WatchGuardFirebox T30 / T50

Hardware Guide

Firebox T30, T30-W, T50, T50-W

BS3AE5, BS3AE5W, BS5AE7, BS5AE7W

ii WatchGuard Firebox T30 / T50

ADDRESS505 Fifth Avenue SouthSuite 500Seattle, WA 98104

SUPPORTwww.watchguard.com/supportU.S. and Canada +877.232.3531All Other Countries +1.206.521.3575

SALESU.S. and Canada +1.800.734.9905All Other Countries +1.206.613.0895

ABOUT WATCHGUARDWatchGuard offers affordable, all-in-one network and content security solutions that provide defense-in-depth and help meet regulatory compliance requirements. The WatchGuard Firebox line combines firewall, VPN, GAV, IPS, spam blocking and URL filtering to protect your network from spam, viruses, malware, and intrusions. The new XCS line offers email and web content security combined with data loss prevention. WatchGuard extensible solutions scale to offer right-sized security ranging from small businesses to enterprises with 10,000+ employees. WatchGuard builds simple, reliable, and robust security appliances featuring fast implementation and comprehensive management and reporting tools. Enterprises throughout the world rely on our signature red boxes to maximize security without sacrificing efficiency and productivity.

For more information, please call 206.613.6600 or visit www.watchguard.com.

Copyright and Patent InformationCopyright© 1998–2015 WatchGuard Technologies, Inc. All rights reserved.

WatchGuard, the WatchGuard logo, Firebox, LiveSecurity, and any other mark listed as a trademark in the “Terms of Use” portion of the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies, Inc. and/or it’s subsidiaries in the United States and/or other countries. All other trademarks are the property of their respective owners.

The Power Architecture and Power.org wordmarks and the Power and Power.org logos and related marks are trademarks and service marks licensed by Power.org.

Printed in the United States of America.

Part Number: Rev C

Revised: August 9, 2016

U.S. Patent Nos. 6,493,752; 6,597,661; D473,879. Other Patents Pending.

Notice to UsersInformation in this guide is subject to change without notice. Updates to this guide are posted at:

http://www.watchguard.com/help/documentation/hardware.asp

Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc.

Complete copyright, trademark, patent, and licensing information can be found in the Copyright and Licensing Guide. You can find this document online at: http://www.watchguard.com/help/documentation/

Hardware Guide 1

Hardware Specifications

WatchGuard® Firebox security appliances deliver unparalleled unified threat management, superior performance, ease of use, and value for your small organization or branch office. Our security subscriptions give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-based exploits, and blended threats. From firewall and VPN protection to secure remote access, WatchGuard Firebox appliances support a broad range of network environments.

This guide introduces the Firebox T30 and T50, RoHS-compliant (lead-free) hardware products offered by WatchGuard.

The Firebox T30 and T50 network security appliancesare designed for small organizations and branch offices.

Fireware OS

The Firebox T30 and T50 appliances support WatchGuard’s next generation UTM OS—Fireware® OS. Each Firebox appliance includes Fireware OS and delivers exceptional protection against today's sophisticated threats to make sure that your business stays connected. For more information on the features of Fireware OS, see the current Fireware Help.

2 WatchGuard Firebox T30 / T50

Hardware Specifications

Package Contents

Firebox T30 or T50 appliance Quick Start Guide 1 straight-through Ethernet cable Power supply 1 power cord (US) or 4 power cords (US, AU, EU, UK)

Hardware Description

Hardware Specifications

Interface Specifications

Firebox T30 / T30-W Firebox T50 / T50-W

Processor Freescale P1011 Freescale P1020

Memory: DDR3 1 GB 2 GB

Storage: SD 8 GB 8 GB

Power supply Input Ratings: 90-264VAC, MAX 1.4A@100VAC, 60-50HzOutput Ratings : 48V, Max 60W

Input Ratings: 90-264VAC, MAX 1.4A@100VAC, 60-50HzOutput Ratings: 48V, Max 60W

Dimensions D = 176.1mm (6.93”)W =235.9mm (9.29”)H = 29.5mm (1.16”)

D = 176.1mm (6.93”)W =235.9mm (9.29”)H = 29.5mm (1.16”)

Weight T30 0.5 kg (1.1 U.S. pounds)T30-W 0.54 kg (1.19 U.S. pounds)

T50 0.5 kg (1.1 U.S. pounds)T50-W 0.55 kg (1.2 U.S. pounds)

Network interfaces • 5x 1000Base-TX, RJ45 • Interface 4 supports PoE

(Power over Ethernet), compliant with the IEEE 802.3at standard

• 7x 1000Base-TX, RJ45 • Interface 6 supports PoE

(Power over Ethernet), compliant with the IEEE 802.3at standard

Radio Type and Frequency Band (T30-W and T50-W)

• 2.4 GHz 802.11 b/g/n• 5 GHz 802.11 a/n/ac

• 2.4 GHz 802.11 b/g/n• 5 GHz 802.11 a/n/ac

I/O interfaces • 2 USB 2.0• 1 RJ45 Serial Port

• 2 USB 2.0• 1 RJ45 Serial Port

Hardware Guide 3

Hardware Specifications

Front View

The front panel of the Firebox T30-W.

The front panel of the Firebox T50-W.

Fail OverThe Fail Over indicator is lit when there is a WAN failover from the primary external interface to the backup interface. After the external interface connection fails back to the primary external interface, the indicator is not lit.

WAPOn Firebox T30-W and T50-W models, the WAP indicator is lit when the appliance is activated as a wireless access point or a wireless client. The color indicates the active wireless radio band.

Network interface status indicatorsOn the Firebox T30, the five network interfaces are labeled 4, 3, 2, 1, 0. On the Firebox T50, the seven network interfaces are labeled 6, 5, 4, 3, 2, 1, 0. There are two status indicators for each interface.

StatusThe Status indicator is red when there is a management connection to the device. The Status indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line interface. It is also lit when the device is polled by WatchGuard System Manager.

Indicator Indicator color Wireless Status

WAP Yellow 2.4 GHz radio band

Green 5 GHz radio band

Indicator Indicator color Interface Status

1000 Yellow Link speed: 1000 Mbps

Blinks (speed of blink increases as the data flow increases)

Data sent and received

10/100 Green Link speed: 10 Mbps or 100 Mbps

Blinks (speed of blink increases as the data flow increases)

Data sent and received

4 WatchGuard Firebox T30 / T50

Hardware Specifications

ModeThe Mode indicator shows the status of the external network connection. If the device can connect to the external network and send traffic, the indicator is green. The indicator flashes if the device cannot send traffic to the external network.

AttnThe Attn indicator is yellow when you start the device with the Reset button pressed. For more information, see “Restore Factory Default Settings” on page 9

Power ( )The power indicator is green when the device is on.

Rear View

Rear panel of the Firebox T30.

Rear panel of the Firebox T50.

Network interfacesThe Ethernet interfaces have standard RJ45 connectors and support link speeds of 10, 100, or 1000 Mbps. On each model, the highest numbered interface is a PoE (Power over Ethernet) interface, compliant with the IEEE 802.3at standard.

o On the Firebox T30 and T30-W, these interfaces are labeled 0/WAN, 1/LAN, 2, 3, 4-PoE. o On the Firebox T50 and T50-W, these interfaces are labeled 0/WAN,1/LAN, 2, 3, 4, 5, 6-PoE.

USB interfacesThe device includes two USB interfaces. Connect a USB storage device to use for USB backup and restore, or to store a support snapshot. For more information, see the current Fireware Help.

Serial port (Console)An RJ45 connector for the serial interface. An RJ45 serial cable is not included with the device.

Power switchControls the power supplied to the device. Move the switch to position 1 to power on the device, or position 0 to power it off.

Power inputAn AC power adapter is included with your device. Connect the AC adapter to the device and to a power source. The power supply tip is plus (+) polarity. Use only the supplied AC power adapter.

Reset buttonTo reset the device, use the procedure in “Restore Factory Default Settings” on page 9.

Hardware Guide 5

Hardware Specifications

AC Power Adapter

The AC power adapter supplies power for the Firebox. A Firebox shipped outside the U.S. includes four power cables to connect to the AC power adapter. Use the correct power cable for the power source used in your country.

CautionDo not connect this power adapter to any other WatchGuard product.

Wall Mounting Plate

The wall mounting plate (available separately) enables you to mount the Firebox on a wall in a good location to increase the wireless range.

To install the wall mounting plate:

1. Place the wall mounting plate horizontally against the wall where you want to install the Firebox. 2. Securely screw the wall mounting plate to the wall with four screws 1/8" (3 mm) wide and at least 3/4"

(18 mm) long. 3. Align the two holes on the bottom of the Firebox with the two connection points on the mounting

plate.4. Push the Firebox toward the mounting plate, until the two connection points on the mounting plate

are inside the holes on the bottom of the Firebox. Then press firmly down to seat the device on the plate.

To remove the Firebox from the mounting plate, push the Firebox up slightly, and then pull out, to separate the connection points on the mounting plate from the holes on the bottom of the Firebox.

Environmental Requirements

To safely install your Firebox, we recommend that you:

Install it indoors. Put it in a secure area, such as a locked room, to block the device from people who do not have

permission to use it Connect it to a conditioned power supply to prevent damage from sudden power changes

Other environmental requirements:

Operating temperature 0 – 40°C (32 – 104°F)

Operating relative humidity 5% - 90% Non-condensing

Non-operating temperature –40 – 70°C (–40 – 158°F)

Non-operating relative humidity 5% – 90% Non-condensing

6 WatchGuard Firebox T30 / T50

Hardware Specifications

Safety Notices

All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Read these instructions carefully before you operate the product, and refer to them as needed for continued safe operation of your product.

Product Safety Certification

The WatchGuard product is safety certified for these standards:

CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10 UL 60950-1, Second Edition 2014-10-14 IEC 60950-1, 2005+A1:2009+A2:2013 EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013

Safety Warning

Do not place objects on the power cord. Do not obstruct the ventilation openings. These openings prevent overheating of the Firebox. Never push objects of any kind into slots or openings on this equipment. If you make contact with a

voltage point or short out a part, it can result in fire or electrical shock. When you remove or install an appliance, follow the general installation safety instructions provided

in this Hardware Guide to avoid injury or damage to the device. You must disconnect the AC power cord from the Firebox before you remove the cover of the Firebox

for any reason. There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries

according to the manufacturer’s instructions.

Disclaimer

WatchGuard shall not be held liable if the end user alters, modifies, or repairs any WatchGuard hardware appliance.

Guide de démarrage rapide Kurzanleitung

Guía RápidaGuia de início rápido快速設定手冊

Quick Start Guide

Firebox® T30, T30-W / T50, T50-WHW Models: BS3AE5, BS3AE5W, BS5AE7, BS5AE7W

Guida introduttiva

WatchGuard® Technologies, Inc.

2 3

Activate Your Device1. Go to www.watchguard.com/activate 2. Log in to your WatchGuard account, or create a new account*.

*If you create a new account, return to www.watchguard.com/activate after you finish the account creation process.

3. Type the serial number for your device.4. During activation, select your setup method:

• RapidDeploy QuickStart – Automatically download and apply a QuickStart configuration file to your device, pre-configured with security settings recommended by WatchGuard.

• Classic Activation – Use the Web Setup Wizard to create a basic configuration file for your device.

5. Use the setup directions in this guide that match the method you selected.

English

4 5

RapidDeploy QuickStart Setup1. Connect Your Device and Power it OnMake sure the computers on your network are configured to use DHCP. When you install your Firebox, it will assign an IP address on the 10.0.1.0/24 network.

English

Your Network

Internet

Computer Internet

2. Connect to the Web UIA. Go to https://10.0.1.1:8080B. You can safely ignore any certificate warnings you see because the device uses a

self-signed certificate.C. Log in with the user account admin and the Admin (readwrite) passphrase you set

during activation.Your device has a basic configuration:

• Allows outbound TCP, UDP, and ping traffic• Blocks all unrequested traffic from the external network• Includes optimized security settings

Classic Activation Setup1. Connect Your Device and Power it OnMake sure your computer is configured to use DHCP. When you connect to the Firebox, it will assign an IP address on the 10.0.1.0/24 network.

2. Connect to the Web UIA. Go to https://10.0.1.1:8080B. You can safely ignore certificate warnings, because the device uses a

self-signed certificate.C. Log in with the user name admin and the passphrase readwrite.D. Follow the directions in the Web Setup Wizard to create a basic configuration file for

a new device. Click More Information if you have questions.E. When the Wizard completes, log in to the Web UI with the admin user account and

the Admin (readwrite) passphrase you set during the Wizard.F. Install the Firebox in your network.Your device has a basic configuration:

• Allows outbound TCP, UDP, and ping traffic• Blocks all unrequested traffic from the external network

6 7

About the Device Status LightsFail Over – Lights when there is a WAN failover from the primary external interface to the backup interface.WAP - (Wireless models only) Lights when the device is activated as a wireless access point or as a wireless client.Network interface status indicators – The Firebox T30 has five network interfaces. The Firebox T50 has seven network interfaces. There are two status indicators for each interface.

Indicator Indicator color Interface Status

1000 Yellow Link speed: 1000 Mbps

Blinks* Data sent and received

10/100 Green Link speed: 10 Mbps or 100 Mbps

Blinks* Data sent and received

* Blink speed increases as the data flow increases

Status – Shows when there is a management connection to the device. The Status indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line interface. It is also lit when the device is polled by WatchGuard System Manager.Mode – Shows the status of the external network connection. If the device can connect to the external network and send traffic, the indicator is green. The indicator flashes if the device cannot connect to the external network and send traffic.Attn – Lights when you start the device with the Reset button pressed.Power ( ) – The power indicator is lit when the device is on.

Next StepsCongratulations! You have finished basic setup of your Firebox. You can use the Web UI to view and edit your configuration and to manage and monitor your device. Here are some recommendations to help you get started:

Verify your Internet connectivity• With your Firebox installed in your network, make sure that your users can

successfully browse the Internet.

Upgrade your Firebox to the latest OS versionKeep your Firebox current with the latest version of Fireware OS. To upgrade:

1. In Fireware Web UI, select System > Upgrade OS.2. Select Download and install an upgrade directly from watchguard.com.3. From the drop-down list, select the upgrade version.4. Click Upgrade.

Explore the features and functions of your FireboxBrowse the Web UI to learn more about the management, monitoring, and security features. Help is available in the upper right of each screen.

English

8 9

Reset the Firebox to Factory-Default SettingsIf you ever need to, you can restore your Firebox to its factory-default settings. For example, if you do not know your administrator account passphrase or you want to start over with RapidDeploy QuickStart, you can reset your device.

For more information, see the Hardware Guide for your Firebox, available at:www.watchguard.com/help/documentation/hardware.asp

简体中文激活设备

1. 转到 www.watchguard.com/activate

2. 登录到您的 WatchGuard 帐户，或者创建一个新帐户*。 *如果创建新帐户，请在完成帐户创建过程之后返回到 www.watchguard.com/activate 。

3. 输入设备的序列号。

4. 在激活期间，选择安装方法：

• 快速部署 – 自动下载快速部署配置文件并将其应用到您的设备，其中预配置了 WatchGuard 推荐的安全设置。

• 常规激活 – 使用网页安装向导为您的设备创建基本配置。

5. 请根据您的实际安装方法选择本手册中对应的安装说明。