- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
WatchGuard Firebox M6850
Top of the High Rackmount family: 104 Gbps firewall throughput, native 100 GbE uplinks and unrestricted VPN capacity.
- 36.50 Gbps UTM throughput with full scanning enabled
- 104 Gbps firewall throughput and 67,000,000 concurrent connections
- 2 × 100 Gb QSFP28, 4 × 25 Gb SFP28 and 10 × 10 Gb SFP+ built in
- Unrestricted branch office and mobile VPN tunnels
- 5,000,000 proxy connections and dual 600 W hot-swappable supplies
Hardware & subscription options
Every orderable WatchGuard part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The Firebox hardware on its own, with no security subscription attached. Choose this only if you are adding the unit to an existing licence pool.
WatchGuard Firebox M6850 Appliance
-
WatchGuard Firebox M6850 Appliance Only #WGM685000Get a Quote
Basic Security Suite
The foundation bundle: intrusion prevention, gateway antivirus, URL filtering, application control, spam blocking and reputation lookup, with Standard Support included.
WatchGuard Basic Security Suite (Service Subscription - Hardware Required)
-
WatchGuard Basic Security Suite for Firebox M6850 - 1 Year #WGM68500701Get a Quote
-
WatchGuard Basic Security Suite for Firebox M6850 - 3 Year #WGM68500703Get a Quote
-
WatchGuard Basic Security Suite for Firebox M6850 - 5 Year #WGM68500705Get a Quote
WatchGuard Trade Up Program - Basic Security Suite (Service Subscription - Hardware Required)
-
Trade Up to WatchGuard Basic Security Suite for Firebox M6850 - 3 Year #WGM68502003Get a Quote
-
Trade Up to WatchGuard Basic Security Suite for Firebox M6850 - 5 Year #WGM68502005Get a Quote
WatchGuard Basic Security Suite Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Basic Security Suite for Firebox M6850 - 1 Year #WGM685331Get a Quote
-
WatchGuard Basic Security Suite for Firebox M6850 - 3 Year #WGM685333Get a Quote
-
WatchGuard Basic Security Suite for Firebox M6850 - 5 Year #WGM685335Get a Quote
Prime Security Suite
WatchGuard's top licensing tier, extending Total Security with the newest advanced detection and response services.
WatchGuard Prime Security Suite (Service Subscription - Hardware Required)
-
WatchGuard Prime Security Suite for Firebox M6850 - 1 Year #WGM6850481Get a Quote
-
WatchGuard Prime Security Suite for Firebox M6850 - 3 Year #WGM6850483Get a Quote
-
WatchGuard Prime Security Suite for Firebox M6850 - 5 Year #WGM6850485Get a Quote
WatchGuard Trade Up Program - Prime Security Suite (Service Subscription - Hardware Required)
-
Trade Up to WatchGuard Prime Security Suite for Firebox M6850 - 3 Year #WGM6850493Get a Quote
-
Trade Up to WatchGuard Prime Security Suite for Firebox M6850 - 5 Year #WGM6850495Get a Quote
WatchGuard Prime Security Suite Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Prime Security Suite for Firebox M6850 - 1 Year #WGM685361Get a Quote
-
WatchGuard Prime Security Suite for Firebox M6850 - 3 Year #WGM685363Get a Quote
Total Security Suite
Everything in Basic plus APT Blocker, ThreatSync XDR, DNSWatch, IntelligentAV, data loss prevention and Gold Support.
WatchGuard Total Security Suite (Service Subscription - Hardware Required)
-
WatchGuard Total Security Suite for Firebox M6850 - 1 Year #WGM68500801Get a Quote
-
WatchGuard Total Security Suite for Firebox M6850 - 3 Year #WGM68500803Get a Quote
-
WatchGuard Total Security Suite for Firebox M6850 - 5 Year #WGM68500805Get a Quote
WatchGuard Trade Up Program - Total Security Suite (Service Subscription - Hardware Required)
-
Trade Up to WatchGuard Total Security Suite for Firebox M6850 - 1 Year #WGM68502101Get a Quote
-
Trade Up to WatchGuard Total Security Suite for Firebox M6850 - 3 Year #WGM68502103Get a Quote
-
Trade Up to WatchGuard Total Security Suite for Firebox M6850 - 5 Year #WGM68502105Get a Quote
WatchGuard Total Security Suite Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Total Security Suite for Firebox M6850 - 1 Year #WGM685351Get a Quote
-
WatchGuard Total Security Suite for Firebox M6850 - 3 Year #WGM685353Get a Quote
-
WatchGuard Total Security Suite for Firebox M6850 - 5 Year #WGM685355Get a Quote
Support
Standalone support contracts and hardware replacement coverage.
WatchGuard Support (Service Subscription - Hardware Required)
-
WatchGuard Standard Support for Firebox M6850 - 1 Year #WGM68500601Get a Quote
-
WatchGuard Standard Support for Firebox M6850 - 3 Year #WGM68500603Get a Quote
-
WatchGuard Standard Support for Firebox M6850 - 5 Year #WGM68500605Get a Quote
WatchGuard Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Standard Support for Firebox M6850 - 1 Year #WGM68540101Get a Quote
-
WatchGuard Standard Support for Firebox M6850 - 3 Year #WGM68540103Get a Quote
-
WatchGuard Standard Support for Firebox M6850 - 5 Year #WGM685205Get a Quote
WatchGuard Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Gold Support for Firebox M6850 - 1 Year #WGM685221Get a Quote
-
WatchGuard Gold Support for Firebox M6850 - 3 Year #WGM685223Get a Quote
WatchGuard Support (Service Subscription - Hardware Required)
-
WatchGuard Premium 4-Hour Replacement for Firebox M6850 - 1 Year #WGM685801Get a Quote
-
WatchGuard Premium 4-Hour Replacement for Firebox M6850 - 3 Year #WGM685803Get a Quote
Add-On Services
Individual services that can be layered onto an existing licence.
WatchGuard Add-On Services (Service Subscription - Hardware Required)
-
WatchGuard High Availability for Firebox M6850 - 1 Year #WGM68501601Get a Quote
-
WatchGuard High Availability for Firebox M6850 - 3 Year #WGM68501603Get a Quote
-
WatchGuard High Availability for Firebox M6850 - 5 Year #WGM68501605Get a Quote
-
WatchGuard APT Blocker for Firebox M6850 - 1 Year #WGM685171Get a Quote
-
WatchGuard APT Blocker for Firebox M6850 - 3 Year #WGM685173Get a Quote
-
WatchGuard Cloud 1-Month Data Retention for Firebox M6850 - 1 Year #WGM68521801Get a Quote
-
WatchGuard Cloud 1-Month Data Retention for Firebox M6850 - 3 Year #WGM68521803Get a Quote
Accessories
Mounting hardware and physical accessories for this appliance.
WatchGuard Accessories
-
WatchGuard Redundant Power Supply for Firebox M4850 / M5850 / M6850 #WG9042Get a Quote
-
WatchGuard 2-port 100GbE QSFP28 OCP Module for Firebox M4850 / M5850 / M6850 #WG9043Get a Quote
-
WatchGuard 4-port 25GbE SFP28 OCP Module for Firebox M-Series 5th Gen #WG9044Get a Quote
-
WatchGuard 4-port 2.5GbE RJ45 OCP Module for Firebox M-Series 5th Gen #WG9045Get a Quote
-
WatchGuard Replacement Redundant Fan for Firebox M4850 / M5850 / M6850 #WG9046Get a Quote
-
WatchGuard Rack Rails for Firebox M4850 / M5850 / M6850 #WG9047Get a Quote
WatchGuard Firebox M6850 Specifications
WatchGuard published maximums, measured under the test conditions noted below.
Throughput
| Firewall (UDP 1518) | 104.00 Gbps |
|---|---|
| Firewall (IMIX) | 29.00 Gbps |
| UTM (full scan) | 36.50 Gbps |
| UTM (fast scan) | 44.00 Gbps |
| Antivirus | 43.00 Gbps |
| IPS (full scan) | 40.00 Gbps |
| IPS (fast scan) | 43.00 Gbps |
| HTTPS Content Inspection IPS (full scan) | 18.50 Gbps |
| VPN (UDP 1518) | 32.0 Gbps |
| VPN (IMIX) | 9.2 Gbps |
Capacity
| Network Interfaces | 8 × 1 Gbps RJ45, 6 × 1 Gbps SFP, 10 × 10 Gbps SFP+, 4 × 25 Gbps SFP28, 2 × 100 Gbps QSFP28 |
|---|---|
| I/O Interfaces | 1 Serial / 2 USB-A 3.0 |
| New connections per second | 330,000 |
| Concurrent connections | 67,000,000 |
| New connections per second (proxy) | 85,000 |
| Concurrent connections (proxy) | 5,000,000 |
| WSM licenses (included) | 4 |
| EDR Core Sensors included | 250 |
VPN Tunnels
| Branch Office VPN | Unrestricted |
|---|---|
| Mobile VPN | Unrestricted |
Security Services
| Firewall | Stateful packet inspection, TLS decryption, proxy firewall |
|---|---|
| Application Proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy |
| Threat Protection | DoS attacks, fragmented & malformed packets, blended threats |
| Filtering Options | Browser Safe Search, Google for Business |
VPN
| Site-to-Site VPN | IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke |
|---|---|
| Remote Access VPN | IKEv2, IPSec, L2TP, TLS |
Visibility
| Logging and notifications | WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 |
|---|---|
| Reporting | WatchGuard Cloud includes over 100 pre-defined reports, executive summary and visibility tools |
Networking
| SD-WAN | Multi-WAN failover, dynamic path selection, jitter/loss/latency measurement |
|---|---|
| Dynamic Routing | RIP, OSPF, BGP |
| High Availability | Active/passive, active/active |
| QoS | 802.1Q, DSCP, IP Precedence |
| Traffic Management | By policy or application |
| IP Address Assignment | Static, DHCP (server, client, relay), PPPoE, DynDNS |
| NAT | Static, dynamic, 1:1, IPSec traversal, policy-based |
| Link Aggregation | 802.3ad dynamic, static, active/backup |
Physical & Power
| Product Dimensions | 17.3" × 20.25" × 1.73" (440 × 515 × 44 mm) |
|---|---|
| Shipping Dimensions | 29.25" × 23.25" × 9" (751 × 599 × 237 mm) |
| Product Weight | 19.84 lbs (9 kg) |
| Shipping Weight | 36.38 lbs (16.5 kg) |
| Power Consumption | 374 W (max) |
| Input Power | 2 × C14 inlet (90-264 VAC), 2 × 12V 50A (600 W) hot-swappable PSU |
| Operating Temperature | 32–104°F (0–40°C), humidity 5% to 90% non-condensing |
| Storage Temperature | 14–158°F (-10–70°C), humidity 5% to 90% non-condensing |
| Altitude | 0 to 9,843 ft at 95°F (3,000 m at 35°C) |
| MTBF | To be confirmed by WatchGuard |
Certifications
| Security | Pending: CC, FIPS 140-3 |
|---|---|
| Safety | NRTL / CB |
| Network | IPv6 Ready Gold (routing) |
| Hazardous Substance Control | WEEE, RoHS, REACH |
Throughput rates are determined using multiple flows through multiple ports and will vary depending on the environment and configuration. Max firewall throughput tested via direct connection using 1518-byte UDP frames based on RFC 2544 methodology, on Fireware 2025.1.
UTM throughput is measured using HTTP traffic with AV, IPS and Application Control enabled, and does not account for all security services available on the appliance.
WatchGuard lists MTBF for this model as TBD; no figure has been published yet.
The specification table lists EDR Core twice, as "EDR Core License Included" and "EDR Core Sensors included", both 250. Shown once here.
Maximum power draw is published as 374 W, below the 412 W quoted for the lower-specified M5850. Both figures are reproduced as published — confirm with us before sizing rack power.
The source catalogue lists no NDR subscription for this model, and APT Blocker, Cloud Data Retention and Premium Replacement in 1 and 3-year terms only.
Part numbers are WatchGuard catalogue SKUs and are listed for reference. Availability and lead time are confirmed at quote.
Firebox M6850
Top of the High Rackmount family: 104 Gbps firewall throughput, native 100 GbE uplinks and unrestricted VPN capacity.
Uncompromising Security Headroom for the Most Demanding Networks
The Firebox M6850 is designed for organizations that are planning not just for today's traffic, but for what comes next. As the top tier model in the Firebox High Rackmount family, the M6850 delivers the highest levels of firewall, VPN, UTM, and HTTPS inspection performance, combined with native ultra high speed networking. Built for data center edge, core infrastructure, and high-growth enterprises, the M6850 enables customers to standardize on a single firewall platform that can accommodate future increases in users, applications, and encrypted traffic without repeated hardware refreshes.
Strong Security at Every Layer
WatchGuard Firebox appliances are uniquely architected to deliver layered security without sacrificing performance. Integrated protections work together to defend against advanced malware, ransomware, phishing, botnets, data exfiltration, and emerging threats, while maintaining visibility and control across the network.
Interested in the WatchGuard Firebox M6850?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote