WatchGuard Firebox T125 with 1-year Standard Support
Delivery and Shipping
Delivery and Shipping
* Fast Delivery Available - Learn more
Easy Returns
Easy Returns
Buy With Confidence. 14 Day Returns. Online. Learn More
Price Match Guarantee
Price Match Guarantee
Found a Better Price? We'll Match It - Guaranteed - Learn More
Description
Description
WatchGuard Firebox T125 with 1-year Standard Support
The WatchGuard Firebox T125 with 1-year Standard Support combines the WGT125000 network security appliance with the WGT1250061 Standard Support licence in one complete business firewall bundle. Designed for small sites, branch offices and remote locations, the T125 provides high-performance firewalling, secure VPN connectivity, SD-WAN, dynamic routing and flexible 2.5GbE networking in a compact tabletop form factor. Its five Ethernet interfaces include one 2.5GbE port and four Gigabit Ethernet ports, while performance reaches up to 2.28Gbps firewall throughput and 1.44Gbps VPN throughput. The included 1-year WatchGuard Standard Support provides 24x7 technical support, software maintenance and access to the appliance's core networking and security functionality for the duration of the subscription.
What Is Included
This listing combines the WatchGuard WGT125000 Firebox T125 appliance and WGT1250061 1-year Standard Support licence as a single bundled product.
- 1 × WatchGuard Firebox T125 Appliance - WGT125000
- 1 × WatchGuard Standard Support for Firebox T125 - 1-year - WGT1250061
- 24x7 WatchGuard Standard technical support
- Software maintenance and firmware updates
- Stateful firewall functionality
- Site-to-site VPN
- Remote-access and mobile VPN
- SD-WAN functionality
- Dynamic routing
- WatchGuard Cloud connectivity
What's Included with 1-year Standard Support
The Firebox T125 bundle includes 1-year WatchGuard Standard Support, providing access to the appliance's essential firewall, VPN, routing and SD-WAN capabilities together with WatchGuard Standard technical support throughout the subscription period.
- Stateful Firewall: Provides stateful packet inspection to monitor active network sessions and control traffic according to configured security policies.
- Site-to-Site VPN: Supports secure encrypted connections between offices, branch sites and other compatible networks.
- Remote Access VPN: Enables secure VPN connectivity for authorised remote and mobile users.
- SD-WAN: Provides multi-WAN failover, dynamic path selection and monitoring of jitter, packet loss and latency.
- Dynamic Routing: Supports RIP, OSPF and BGP for flexible routed network deployments.
- Software Maintenance: Maintains access to supported Fireware software and firmware updates during the active support term.
- Standard 24x7 Support: Provides access to WatchGuard Standard technical support 24 hours a day, 7 days a week for 1-year.
Please Note: Standard Support provides the Firebox's core networking, firewall, VPN and SD-WAN functionality. Subscription security services such as Intrusion Prevention Service (IPS), Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Reputation Enabled Defense and Network Discovery require an applicable WatchGuard Basic Security or Total Security Suite. Advanced services such as APT Blocker and DNSWatch require an applicable Total Security Suite.
Key Features
- 2.28Gbps Firewall Throughput: Delivers high-performance firewall processing for small offices, branch sites and remote locations.
- 1.44Gbps VPN Throughput: Provides strong encrypted VPN performance for secure site-to-site and remote connectivity.
- 510Mbps UTM Throughput: Supports demanding traffic inspection when applicable security services are enabled.
- 725Mbps IPS Throughput: Provides strong intrusion-prevention performance when an applicable IPS subscription is active.
- 880Mbps Antivirus Throughput: Supports high-speed malware scanning when Gateway AntiVirus is enabled through a compatible security subscription.
- 1 × 2.5GbE Port: Provides faster-than-Gigabit connectivity for high-speed WAN or LAN deployments.
- 4 × 1GbE Ports: Four additional Gigabit Ethernet interfaces provide flexible LAN, WAN and network-zone connectivity.
- 4GB DDR4 Memory: Provides the processing resources required for business firewalling, VPN and networking workloads.
- 16GB eMMC Storage: Integrated local storage supports the Firebox operating environment and system functionality.
- High Connection Capacity: Supports up to 3,850,000 concurrent connections and 26,500 new connections per second.
- 30 Branch Office VPN Tunnels: Supports multiple secure site-to-site VPN connections for distributed business networks.
- 30 Mobile VPN Tunnels: Provides secure remote access for supported mobile and remote users.
- Advanced Firewall Capabilities: Includes stateful packet inspection, TLS decryption and proxy firewall functionality.
- Dynamic Routing: Supports RIP, OSPF and BGP protocols.
- High Availability: Supports active/passive and active/active configurations.
- Traffic Management: Provides policy- and application-based traffic management together with QoS functionality.
- WatchGuard Cloud: Supports centralised cloud-based monitoring, configuration and management.
- Compact Tabletop Design: Measures only 230 × 210 × 44mm for convenient deployment in space-constrained environments.
- Low Power Consumption: Maximum power consumption is only 20W.
High-Speed 2.5GbE Networking
The Firebox T125 provides five wired Ethernet interfaces consisting of one 2.5GbE RJ45 port and four 1GbE RJ45 ports. The 2.5GbE interface provides additional bandwidth for faster WAN or LAN connectivity, while the four Gigabit interfaces can be configured for different network segments, trusted networks, optional networks and other supported deployment requirements.
Secure VPN Connectivity
The T125 supports both site-to-site and remote-access VPN connectivity. Site-to-site options include IKEv2, IPSec, policy-based and route-based tunnels and TLS hub-and-spoke configurations, while supported remote-access technologies include IKEv2, IPSec, L2TP and TLS.
SD-WAN and Dynamic Routing
Integrated SD-WAN functionality supports multi-WAN failover, dynamic path selection and measurement of jitter, packet loss and latency. Dynamic routing support includes RIP, OSPF and BGP, providing the flexibility required for more advanced branch and multi-site network deployments.
WatchGuard Cloud Management
The Firebox T125 can be locally managed using Fireware Web UI or WatchGuard System Manager, or centrally managed through WatchGuard Cloud. Cloud management provides a central interface for configuring devices, managing network and security policies and monitoring supported WatchGuard deployments.
Technical Specifications
| Specification | Details |
|---|---|
| Brand | WatchGuard |
| Model | Firebox T125 |
| Bundle SKU | WGT125000 + WGT1250061 |
| Appliance SKU | WGT125000 |
| Support SKU | WGT1250061 |
| Product Type | Tabletop Network Security / Firewall Appliance with 1-year Standard Support |
| Recommended Environment | Small Sites / Branch Offices / Remote Locations |
| Support | WatchGuard Standard Support |
| Support Term | 1-year |
| Support Availability | 24x7 Standard Support |
| Firewall Throughput (UDP 1518) | 2.28Gbps |
| Firewall Throughput (IMIX) | 660Mbps |
| UTM Throughput (Full Scan) | 510Mbps |
| VPN Throughput (UDP 1518) | 1.44Gbps |
| VPN Throughput (IMIX) | 480Mbps |
| HTTPS Inspection (IPS Enabled, Full Scan) | 270Mbps |
| Antivirus Throughput | 880Mbps |
| IPS Throughput (Full Scan) | 725Mbps |
| Network Interfaces | 1 × 2.5GbE RJ45, 4 × 1GbE RJ45 |
| Total Ethernet Ports | 5 |
| Wireless | No |
| I/O Interfaces | 2 × USB-A 3.2, 1 × RJ45 Serial Port |
| Processor | MediaTek MT7988A Quad-Core Cortex-A73 at 1.1GHz |
| Memory | 4GB DDR4 |
| Flash Memory | 4MB QSPI NOR |
| Internal Storage | 16GB eMMC |
| Concurrent Connections | 3,850,000 |
| Concurrent Connections (Proxy) | 125,000 |
| New Connections per Second | 26,500 |
| VLANs | Unlimited |
| Branch Office VPN Tunnels | 30 |
| Mobile VPN Tunnels | 30 |
| Firewall | Stateful Packet Inspection, TLS Decryption, Proxy Firewall |
| Application Proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy |
| Threat Protection | DoS Attacks, Fragmented and Malformed Packets, Blended Threats |
| Site-to-Site VPN | IKEv2, IPSec, Policy-Based and Route-Based Tunnels, TLS Hub-and-Spoke |
| Remote Access VPN | IKEv2, IPSec, L2TP, TLS |
| SD-WAN | Multi-WAN Failover, Dynamic Path Selection, Jitter/Loss/Latency Measurement |
| Dynamic Routing | RIP, OSPF, BGP |
| High Availability | Active/Passive, Active/Active |
| QoS | 802.1Q, DSCP, IP Precedence |
| Traffic Management | By Policy or Application |
| IP Address Assignment | Static, DHCP (Server, Client, Relay), PPPoE, DynDNS |
| NAT | Static, Dynamic, 1:1, IPSec Traversal, Policy-Based |
| Link Aggregation | 802.3ad Dynamic, Static, Active/Backup |
| Logging and Notifications | WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 |
| Reporting | WatchGuard Cloud with Over 100 Pre-Defined Reports, Executive Summary and Visibility Tools |
| Power Input | 12V DC, 2.5A |
| Power Supply | 100–240V AC, 50–60Hz; 12V / 2.5A, 30W Output |
| Maximum Power Consumption | 20W |
| Dimensions (D × W × H) | 230 × 210 × 44mm |
| Operating Temperature | 0°C to 40°C |
| Operating Humidity | Up to 95% RH, Non-Condensing |
| Form Factor | Compact Tabletop |
What's in the Box:
- 1 × WatchGuard Firebox T125 Appliance (WGT125000)
- 1 × 1-year WatchGuard Standard Support Licence (WGT1250061)
- 1 × Cat5e RJ45 Ethernet Cable
- 1 × Power Adapter with Regional Plug Blades
- 4 × Rubber Feet
Please Note: This bundle contains the wired Firebox T125. It does not include integrated Wi-Fi. Customers requiring built-in Wi-Fi 7 should select the separate Firebox T125-W model.
Choose the WatchGuard Firebox T125 with 1-year Standard Support for high-performance wired network security, combining 2.5GbE connectivity, up to 2.28Gbps firewall throughput, 1.44Gbps VPN throughput, flexible SD-WAN and dynamic routing with WatchGuard Standard 24x7 technical support for your small office, branch or remote-site network.
Payment & Security
Payment methods
Your payment information is processed securely. We do not store credit card details nor have access to your credit card information.



