Shipping included*
Exclusions
Additional shipping fees may apply in rare circumstances for deliveries outside standard service areas. In most cases, this only potentially affects shipments to the Northwest Territories and Yukon, as well as certain heavy or oversized items.
WatchGuard WGT125000 Firebox T125 Network Security/Firewall Appliance - 2. 28 Gbit/s Firewall Throughput - 5 Ports - 1 x 2. 5GbE - 4 x 1GbE - VPN - IPS
Business volume discounts
Technical guidance
Preparation & staging
QC · ON · AB · BC
Product Features
Technical Overview
The WatchGuard Firebox T125 is built on a policy management framework that enforces granular security controls. Its stateful inspection firewall examines packet headers and session states, while the proxy blocking feature filters application-layer traffic. TLS decryption allows inspection of encrypted HTTPS traffic without breaking security protocols. The appliance handles up to 26,500 new connections per second, ensuring smooth operation even under moderate loads.
VPN throughput reaches 184.32 MB/s, enabling efficient site-to-site and remote access tunnels. IPS throughput is rated at 90.63 MB/s, capable of detecting and preventing intrusions in real time. The device supports multiple data link protocols including L2TP, HTTPS, HTTP, FTP, TCP/UDP, and SMTPS, ensuring broad compatibility with existing network infrastructure.
This section brings together practical product details such as Functionality, Firewall Protection Supported, Firewall Throughput, Total Number of Ports, so buyers can judge configuration, deployment fit, and day-to-day suitability with less guesswork.
Key Product Advantages
The Firebox T125 delivers a strong balance of security performance and physical efficiency in a compact desktop form factor. Its 2.5 GbE uplink port provides higher bandwidth than typical 1 GbE firewalls, making it ideal for businesses with growing traffic demands. The comprehensive suite of threat protection features—including advanced malware, ransomware, and phishing defense—ensures that networks remain protected against evolving cyber threats without requiring multiple standalone appliances.
The appliance is also designed for easy management and deployment. With five network ports (one 2.5 GbE and four 1 GbE), IT administrators can segment traffic for different security zones or WAN/LAN configurations. The low power consumption of 20 W reduces operational costs, and the compact dimensions (1.73" x 9.06" x 8.27") allow flexible placement on a desk or shelf.
Edge Security Ready
The T125 is purpose-built for edge and branch office environments where space and power are limited but security requirements are high. Its throughput capacity and VPN support enable secure connectivity to headquarters and cloud resources.
Threat Protection Suite
Integrated protections include antivirus, anti-phishing, botnet detection, DLP, ransomware, and advanced threat protection. These work together to catch threats at multiple stages of the attack lifecycle.
Deployment / Use Cases
The WatchGuard Firebox T125 is ideal for protecting small business networks, remote offices, and retail locations that need enterprise-grade security without a large footprint. It can be deployed as a primary firewall at the network edge, handling internet-facing traffic and enforcing security policies. Its VPN capabilities allow it to serve as a secure gateway for remote workers connecting via IKEv2, IPSec, or L2TP tunnels, or to establish site-to-site VPNs between branch locations and a central data center.
Typical use cases include securing a branch office with up to 50 users, providing content filtering and threat protection for a retail chain, or acting as a VPN concentrator for remote access. The compact form factor and low power consumption make it suitable for environments where rack space is unavailable or where silent operation is desired. Its manageable architecture integrates with WatchGuard's cloud-based management platform for centralized policy administration.
Branch Office Edge Firewall
- Connect a branch to HQ via VPN with IKEv2/IPSec
- Segment guest and corporate traffic
- Apply web filtering and threat prevention
Retail / Small Business Security
- Protect POS systems and customer Wi-Fi
- Block malicious sites and phishing attempts
- Comply with PCI data security requirements
Physical Profile
The Firebox T125 has a compact desktop form factor measuring 1.73 inches (44 mm) in height, 9.06 inches (230 mm) in width, and 8.27 inches (210 mm) in depth. It weighs approximately 2.92 pounds (1324.49 g), making it easy to install on a desk, shelf, or wall-mount bracket (if supported). The chassis is designed for efficient airflow and silent operation, with no fan noise in typical office environments. Power is provided via an external AC adapter, consuming only 20 W under full load.
- Width
- 9.06" (230 mm)
- Depth
- 8.27" (210 mm)
- Height
- 1.73" (44 mm)
- Weight
- 2.92 lb (1324.49 g)
Highlights
- Firewall throughput: 2.28 Gbit/s with stateful inspection and proxy blocking
- 1 x 2.5 Gigabit Ethernet port + 4 x Gigabit Ethernet ports for flexible connectivity
- VPN throughput of 184.32 MB/s supporting IKEv2, IPSec, L2TP, and TLS tunnels
- IPS throughput of 90.63 MB/s for real-time intrusion prevention
- Comprehensive threat protection: antivirus, anti-phishing, botnet detection, DLP, ransomware, advanced malware
- TLS decryption enables inspection of encrypted traffic without compromising security
- Compact form factor (1.73" x 9.06" x 8.27") and low power consumption (20 W)
- Manageable via WatchGuard cloud or on-premises management tools
- Environmental compliance: WEEE, RoHS, REACH
Specifications
| Specifications | |
|---|---|
| Manufacturer | WatchGuard Technologies, Inc |
| Manufacturer Part Number | WGT125000 |
| Brand Name | WatchGuard |
| Product Line | Firebox |
| Product Series | T |
| Product Model | T125 |
| Product Name | Firebox T125 Network Security/Firewall Appliance |
| Product Type | Network Security/Firewall Appliance |
| Technical Information | |
| Functionality | Policy Management |
| Firewall Protection Supported | TLS Decryption,Threat Protection,Antivirus,Stateful Inspection Firewall,Denial of Service (DoS),Blended Threat Prevention,Remote Access Authentication,Advanced Threat Protection,Malware Protection,Ransomware Protection,Trojan Horse,Data Loss Prevention,Anti-phishing,Botnet Detection,Packet Inspection,Proxy Blocking |
| Firewall Throughput | 2.28 Gbit/s |
| Encryption Standard | TLS |
| Data Link Protocols | L2TP,HTTPS,HTTP,FTP,TCP/UDP,SMTPS |
| Connectivity Technology | Wired |
| New Connections Per Second | 26500 |
| Interfaces/Ports | |
| Total Number of Ports | 5 |
| USB | Yes |
| Number of Network (RJ-45) Ports | 5 |
| Media & Performance | |
| VPN Throughput | 184.32 MB/s |
| IPS Throughput | 90.63 MB/s |
| Network & Communication | |
| Ethernet Technology | 2.5 Gigabit Ethernet,Gigabit Ethernet |
| Management & Protocols | |
| Manageable | Yes |
| Power Description | |
| Power Consumption | 20 W |
| Physical Characteristics | |
| Form Factor | Compact |
| Height | 1.73" (44 mm) |
| Width | 9.06" (230 mm) |
| Depth | 8.27" (210 mm) |
| Weight (Approximate) | 2.92 lb (1324.49 g) |
| Miscellaneous | |
| Environmental Compliance | Waste Electrical and Electronic Equipment Directive (WEEE),Restriction of Hazardous Substances (RoHS),Registration, Evaluation, Authorization and Restriction of Chemicals (REACH) |
| Warranty | |
| Limited Warranty | 1 Year |
User Manual
FAQ
What is the firewall throughput of the WatchGuard Firebox T125?
The Firebox T125 delivers a firewall throughput of 2.28 Gbit/s using stateful inspection, TLS decryption, and proxy blocking. This level of performance is suitable for small to mid-size business networks with moderate traffic, including branch offices and retail locations.
How many network ports does the T125 have, and what are their speeds?
The T125 is equipped with five network ports: one 2.5 Gigabit Ethernet port and four Gigabit Ethernet (10/100/1000) ports. All ports are wired RJ-45. This configuration allows one high-speed uplink (2.5 GbE) while the four 1 GbE ports can be used for LAN segmentation or additional WAN connections.
What VPN protocols does the Firebox T125 support?
The T125 supports IKEv2, IPSec (policy-based and route-based tunnels), L2TP, and TLS for both site-to-site and remote access VPNs. It also includes TLS hub-and-spoke capabilities for efficient branch-to-headquarters connectivity.
Does the T125 include intrusion prevention (IPS)?
Yes, the T125 has an IPS throughput of 90.63 MB/s and can detect and block a wide range of threats. It is part of the comprehensive security suite that also includes antivirus, anti-phishing, botnet detection, and more.
Is the WatchGuard Firebox T125 manageable?
Yes, the T125 is fully manageable. It can be configured and monitored through WatchGuard's cloud-based management platform or via on-premises tools. This allows centralized policy management, firmware updates, and reporting.
What is the form factor and power consumption of the T125?
The T125 has a compact desktop form factor measuring 1.73" x 9.06" x 8.27" (44 mm x 230 mm x 210 mm) and weighing 2.92 lb (1324.49 g). It consumes only 20 W of power, making it energy-efficient and suitable for deployment in space-constrained environments.
What throughput, switching capacity, or performance detail is listed?
The listed power specification is 2.28 Gbit/s, which helps position the unit for the right load level and installation role.
What performance, throughput, or capacity detail stands out?
The listed power specification is 2.28 Gbit/s, which helps position the unit for the right load level and installation role.
| Qty | Price | Available |
|---|
