WatchGuard M590.
Midsize Enterprise Hub with Dual Power.
The WatchGuard Firebox M590 is built for midsize and distributed enterprises that deploy the firewall as the security
hub for multiple remote sites. Run a full security stack with substantial VPN tunnel capacity, backed by redundant power
supplies for the reliability hub deployments demand, then manage it in WatchGuard Cloud.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
M590 at a Glance
Performance
20 Gbps firewall throughput (UDP 1518), 3.3 Gbps UTM throughput with
all services active, 1.9 Gbps HTTPS inspection, and 2.2 Gbps VPN (IMIX).
Handles up to 132,000 new connections per second.
Interfaces
8x 1 Gbps RJ45 and 2x 10 Gbps SFP+ built in. One open expansion bay adds 4x1G copper, 4x SFP, 2x SFP+, or
4x 10G multispeed. 1 serial console, 2 USB. Dual redundant power supplies included as standard.
VPN and HA
500 Branch Office VPN and 500 Mobile VPN tunnels. Supports 750 VLANs,
SD-WAN with dynamic path selection, active/passive and active/active HA, link aggregation, and BGP, OSPF,
and RIP dynamic routing.
Security
Full UTM stack: IPS, Application Control, WebBlocker, Gateway AntiVirus, spamBlocker, APT Blocker,
DNSWatch, IntelligentAV, and Reputation Enabled Defense. Supports 250 TDR Host Sensors and built-in PCI
and HIPAA compliance reports.
Looking at the M590 vs. M690?
The M590 is ideal for midsize hub deployments. The M690 adds two 10G multispeed copper ports, 29.7 Gbps
firewall throughput, 4.6 Gbps UTM throughput, 15,000,000 concurrent connections, and 1,000 VPN tunnels,
making it the better choice for larger enterprise hubs. Compare the full lineup to find the right fit.
The M590 is best suited for midsize businesses and distributed enterprises that need a
reliable, high-performance security hub. It handles 500 Branch Office VPN tunnels and 6,000,000
concurrent connections, making it an effective hub in a hub-and-spoke deployment where many branch sites
connect back to a central location.
Yes. The Firebox M590 ships with dual redundant power supplies as standard equipment.
Both are hot-swap capable, so a power supply can be replaced without powering down the appliance, which
is critical for hub deployments where downtime affects all connected sites.
With no security services enabled, the M590 delivers 20 Gbps of firewall throughput
(UDP 1518). With all UTM services active, including antivirus, IPS, and application control, throughput
comes in at 3.3 Gbps. HTTPS inspection with IPS enabled reaches 1.9 Gbps.
The M590 includes eight 1 Gbps RJ45 ports, two 10 Gbps SFP+ ports, one serial console,
and two USB ports. One open expansion bay accepts optional modules for additional port density: 4x1G
copper, 4x SFP, 2x SFP+, or 4x 10G multispeed.
The M590 acts as the central firewall hub, with branch offices connecting via Branch
Office VPN tunnels. It supports 500 BOVPN tunnels and includes SD-WAN for dynamic path selection across
multiple WAN links. Traffic from all spoke sites is inspected at the hub, where the full security stack
runs, before being forwarded to its destination.
Build a Resilient Hub with the Firebox M590.
Firewalls.com carries WatchGuard M590 appliances with same-day shipping on in-stock models. Let our
certified pre-sales advisors help you design the right hub-and-spoke architecture, choose your licensing
tier, and get your organization protected faster.
