The WatchGuard Firebox M395 is WatchGuard's next-generation mid-range firewall, engineered for growing midsize
businesses and distributed organizations with up to 250 users. Handle modern encrypted traffic loads with multi-gig
connectivity built in, then manage it in WatchGuard Cloud with your other Firebox devices.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
M395 at a Glance
Performance
20 Gbps firewall throughput (UDP 1518), 3.0 Gbps UTM throughput with
all services active, 1.90 Gbps HTTPS inspection, and 2.55 Gbps VPN
(IMIX). Supports 6,000,000 concurrent connections.
Interfaces
12x 2.5 Gbps RJ45, 2x 1 Gbps SFP, and 2x 10 Gbps SFP+ built in. No module required for multi-gig
connectivity. 1 serial console, 2 USB-A 3.2. Optional second power supply slot for redundancy.
VPN and HA
350 Branch Office VPN and 350 Mobile VPN tunnels. Unrestricted VLANs,
SD-WAN with dynamic path selection, active/passive and active/active HA, 802.3ad link aggregation, and
BGP, OSPF, and RIP dynamic routing.
Security
Full UTM stack: IPS, Application Control, WebBlocker, Gateway AntiVirus, spamBlocker, APT Blocker,
DNSWatch, IntelligentAV, and Reputation Enabled Defense. Supports 150 EDR Core Host Sensors and full PCI
and HIPAA compliance reporting.
Considering the M395 vs. M495?
The M395 targets midsize offices with up to 250 users and 350 VPN tunnels. The M495 steps up to 500 users,
37 Gbps firewall throughput, and 800 VPN tunnels with additional 10G copper ports. Compare the full range to
find the right balance of performance and budget.
The Firebox M395 is WatchGuard's next-generation mid-range firewall, designed for
midsize organizations with up to 250 users. It replaces the M390 with faster multi-gig ports, higher UTM
throughput, and a larger connection table, while running on the same Fireware operating system and
WatchGuard Cloud platform as the rest of the M Series.
The M395 includes 12 built-in 2.5 Gbps RJ45 ports, 2 dedicated 1 Gbps SFP fiber slots,
and 2 10 Gbps SFP+ fiber uplinks, all standard with no expansion module required. This gives you
flexible multi-speed connectivity for modern campus and branch environments.
With antivirus, IPS, and application control all active, the M395 delivers 3.0 Gbps of
UTM throughput. HTTPS inspection with IPS enabled reaches 1.90 Gbps, and antivirus throughput alone
reaches 5.90 Gbps.
The M395 includes one primary power supply and one optional CRPS redundant power slot.
Adding a second supply provides hot-swap redundancy, which is useful for environments that require
maximum uptime in a midsize or branch deployment.
The M395 supports 350 Branch Office VPN tunnels and 350 Mobile VPN sessions using
IKEv2, IPSec, L2TP, and TLS. It handles hub-and-spoke and policy-based routing topologies, making it a
capable hub for a distributed organization with many remote sites.
Power Your Midsize Network with the M395.
Our certified advisors at Firewalls.com can help you size the M395 for your specific environment, select
the right licensing tier, and bundle the services you need. Same-day shipping is available on in-stock M395
models. Contact us now for a quote.
