WatchGuard Firebox T125 with 1-year Basic Security Suite
Delivery and Shipping
Delivery and Shipping
* Fast Delivery Available - Learn more
Easy Returns
Easy Returns
Buy With Confidence. 14 Day Returns. Online. Learn More
Price Match Guarantee
Price Match Guarantee
Found a Better Price? We'll Match It - Guaranteed - Learn More
Description
Description
WatchGuard Firebox T125 with 1-year Basic Security Suite
The WatchGuard Firebox T125 with 1-Year Basic Security Suite combines the WGT125000 network security appliance with the WGT1250071 Basic Security Suite subscription in one complete business firewall bundle. Designed for small sites, branch offices and remote locations, the T125 provides high-performance firewalling, VPN, SD-WAN and flexible 2.5GbE networking, while the included Basic Security Suite adds essential threat-protection services including Intrusion Prevention Service (IPS), Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Reputation Enabled Defense and Network Discovery. The bundle also includes WatchGuard Standard 24x7 technical support for the 1-year subscription term.
What Is Included
This listing combines the WatchGuard WGT125000 Firebox T125 appliance and WGT1250071 1-Year Basic Security Suite subscription as a single bundled product.
- 1 × WatchGuard Firebox T125 Appliance - WGT125000
- 1 × WatchGuard Basic Security Suite for Firebox T125 - 1-year - WGT1250071
- WatchGuard Standard 24x7 technical support
- Software maintenance and firmware updates
- Stateful firewall functionality
- Site-to-site VPN
- Remote-access and mobile VPN
- SD-WAN functionality
- Intrusion Prevention Service (IPS)
- Application Control
- WebBlocker
- spamBlocker
- Gateway AntiVirus
- Reputation Enabled Defense
- Network Discovery
- WatchGuard Cloud visibility
What's Included with 1-Year Basic Security
The WatchGuard Basic Security Suite expands the Firebox T125's core firewall, VPN and SD-WAN capabilities with essential threat-protection services designed to help protect users, applications and network traffic against common cyber threats.
- Stateful Firewall: Provides stateful packet inspection to monitor active sessions and control network traffic according to configured security policies.
- VPN: Supports secure site-to-site and remote-access VPN connectivity for branch offices and mobile users.
- SD-WAN: Enables intelligent WAN connectivity including multi-WAN failover, dynamic path selection and WAN-quality monitoring.
- Intrusion Prevention Service (IPS): Monitors network traffic and helps detect and block known exploits and intrusion attempts.
- Application Control: Provides visibility into application usage and enables policy-based control over supported applications.
- WebBlocker: Helps restrict access to malicious, inappropriate or unwanted websites using web-content and URL filtering.
- spamBlocker: Helps protect users against unwanted email, spam and phishing attempts.
- Gateway AntiVirus: Scans supported traffic for viruses, spyware, trojans, worms and other known malware.
- Reputation Enabled Defense: Uses reputation intelligence to help identify and block known malicious web destinations.
- Network Discovery: Provides visibility into devices and nodes connected to the protected network.
- WatchGuard Cloud Visibility: Provides cloud-based visibility, logging and reporting capabilities for supported deployments.
- Standard 24x7 Support: Provides access to WatchGuard Standard technical support 24 hours a day, 7 days a week for the duration of the 1-year subscription.
Please Note: Advanced Total Security services such as APT Blocker and DNSWatch are not part of the Basic Security Suite and require an applicable WatchGuard Total Security Suite subscription.
Key Features
- 2.28Gbps Firewall Throughput: Delivers strong firewall performance for small offices, branch sites and remote locations.
- 1.44Gbps VPN Throughput: Supports secure encrypted connectivity between sites and remote users.
- 510Mbps UTM Throughput: Provides strong full-scan performance when supported security services are active.
- 725Mbps IPS Throughput: Supports intrusion-prevention inspection through the included Basic Security IPS service.
- 880Mbps Antivirus Throughput: Supports malware scanning through the included Gateway AntiVirus service.
- 1 × 2.5GbE Port: Provides faster-than-Gigabit connectivity for high-speed WAN or LAN deployments.
- 4 × 1GbE Ports: Four additional Gigabit Ethernet interfaces provide flexible network-zone connectivity.
- 4GB DDR4 Memory: Provides the processing resources required for business firewall, VPN and security workloads.
- 16GB eMMC Storage: Integrated storage supports the Firebox operating environment and system functionality.
- High Connection Capacity: Supports up to 3,850,000 concurrent connections and up to 26,500 new connections per second.
- 30 Branch Office VPN Tunnels: Supports multiple secure site-to-site VPN connections for distributed networks.
- 30 Mobile VPN Tunnels: Provides secure remote access for supported mobile and remote users.
- Advanced Firewall Capabilities: Includes stateful packet inspection, TLS decryption and proxy firewall functionality.
- Dynamic Routing: Supports RIP, OSPF and BGP routing protocols.
- High Availability: Supports active/passive and active/active configurations.
- Traffic Management: Supports QoS, policy- or application-based traffic management and link aggregation.
- WatchGuard Cloud: Supports centralised cloud-based visibility, logging and management.
- Compact Tabletop Design: Measures 230 × 210 × 44mm for convenient deployment in smaller environments.
- Low Power Consumption: Maximum power consumption is only 20W.
Basic Security Suite Services
| Security Service | Included |
|---|---|
| Stateful Firewall | Yes |
| VPN | Yes |
| SD-WAN | Yes |
| Intrusion Prevention Service (IPS) | Yes |
| Application Control | Yes |
| WebBlocker | Yes |
| spamBlocker | Yes |
| Gateway AntiVirus | Yes |
| Reputation Enabled Defense | Yes |
| Network Discovery | Yes |
| APT Blocker | No - Total Security Required |
| DNSWatch | No - Total Security Required |
| WatchGuard Cloud Visibility | Yes |
| Technical Support | Standard 24x7 |
Technical Specifications
| Specification | Details |
|---|---|
| Brand | WatchGuard |
| Model | Firebox T125 |
| Bundle SKU | WGT125000 + WGT1250071 |
| Appliance SKU | WGT125000 |
| Security Suite SKU | WGT1250071 |
| Product Type | Tabletop Network Security / Firewall Appliance with 1-Year Basic Security Suite |
| Recommended Environment | Small Sites / Branch Offices / Remote Locations |
| Security Subscription | WatchGuard Basic Security Suite |
| Subscription Term | 1-year |
| Support Availability | Standard 24x7 Support |
| Firewall Throughput (UDP 1518) | 2.28Gbps |
| Firewall Throughput (IMIX) | 660Mbps |
| UTM Throughput (Full Scan) | 510Mbps |
| VPN Throughput (UDP 1518) | 1.44Gbps |
| VPN Throughput (IMIX) | 480Mbps |
| HTTPS Inspection (IPS Enabled, Full Scan) | 270Mbps |
| Antivirus Throughput | 880Mbps |
| IPS Throughput (Full Scan) | 725Mbps |
| Network Interfaces | 1 × 2.5GbE RJ45, 4 × 1GbE RJ45 |
| Total Ethernet Ports | 5 |
| Wireless | No |
| I/O Interfaces | 2 × USB-A 3.2, 1 × RJ45 Serial Port |
| Processor | MediaTek MT7988A Quad-Core Cortex-A73 at 1.1GHz |
| Memory | 4GB DDR4 |
| Flash Memory | 4MB QSPI NOR |
| Internal Storage | 16GB eMMC |
| Concurrent Connections | 3,850,000 |
| Concurrent Connections (Proxy) | 125,000 |
| New Connections per Second | 26,500 |
| VLANs | Unlimited |
| Branch Office VPN Tunnels | 30 |
| Mobile VPN Tunnels | 30 |
| Firewall | Stateful Packet Inspection, TLS Decryption, Proxy Firewall |
| Application Proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy |
| Site-to-Site VPN | IKEv2, IPSec, Policy-Based and Route-Based Tunnels, TLS Hub-and-Spoke |
| Remote Access VPN | IKEv2, IPSec, L2TP, TLS |
| SD-WAN | Multi-WAN Failover, Dynamic Path Selection, Jitter/Loss/Latency Measurement |
| Dynamic Routing | RIP, OSPF, BGP |
| High Availability | Active/Passive, Active/Active |
| QoS | 802.1Q, DSCP, IP Precedence |
| Traffic Management | By Policy or Application |
| Logging and Notifications | WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 |
| Power Input | 12V DC, 2.5A |
| Power Supply | 100–240V AC, 50–60Hz; 12V / 2.5A, 30W Output |
| Maximum Power Consumption | 20W |
| Dimensions (D × W × H) | 230 × 210 × 44mm |
| Weight | 2.06kg |
| Operating Temperature | 0°C to 40°C |
| Operating Humidity | 0% to 95% RH, Non-Condensing |
| MTBF | 846,422 Hours |
What's in the Box:
- 1 × WatchGuard Firebox T125 Appliance (WGT125000)
- 1 × 1-Year WatchGuard Basic Security Suite Subscription (WGT1250071)
- 1 × Cat5e RJ45 Ethernet Cable
- 1 × Power Adapter with Regional Plug Blades
- 4 × Rubber Feet
Please Note: This bundle contains the wired Firebox T125 and does not include integrated Wi-Fi. Customers requiring built-in Wi-Fi 7 should select the separate Firebox T125-W model.
Choose the WatchGuard Firebox T125 with 1-Year Basic Security Suite for high-performance wired network security combining 2.5GbE connectivity, up to 2.28Gbps firewall throughput, secure VPN and SD-WAN functionality with essential IPS, malware protection, application control, web filtering and network visibility services for your small office, branch or remote-site network.
Payment & Security
Payment methods
Your payment information is processed securely. We do not store credit card details nor have access to your credit card information.



