WatchGuard M295.
Multi-Gig Protection for Small Sites.
The WatchGuard Firebox M295 brings multi-gigabit port density to small branch offices and remote sites, with
4x2.5G and 4x1G ports built in alongside dual SFP+ fiber slots. It delivers 7.9 Gbps firewall throughput and
1.85 Gbps UTM throughput with all security services running, and supports 100 Branch Office VPN tunnels for a
growing distributed network. Cloud-managed through WatchGuard Cloud with zero-touch deployment, the M295 is
the next-generation choice for compact office security.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
M295 at a Glance
Performance
7.9 Gbps firewall throughput (UDP 1518), 1.85 Gbps UTM throughput with
all services active, 1.12 Gbps HTTPS inspection, and 1.80 Gbps VPN
(IMIX). Supports 6,000,000 concurrent connections.
Interfaces
4x 2.5 Gbps RJ45, 4x 1 Gbps RJ45, and 2x SFP+ ports built in. 1 serial console, 2 USB-A 3.2. Multi-gig
connectivity with no expansion module required.
VPN and HA
100 Branch Office VPN and 100 Mobile VPN tunnels. Unrestricted VLANs,
SD-WAN with dynamic path selection, active/passive and active/active high availability, and 802.3ad link
aggregation.
Security
Full UTM suite: IPS, Application Control, WebBlocker, Gateway AntiVirus, spamBlocker, APT Blocker,
DNSWatch, IntelligentAV, and Reputation Enabled Defense. Supports 75 EDR Core Host Sensors and built-in
compliance reports.
Comparing the M295 to the M290?
The M295 is the next-generation successor to the M290, offering multi-gig ports, higher UTM throughput, and
a larger concurrent connection table. If your office has moved to a faster ISP or has growing video and
cloud traffic, the M295 is the natural upgrade. Compare the full M Series lineup to find your ideal fit.
The M295 is the next-generation replacement for the M290. It delivers higher UTM
throughput (1.85 Gbps vs. 1.18 Gbps), a larger concurrent connection table (6,000,000 vs. 3,500,000),
and built-in multi-gig ports (4x2.5G and 4x1G plus 2x SFP+), while the M290 uses 8x1G ports and an
expansion bay. The M295 also supports 100 BOVPN tunnels compared to 75 on the M290.
The M295 is designed for small sites and remote offices with up to about 100 users.
With 1.85 Gbps of UTM throughput and 100 Branch Office VPN tunnels, it comfortably handles a compact
modern office with room to grow.
Yes. The M295 includes 4x 2.5 Gbps RJ45 ports, 4x 1 Gbps RJ45 ports, and 2x SFP+ fiber
ports built into the base appliance, with no expansion module required. This gives you multi-gig
connectivity out of the box for modern campus and branch environments.
The M295 supports IKEv2, IPSec, L2TP, and TLS for both site-to-site and remote access
VPN. It handles 100 Branch Office VPN tunnels and 100 Mobile VPN sessions, with hub-and-spoke topology
support and both route-based and policy-based tunnel options.
Yes. The M295 works with WatchGuard Cloud for zero-touch provisioning. You configure
the device in the cloud portal, ship the appliance to the remote site, and it pulls its settings
automatically on first boot. No on-site technician is needed at the time of installation.
Upgrade Your Branch Office Security Today.
Firewalls.com stocks the M295 with same-day shipping on orders placed by 3:00 PM EST. Our certified
pre-sales team can help you choose the right licensing tier and bundle your subscription services for the
best value. Request a quote or chat with us now.
The WatchGuard Firebox M295 is a next-generation rackmount UTM firewall built for small businesses that need high-speed threat inspection, encrypted traffic scanning, and centralized cloud management.
The WatchGuard Firebox M295 is a next-generation rackmount UTM firewall built for small businesses that need high-speed threat inspection, encrypted traffic scanning, and centralized cloud management.
The WatchGuard Firebox M295 is a next-generation rackmount UTM firewall built for small businesses that need high-speed threat inspection, encrypted traffic scanning, and centralized cloud management.
