WatchGuard Technologies has announced its next-generation rack-mounted firewalls, the Firebox M Series, aiming to simplify deployment, double performance compared to the previous generation, and enable scaling without hardware replacements. Designed for Managed Service Providers (MSPs) and organizations with growing networks—including hybrid environments—the offering relies on the company’s Unified Security Platform and focuses on three main areas: sustained performance with full inspection, secure remote access via ZTNA, and centralized cloud management.
“The new series goes beyond hardware refresh; it’s a leap in platform performance and capabilities,” summarizes Jay Lindenauer, Vice President of Network Security at WatchGuard. “Together with the expanded Unified Security Platform and integration with FireCloud, it becomes an ideal solution for securing and simplifying modern and complex networks.”
Scaling without losing speed: throughput high with active security services
One of the key messages of the Firebox M Series is that it maintains high performance even with all security services active—deep inspection, filtering, threat prevention, etc.—a combination often penalized in many competing devices. To achieve this, the range includes:
- Multi-Gig connectivity with SFP/SFP+: up to 10 Gbps per interface, standard across the family, avoiding additional modules or external switches.
- Intel-based architecture: designed for consistent full inspection, without “performance mode” suitable only for benchmarks.
- FireCloud Total Access: ZTNA support from day one, tailored for remote workers and anywhere access with identity and device posture controls.
- Flexible licensing and firmware upgrades: new features via updates and service tier scaling, without hardware replacements.
- Sustainable design: reduced packaging, recyclable materials, energy-conscious options, aligned with the company’s Climate Pledge.
The promise of “performance without compromise” is validated by NetSecOPEN methodologies, which confirm the series maintains consistent throughput under security load.
Five models, broader scenario coverage
The lineup expands from four to five models to cover more use cases:
- M295: targeted at small businesses or regional offices migrating from desktop firewalls.
- M395: suited for multi-site SMBs and retail, balancing performance and budget.
- M495: readiness for compliance in education, healthcare, and other regulated sectors.
- M595: designed for hybrid deployments in manufacturing or public sector.
- M695: flagship model with optional redundant power supplies, for hosted MSP scenarios and heavy data loads.
All devices are managed via WatchGuard Cloud, enabling centralized management, XDR detection with ThreatSync, and Zero Trust Identity through AuthPoint MFA. Practically, an MSP can provision, orchestrate policies, and troubleshoot without switching between multiple consoles or tools.
Native ZTNA from day one: zero trust at the network layer
Integration with FireCloud Total Access allows enabling ZTNA as a factory feature. In an era where remote access is no longer limited to traditional VPNs, WatchGuard’s approach aims to:
- Reduce attack surface by exposing only authorized applications and resources.
- Enforce identity controls (with MFA and contextual policies) and device posture verification before granting access.
- Centralize visibility of who accesses what, when, and from where, aiding in audits and compliance.
The company accompanies the launch with a limited promotion of 10 ZTNA licenses for $0.10 each for Firebox purchases, aiming to accelerate testing and adoption.
Channel positioning: simplifying deployments and costs for MSPs and SMBs
WatchGuard emphasizes that, unlike vendors with complex extensions and hidden costs, the M Series includes core features such as gateway antivirus, spam filtering, and cloud log retention. The company’s own summary: offering predictable pricing and native integration with the platform so that MSPs and SMBs can access enterprise-grade protection without operational overhead.
The message resonates through the channel. “Our customers expect security that adapts to their growth, and the Firebox M Series delivers,” states Maik Lumler, CEO of BOC IT at Security GmbH, a WatchGuard partner. “With performance increments that, at minimum, double previous levels and a smooth migration from earlier models, we meet demand without disruption. It’s a future-ready solution that fits current budgets.”
Industry validation and global availability
Recognized by Gartner, IDC, and other analyst firms, the Firebox line is used by about 17,000 MSPs worldwide, according to WatchGuard. The new M Series is now available through its network of partners. The company frames this announcement alongside the launch of FireCloud Total Access (cloud-based ZTNA) and the new Firebox Tabletop Series, with the aim to protect networks of all sizes with a unified and scalable security approach.
For Jeff Smith, Vice President and General Manager of Nokia Deepfield—citing another reference from the networking and DDoS ecosystem—the industry’s priority is clear: built into the network, not an afterthought. WatchGuard’s own philosophy aligns: a unified platform, identity engine, XDR, and ZTNA converge to simplify architecture that otherwise would require integrating components from multiple vendors.
Jay Lindenauer (WatchGuard): “Significantly higher performance, expanded platform, and integration with FireCloud — the right combination to secure and simplify modern networks.”
What it means for an MSP (or a small business with tight IT)
- Faster deployment: integrated Multi-Gig/SFP+ connectivity reduces boxes and dependencies.
- Fewer licensing headaches: core functions included, with tiers of service to grow seamlessly.
- Cloud-based management: policies, telemetry, and response from a single console.
- Native secure remote access: ZTNA from day one, without parallel projects.
- Performance under inspection: real-world use case, not just benchmark; aligns with NetSecOPEN.
For regulated environments (healthcare, education), positioning the M495 as “compliance-ready” is pertinent: it aligns controls and visibility with what auditors and regulations require for a modern perimeter.
Model overview, coming soon
- Firebox M295 — natural upgrade from desktop to rack for small sites.
- Firebox M395 — Multi-site and retail: performance/budget tuned.
- Firebox M495 — Education, healthcare, regulated sectors: compliance-oriented controls.
- Firebox M595 — Hybird in manufacturing and public sector.
- Firebox M695 — Maximum performance, redundant power option for hosted MSPs and heavy loads.
Beyond just swapping out hardware
What may appear initially as a hardware refresh, the M Series also signals a platform message: the Unified Security Platform, ThreatSync (XDR detection), AuthPoint (MFA and identity), ZTNA in FireCloud, and WatchGuard Cloud as a control panel. In a market where network security competes with SD-WAN, SASE, and Zero Trust offerings, WatchGuard’s proposal is centered on integration: less friction for MSPs and fewer components to maintain for end customers.
Conclusion
The Firebox M Series arrives to double performance, simplify ZTNA, and centralize management without requiring hardware changes with each upgrade. For MSPs and SMBs with growing or hybrid networks, the balance between enterprise capabilities and predictable pricing is key. External validation (NetSecOPEN) and sustainability initiatives round out an offering that aims to reduce operational complexity without compromising security at scale.
FAQs
What are the practical differences from the previous generation?
According to WatchGuard, the M Series offers up to double the performance, integrated Multi-Gig/SFP+ connectivity (up to 10 Gbps per interface), FireCloud Total Access ZTNA from day one, and firmware upgrades without hardware replacements.
How is the new series managed?
All models integrate with WatchGuard Cloud for centralized management, XDR detection (ThreatSync), and Zero Trust identity enforcement via AuthPoint MFA.
What models are available and who are they for?
Five models: M295 (small sites), M395 (multi-site/retail), M495 (regulated sectors), M595 (hybrid industry and government), and M695 (top-tier with redundant power option).
Is there a rollout promotion for ZTNA?
During a limited period, Firebox purchases include access to FireCloud Total Access with a 10 licenses for $0.10 each promotion (subject to conditions).