WatchGuard Firebox T20 Review

Recently we began reviewing WatchGuard Firebox series firewalls. Now we will talk about the WatchGuard Firebox T20. Reach out to us to learn more, and get a quick quote on the WatchGuard T20.

The WatchGuard Firebox T20, with Total Security Suite, sports a load of security measures. These include antivirus, anti-spam, web filtering, application controls, and botnet detection. Not only that, there’s also intrusion prevention, DNSWatch, and an advanced persistent threat blocker. Lastly, there’s WatchGuard’s RED (Reputation Enabled Defense) service for tighter web security. It has four Gigabit LAN ports. And, it includes Wi-Fi that can broadcast in 802.11ac or provision other WatchGuard access points.

This is a ton features, but there is a bit of trade-off. The T20-W doesn’t support WatchGuard’s IntelligentAV AI-based malware scanner. Plus, it doesn’t perform deep packet inspection of HTTPS traffic. The reason is, these functions are too demanding for the appliance’s dual-core CPU. The wireless gateway is Wave 1, and can work on either the 2.4GHz or 5GHz radio bands.


Local deployment of the WatchGuard T20 is fast and easy. With a Gold Support contract you get a remote session with a WatchGuard engineer. But it’s hardly necessary. The web-based quick-start wizard guides you right through the process. Securing administrative access, configuring the firewall and applying a base set of security policies are a snap. And for those working remotely, there’s a great zero-touch set-up option. It allows newly registered appliances to grab preconfigured settings from the internet and apply them. No user intervention is required.

Secure SD-WAN That’s Easy

Establishing VPN tunnels between distant locations, including small and home offices, is easy with WatchGuard. In just a few clicks you can establish secure, encrypted connections between Fireboxes. Secure, encrypted connections that protect critical data and ensure confidentiality.

Network solutions today must adapt to changing conditions to optimize network performance and reduce costs. With SD-WAN built-in, the WatchGuard T20 makes it easy to reduce the use of expensive MPLS or 4G/LTE. This improves network resiliency, while maintaining security.

Cool features

Spam control is a breeze. With the spamBlocker wizard, just select incoming SMTP traffic. Then provide an internal mail server address or just activate IMAP or POP3. You can set to append the subject line of suspicious messages with ‘Spam’, ‘Bulk’ or ‘Suspect’ tags. Then filter them out using Outlook message rules.

The WatchGuard Application Control service has options for managing hundreds of apps. For example, you can block social media completely. Or, you can use any of the 11 behavioral entries to decide, for example, who can post ‘likes’, comment, chat, or edit their profile.

There’s also lots of standard reporting tools provided. These include the web console’s traffic monitor and clever FireWatch display.


WatchGuard’s Total Security subscription enables web content filtering, application controls, anti-spam, and gateway antivirus. There’s also has network discovery, IPS and reputation enabled defense. It also activates data loss prevention, Dimension Command plus the advanced persistent threat blocker. It includes a Gold Support subscription. Total Security also includes WatchGuard’s RED (reputation enabled defence) service. This delivers for even tougher web protection.

Don’t Hesitate, Automate

As a highly automated platform, the WatchGuard T20 is perfect for time-strapped IT teams. It’s unique Automation Core ensures secure access to essential resources. And it blocks advanced threats from entering your network, keeps endpoints malware-free, and optimizes network performance. All while requiring minimal interaction from your IT team.

With today’s remote workforce, the idea of a distinct corporate network perimeter is basically gone. And it’s no secret that attackers go for the weakest link when trying to get into a corporate network. That’s usually a home office or small office user.

Security that can be easily deployed everywhere your network connects is now essential. The WatchGuard T20 is a cost-effective powerhouse that offers diverse VPN services, enabling flexible remote access connectivity.

We’d love to tell you more about the WatchGuard Firebox T20. So, why not give us a call at 877-449-0458, or reach out at [email protected]? Thanks for reading!

WatchGuard Firebox T20 highlights

Firewall Throughput – 1.7 Gbps
AV Throughput – 328 Mbps
IPS Throughput – 271 Mbps
UTM Throughput – 154 Mbps
VPN Throughput – 485 Mbps