |
| Mean time between failures (MTBF) | 157751 h |
| Routing protocols | BGP, OSPF, RIP |
| Number of VLANs | 50 |
| Firewall throughput | 3400 Mbit/s |
| Branch Office VPN | 30 |
| VPN throughput | 880 Mbit/s |
| Security algorithms | FIPS 140-2, TLS |
| Certification | WEEE, FCC |
| DHCP server | Yes |
| DHCP client | Yes |
| Quality of Service (QoS) support | Yes |
| Internal memory type | DDR4 |
| Built-in processor | Yes |
| Networking standards | IEEE 802.1Q, IEEE 802.3ad |
| Wi-Fi | No |
| IPS/IDS throughput | 510 Mbit/s |
| Storage media type | SSD |
| SSD capacity | 16 GB |
| AC input voltage | 100-240 V |
| Maximum firewall connections per second | 18000 |
| pa_built-in-camera | 4 |
| USB 3.2 Gen 1 (3.1 Gen 1) Type-A ports quantity | 2 |
| On/off switch | Yes |
| Point-to-point protocol over Ethernet (PPPoE) | Yes |
| Reset button | Yes |
| Ethernet LAN data rates | 10,100,1000 Mbit/s |
| Power consumption (max) | 60 W |
| Package width | 308 mm |
| Package depth | 181 mm |
| Package height | 261 mm |
| Package weight | 1.86 kg |
| Processor architecture | ARM Cortex-A53 |
| Dynamic routing | Yes |
| Dynamic DNS (DDNS) | Yes |
| Mobile VPN tunnels quantity | 30 |
| HTTPS encryption | Yes |
| VPN (IMIX) throughput | 272 Mbit/s |
| VPN (UDP 1518) throughput | 0.88 Gbit/s |
| Firewall (UDP 1518) throughput | 3.4 Gbit/s |
| Firewall (IMIX) throughput | 1 Gbit/s |
| Gateway antivirus throughput | 0.623 Gbit/s |
| Current connections (proxy) | 200000 |
| TDR host sensors capacity | 20 |
| Width | 203.2 mm |
| Depth | 215.9 mm |
| Height | 43.2 mm |
| Sustainability compliance | Yes |
| Sustainability certificates | CE, REACH, RoHS |
Our specialists are here to help assess compatibility, compare suitable alternatives, or talk through your configuration needs before committing to a solution.
Contact us today for a no-obligation chat.
Below you’ll find alternative models, suitable software and services that pair with this solution – helping you to avoid compatibility issues, reduce support overhead and deploy with confidence.
Not all deployments fit standard configurations. If you’re weighing up options or want a second opinion on your setup, our team is here to help with honest, straightforward advice backed by decades of vendor knowledge.



