WatchGuard Firebox T125 with 1-year Standard Support The WatchGuard Firebox T125 with 1-year Standard Support combines the WGT125000 network security appliance with the WGT1250061 Standard Support licence in one complete business firewall bundle. Designed for small sites, branch offices and remote locations, the T125 provides high-performance firewalling, secure VPN connectivity, SD-WAN, dynamic routing and flexible 2.5GbE networking in a compact tabletop form factor. Its five Ethernet interfaces include one 2.5GbE port and four Gigabit Ethernet ports, while performance reaches up to 2.28Gbps firewall throughput and 1.44Gbps VPN throughput. The included 1-year WatchGuard Standard Support provides 24x7 technical support, software maintenance and access to the appliance's core networking and security functionality for the duration of the subscription. What Is Included This listing combines the WatchGuard WGT125000 Firebox T125 appliance and WGT1250061 1-year Standard Support licence as a single bundled product. 1 × WatchGuard Firebox T125 Appliance - WGT125000 1 × WatchGuard Standard Support for Firebox T125 - 1-year - WGT1250061 24x7 WatchGuard Standard technical support Software maintenance and firmware updates Stateful firewall functionality Site-to-site VPN Remote-access and mobile VPN SD-WAN functionality Dynamic routing WatchGuard Cloud connectivity What's Included with 1-year Standard Support The Firebox T125 bundle includes 1-year WatchGuard Standard Support , providing access to the appliance's essential firewall, VPN, routing and SD-WAN capabilities together with WatchGuard Standard technical support throughout the subscription period. Stateful Firewall: Provides stateful packet inspection to monitor active network sessions and control traffic according to configured security policies. Site-to-Site VPN: Supports secure encrypted connections between offices, branch sites and other compatible networks. Remote Access VPN: Enables secure VPN connectivity for authorised remote and mobile users. SD-WAN: Provides multi-WAN failover, dynamic path selection and monitoring of jitter, packet loss and latency. Dynamic Routing: Supports RIP, OSPF and BGP for flexible routed network deployments. Software Maintenance: Maintains access to supported Fireware software and firmware updates during the active support term. Standard 24x7 Support: Provides access to WatchGuard Standard technical support 24 hours a day, 7 days a week for 1-year. Please Note: Standard Support provides the Firebox's core networking, firewall, VPN and SD-WAN functionality. Subscription security services such as Intrusion Prevention Service (IPS), Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Reputation Enabled Defense and Network Discovery require an applicable WatchGuard Basic Security or Total Security Suite. Advanced services such as APT Blocker and DNSWatch require an applicable Total Security Suite. Key Features 2.28Gbps Firewall Throughput: Delivers high-performance firewall processing for small offices, branch sites and remote locations. 1.44Gbps VPN Throughput: Provides strong encrypted VPN performance for secure site-to-site and remote connectivity. 510Mbps UTM Throughput: Supports demanding traffic inspection when applicable security services are enabled. 725Mbps IPS Throughput: Provides strong intrusion-prevention performance when an applicable IPS subscription is active. 880Mbps Antivirus Throughput: Supports high-speed malware scanning when Gateway AntiVirus is enabled through a compatible security subscription. 1 × 2.5GbE Port: Provides faster-than-Gigabit connectivity for high-speed WAN or LAN deployments. 4 × 1GbE Ports: Four additional Gigabit Ethernet interfaces provide flexible LAN, WAN and network-zone connectivity. 4GB DDR4 Memory: Provides the processing resources required for business firewalling, VPN and networking workloads. 16GB eMMC Storage: Integrated local storage supports the Firebox operating environment and system functionality. High Connection Capacity: Supports up to 3,850,000 concurrent connections and 26,500 new connections per second. 30 Branch Office VPN Tunnels: Supports multiple secure site-to-site VPN connections for distributed business networks. 30 Mobile VPN Tunnels: Provides secure remote access for supported mobile and remote users. Advanced Firewall Capabilities: Includes stateful packet inspection, TLS decryption and proxy firewall functionality. Dynamic Routing: Supports RIP, OSPF and BGP protocols. High Availability: Supports active/passive and active/active configurations. Traffic Management: Provides policy- and application-based traffic management together with QoS functionality. WatchGuard Cloud: Supports centralised cloud-based monitoring, configuration and management. Compact Tabletop Design: Measures only 230 × 210 × 44mm for convenient deployment in space-constrained environments. Low Power Consumption: Maximum power consumption is only 20W. High-Speed 2.5GbE Networking The Firebox T125 provides five wired Ethernet interfaces consisting of one 2.5GbE RJ45 port and four 1GbE RJ45 ports. The 2.5GbE interface provides additional bandwidth for faster WAN or LAN connectivity, while the four Gigabit interfaces can be configured for different network segments, trusted networks, optional networks and other supported deployment requirements. Secure VPN Connectivity The T125 supports both site-to-site and remote-access VPN connectivity. Site-to-site options include IKEv2, IPSec, policy-based and route-based tunnels and TLS hub-and-spoke configurations, while supported remote-access technologies include IKEv2, IPSec, L2TP and TLS. SD-WAN and Dynamic Routing Integrated SD-WAN functionality supports multi-WAN failover, dynamic path selection and measurement of jitter, packet loss and latency. Dynamic routing support includes RIP, OSPF and BGP, providing the flexibility required for more advanced branch and multi-site network deployments. WatchGuard Cloud Management The Firebox T125 can be locally managed using Fireware Web UI or WatchGuard System Manager, or centrally managed through WatchGuard Cloud. Cloud management provides a central interface for configuring devices, managing network and security policies and monitoring supported WatchGuard deployments. Technical Specifications Specification Details Brand WatchGuard Model Firebox T125 Bundle SKU WGT125000 + WGT1250061 Appliance SKU WGT125000 Support SKU WGT1250061 Product Type Tabletop Network Security / Firewall Appliance with 1-year Standard Support Recommended Environment Small Sites / Branch Offices / Remote Locations Support WatchGuard Standard Support Support Term 1-year Support Availability 24x7 Standard Support Firewall Throughput (UDP 1518) 2.28Gbps Firewall Throughput (IMIX) 660Mbps UTM Throughput (Full Scan) 510Mbps VPN Throughput (UDP 1518) 1.44Gbps VPN Throughput (IMIX) 480Mbps HTTPS Inspection (IPS Enabled, Full Scan) 270Mbps Antivirus Throughput 880Mbps IPS Throughput (Full Scan) 725Mbps Network Interfaces 1 × 2.5GbE RJ45, 4 × 1GbE RJ45 Total Ethernet Ports 5 Wireless No I/O Interfaces 2 × USB-A 3.2, 1 × RJ45 Serial Port Processor MediaTek MT7988A Quad-Core Cortex-A73 at 1.1GHz Memory 4GB DDR4 Flash Memory 4MB QSPI NOR Internal Storage 16GB eMMC Concurrent Connections 3,850,000 Concurrent Connections (Proxy) 125,000 New Connections per Second 26,500 VLANs Unlimited Branch Office VPN Tunnels 30 Mobile VPN Tunnels 30 Firewall Stateful Packet Inspection, TLS Decryption, Proxy Firewall Application Proxies HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy Threat Protection DoS Attacks, Fragmented and Malformed Packets, Blended Threats Site-to-Site VPN IKEv2, IPSec, Policy-Based and Route-Based Tunnels, TLS Hub-and-Spoke Remote Access VPN IKEv2, IPSec, L2TP, TLS SD-WAN Multi-WAN Failover, Dynamic Path Selection, Jitter/Loss/Latency Measurement Dynamic Routing RIP, OSPF, BGP High Availability Active/Passive, Active/Active QoS 802.1Q, DSCP, IP Precedence Traffic Management By Policy or Application IP Address Assignment Static, DHCP (Server, Client, Relay), PPPoE, DynDNS NAT Static, Dynamic, 1:1, IPSec Traversal, Policy-Based Link Aggregation 802.3ad Dynamic, Static, Active/Backup Logging and Notifications WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 Reporting WatchGuard Cloud with Over 100 Pre-Defined Reports, Executive Summary and Visibility Tools Power Input 12V DC, 2.5A Power Supply 100–240V AC, 50–60Hz; 12V / 2.5A, 30W Output Maximum Power Consumption 20W Dimensions (D × W × H) 230 × 210 × 44mm Operating Temperature 0°C to 40°C Operating Humidity Up to 95% RH, Non-Condensing Form Factor Compact Tabletop What's in the Box: 1 × WatchGuard Firebox T125 Appliance (WGT125000) 1 × 1-year WatchGuard Standard Support Licence (WGT1250061) 1 × Cat5e RJ45 Ethernet Cable 1 × Power Adapter with Regional Plug Blades 4 × Rubber Feet Please Note: This bundle contains the wired Firebox T125 . It does not include integrated Wi-Fi. Customers requiring built-in Wi-Fi 7 should select the separate Firebox T125-W model. Choose the WatchGuard Firebox T125 with 1-year Standard Support for high-performance wired network security, combining 2.5GbE connectivity, up to 2.28Gbps firewall throughput, 1.44Gbps VPN throughput, flexible SD-WAN and dynamic routing with WatchGuard Standard 24x7 technical support for your small office, branch or remote-site network.