WatchGuard Firebox Cloud Small Firewall

Public cloud environments often lack the robust perimeter defenses needed to protect virtual workloads from advanced threats. The WatchGuard Firebox Cloud Small delivers enterprise-grade network security as a virtual appliance, extending unified threat management into AWS and Microsoft Azure deployments. This software-based firewall provides a balance of throughput and user capacity, making it ideal for securing cloud-hosted applications and virtual private clouds.

Who is it for

This virtual firewall is built for organizations migrating critical workloads to public clouds. It suits small to medium-sized businesses that need to protect up to 500 concurrent users across virtual private clouds. Cloud architects, DevOps teams, and IT security administrators will appreciate its straightforward deployment and centralized management via WatchGuard Cloud or the intuitive Web UI.

Main features

• Virtual appliance for AWS and Microsoft Azure, requiring only 2 vCPUs and 4 GB vRAM
• Firewall throughput up to 1.5 Gbps, VPN throughput up to 300 Mbps, and UTM throughput up to 150 Mbps (depending on cloud instance type)
• Supports AES encryption at 128-bit, 192-bit, and 256-bit strengths, along with BGP4, OSPF, and RIP routing protocols
• Concurrent sessions: 100,000; Branch Office VPN tunnels: 30; Mobile VPN tunnels: 30; Virtual interfaces: up to 10
• Optional security services (subscription required): Intrusion Prevention, Gateway AntiVirus, WebBlocker, Application Control, APT Blocker, Data Loss Prevention, Threat Detection and Response, DNSWatchGO, and Access Portal
• Centralized visibility and reporting with WatchGuard Dimension for big-data insights

Specifications

• Product Type: Virtual Network Security Appliance
• Form Factor: Virtual Appliance (software)
• Deployment Environment: Public Cloud (AWS, Microsoft Azure)
• Recommended vCPU Cores: 2
• Recommended vRAM: 4 GB
• Maximum Firewall Throughput: Up to 1.5 Gbps
• Maximum VPN Throughput: Up to 300 Mbps
• Maximum UTM Throughput: Up to 150 Mbps (all services enabled)
• Concurrent Sessions: 100,000
• Branch Office VPN Tunnels: 30
• Mobile VPN Tunnels: 30
• Virtual Interfaces: Up to 10
• Security Algorithms: AES (128-bit, 192-bit, 256-bit)
• Routing Protocols: BGP4, OSPF, RIP
• Management: WatchGuard Cloud, Web UI
• Licensing Model: Subscription-based for security services

Tips

To maximize performance, select a cloud instance type that meets or exceeds the recommended vCPU and memory specifications. Enable only the security services you need to balance protection and throughput. Use WatchGuard Dimension for centralized monitoring and trend analysis across multiple Firebox Cloud deployments.