WatchGuard Firebox T40 - First Impressions and unboxing

The WatchGuard T40 is my default go-to firewall for many small remote offices. It's also to the smallest model I suggest. Perfect for small (20 users or less) environments that want a no-compromise UTM firewall protection when purchased with the optional Total Security Suite. This refresh, available in June 2020, uses a multi-level approach to protecting your infrastructure.
This box offers these optional services:
Intrusion Prevention
Intrusion Prevention Service uses continually updated signatures to scan traffic on all major protocols, providing real-time protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows.
Reputation-Based Threat Prevention
A powerful, cloud-based web reputation service that aggregates data from multiple feeds to provide real-time protection from malicious sites and botnets, while dramatically improving web processing overhead.
URL Filtering
In addition to automatically blocking known malicious sites, WatchGuard WebBlocker delivers granular content and URL filtering tools to block inappropriate content, conserve network bandwidth, and increase employee productivity.
Spam Prevention
Real-time, continuous, and highly reliable protection from spam and phishing attempts. WatchGuard spamBlocker is so fast and effective, it can review up to 4 billion messages per day, while providing effective protection regardless of the language, format, or content of the message
Gateway AntiVirus
Leverage our continuously updated signatures to identify and block known spyware, viruses, trojans, worms, rogueware and blended threats - including new variants of known viruses. At the same time, heuristic analysis tracks down suspicious data constructions and actions to make sure unknown viruses don’t slip by
Application Control
Allow, block, or restrict access to applications based on a user’s department, job function, and time of day. It’s never been easier to decide who, what, when, where, why and how applications are used on your network.
Network Discovery
A subscription-based service for Firebox appliances that generates a visual map of all nodes on your network, making it easy to see where you may be at risk. It helps ensure only authorized devices are connected while detecting all open ports and protocols
APT Blocker
APT Blocker uses an award-winning next-generation sandbox to detect and stop the most sophisticated attacks including ransomware, zero-day threats, and other advanced malware designed to evade traditional network security defenses.
Data Loss Prevention
Prevent data breaches and enforce compliance by scanning text and files to detect sensitive information attempting to exit your network, whether it is transferred via email, web, or FTP.
Threat Detection and Response
Security data collected from the Firebox and WatchGuard Host Sensor is correlated by enterprise-grade threat intelligence to detect, prioritize, and enable immediate action against malware attacks.
IntelligentAV
IntelligentAV is a signature-less anti-malware solution that relies on artificial intelligence to automate malware discovery. Leveraging deep statistical analysis, it can classify current and future malware in mere seconds.
Access Portal
Access Portal provides a central location for access to Cloud-hosted applications, and secure, clientless access to internal resources with RDP and SSH.
DNSWatch
Reduce malware infections by detecting and blocking malicious DNS requests, redirecting users to a safe page with information to reinforce security best practices.
Visit Ctobob.com for more information!
Subscribe bit.ly/2y71jrK

[@yeswecan4006]

Thank you for making this video, I have been trying to look at what new things WatchGuard have brought since this the T40 announced.

[@BobPellerin]

Glad it was helpful!

[@rhdtv2002]

I like the old watchguards where lan0 lan1 lan2 were actually just part of the dhcp pool automatically..so if u set the dhcp 192.168.10.2- .254 - all those lan ports automatically pulled the IP from that..

[@alchemist3765]

You can do this using Bridge settings. The very old desktop models had few firewall interfaces and treated them as switch ports. The new desktop models, for a long time, have more interfaces and by default treat each interface as a router port.