WatchGuard M390.
Mid-Range Power for Growing Organizations.
The WatchGuard Firebox M390 is a 1U rack-mount firewall for small to midsize businesses that need a full security stack
without enterprise pricing. Run strong throughput with all services active, plus ample VPN capacity, then manage it in
WatchGuard Cloud right alongside your other Firebox devices.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
M390 at a Glance
Performance
18 Gbps firewall throughput (UDP 1518), 2.4 Gbps UTM throughput with
all services active, 1.32 Gbps HTTPS inspection, and 1.8 Gbps VPN
(IMIX). Handles up to 98,000 new connections per second.
Interfaces
8 built-in 1 Gbps RJ45 ports, 1 serial console, 2 USB. One open expansion bay accepts 4x1G copper, 4x
SFP, 2x SFP+, or 4x 10G multispeed modules. Same 1U chassis as the M290, with higher-performance hardware.
VPN and HA
250 Branch Office VPN and 250 Mobile VPN tunnels. Supports 250 VLANs,
SD-WAN with dynamic path selection, active/passive and active/active high availability, link aggregation,
and BGP, OSPF, and RIP dynamic routing.
Security
Full UTM suite: IPS, Application Control, WebBlocker, Gateway AntiVirus, spamBlocker, APT Blocker,
DNSWatch, IntelligentAV, and Reputation Enabled Defense. Supports 150 TDR Host Sensors and built-in PCI
and HIPAA compliance reports.
Deciding Between the M390 and M395?
The M390 uses eight 1G ports and is well suited for traditional Gigabit networks, while the M395 offers
twelve 2.5G ports and higher UTM throughput on a next-generation platform. Use the M Series comparison page
to weigh throughput, interface speed, and VPN capacity side by side.
The M390 is designed for small to midsize businesses with around 150 to 250 users who
need solid throughput, a full UTM security stack, and capacity for VPN-connected branch sites. With 18
Gbps firewall throughput and 2.4 Gbps UTM throughput, it handles a busy office without bottlenecking on
security services.
The M390 delivers significantly more performance than the M290: 18 Gbps firewall
throughput versus 5.8 Gbps, 2.4 Gbps UTM versus 1.18 Gbps, and 250 BOVPN tunnels versus 75. Both use the
same 1U chassis with 8x1G ports and a shared expansion module format, so the step up is entirely in
processing power and connection capacity.
Yes. The M390 delivers 1.32 Gbps HTTPS inspection throughput with IPS enabled, which
suits offices where a significant portion of traffic is encrypted. TLS decryption and re-encryption are
handled inline without requiring a separate appliance.
The M390 has one open expansion bay that accepts four types of optional modules: 4x1G
copper, 4x SFP fiber, 2x SFP+ fiber, or 4x 10G multispeed ports. This means you can add 10G uplink
capacity or additional fiber ports as your infrastructure evolves, without replacing the firewall.
The M395 is the next-generation successor to the M390. It features twelve 2.5G ports
instead of eight 1G ports, higher UTM throughput (3.0 Gbps vs. 2.4 Gbps), a larger concurrent connection
table (6,000,000 vs. 4,500,000), and greater VPN capacity (350 tunnels vs. 250). The M395 runs on
updated Fireware 2025.1 hardware, reflecting WatchGuard's current-generation platform.
Get the Right Mid-Range Firewall for Your Office.
Firewalls.com carries the full WatchGuard M Series lineup with same-day shipping on in-stock models. Our
pre-sales team can help you choose the right Firebox M390 bundle, compare it to the M395, and configure the
licensing tier that fits your budget and security requirements.
