- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
WatchGuard Firebox T125
Includes IntelligentAV, 4x 1Gb and 1x 2.5Gb ports, with optional Wi-Fi 7 for smart, space-saving network protection.
- 510 Mbps UTM throughput with full scanning enabled
- 1 × 2.5 GbE plus 4 × 1 GbE interfaces
- IntelligentAV and Access Portal included
- Optional Wi-Fi 7 with dual-band SMA antennas
- 5 EDR Core sensors included
Hardware & subscription options
Every orderable WatchGuard part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The Firebox hardware on its own, with no security subscription attached. Choose this only if you are adding the unit to an existing licence pool.
WatchGuard Firebox T125 Appliance
-
WatchGuard Firebox T125 Appliance Only #WGT125000Get a Quote
Basic Security Suite
The foundation bundle: intrusion prevention, gateway antivirus, URL filtering, application control, spam blocking and reputation lookup, with Standard Support included.
WatchGuard Basic Security Suite (Service Subscription - Hardware Required)
-
WatchGuard Basic Security Suite for Firebox T125 - 1 Year #WGT1250071Get a Quote
-
WatchGuard Basic Security Suite for Firebox T125 - 3 Year #WGT1250073Get a Quote
-
WatchGuard Basic Security Suite for Firebox T125 - 5 Year #WGT1250075Get a Quote
WatchGuard Trade Up Program - Basic Security Suite (Service Subscription - Hardware Required)
-
Trade Up to WatchGuard Basic Security Suite for Firebox T125 - 3 Year #WGT1250203Get a Quote
-
Trade Up to WatchGuard Basic Security Suite for Firebox T125 - 5 Year #WGT1250205Get a Quote
WatchGuard Basic Security Suite Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Basic Security Suite for Firebox T125 - 1 Year #WGT125341Get a Quote
-
WatchGuard Basic Security Suite for Firebox T125 - 3 Year #WGT125343Get a Quote
Prime Security Suite
WatchGuard's top licensing tier, extending Total Security with the newest advanced detection and response services.
WatchGuard Prime Security Suite (Service Subscription - Hardware Required)
-
WatchGuard Prime Security Suite for Firebox T125 - 1 Year #WGT1250481Get a Quote
-
WatchGuard Prime Security Suite for Firebox T125 - 3 Year #WGT1250483Get a Quote
-
WatchGuard Prime Security Suite for Firebox T125 - 5 Year #WGT1250485Get a Quote
WatchGuard Trade Up Program - Prime Security Suite (Service Subscription - Hardware Required)
-
Trade Up to WatchGuard Prime Security Suite for Firebox T125 - 3 Year #WGT1250493Get a Quote
-
Trade Up to WatchGuard Prime Security Suite for Firebox T125 - 5 Year #WGT1250495Get a Quote
WatchGuard Prime Security Suite Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Prime Security Suite for Firebox T125 - 1 Year #WGT125361Get a Quote
-
WatchGuard Prime Security Suite for Firebox T125 - 3 Year #WGT125363Get a Quote
Total Security Suite
Everything in Basic plus APT Blocker, ThreatSync XDR, DNSWatch, IntelligentAV, data loss prevention and Gold Support.
WatchGuard Total Security Suite (Service Subscription - Hardware Required)
-
WatchGuard Total Security Suite for Firebox T125 - 1 Year #WGT1250081Get a Quote
-
WatchGuard Total Security Suite for Firebox T125 - 3 Year #WGT1250083Get a Quote
-
WatchGuard Total Security Suite for Firebox T125 - 5 Year #WGT1250085Get a Quote
WatchGuard Trade Up Program - Total Security Suite (Service Subscription - Hardware Required)
-
Trade Up to WatchGuard Total Security Suite for Firebox T125 - 1 Year #WGT1250211Get a Quote
-
Trade Up to WatchGuard Total Security Suite for Firebox T125 - 3 Year #WGT1250213Get a Quote
-
Trade Up to WatchGuard Total Security Suite for Firebox T125 - 5 Year #WGT1250215Get a Quote
WatchGuard Total Security Suite Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Total Security Suite for Firebox T125 - 1 Year #WGT125351Get a Quote
-
WatchGuard Total Security Suite for Firebox T125 - 3 Year #WGT125353Get a Quote
Support
Standalone support contracts and hardware replacement coverage.
WatchGuard Support (Service Subscription - Hardware Required)
-
WatchGuard Standard Support for Firebox T125 - 1 Year #WGT1250061Get a Quote
-
WatchGuard Standard Support for Firebox T125 - 3 Year #WGT1250063Get a Quote
-
WatchGuard Standard Support for Firebox T125 - 5 Year #WGT1250065Get a Quote
WatchGuard Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Standard Support for Firebox T125 - 1 Year #WGT125201Get a Quote
-
WatchGuard Standard Support for Firebox T125 - 3 Year #WGT125203Get a Quote
WatchGuard Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
WatchGuard Gold Support for Firebox T125 - 1 Year #WGT125261Get a Quote
-
WatchGuard Gold Support for Firebox T125 - 3 Year #WGT125263Get a Quote
WatchGuard Support (Service Subscription - Hardware Required)
-
WatchGuard Premium 4-Hour Replacement for Firebox T125 - 1 Year #WGT125801Get a Quote
-
WatchGuard Premium 4-Hour Replacement for Firebox T125 - 3 Year #WGT125803Get a Quote
-
WatchGuard Premium 4-Hour Replacement for Firebox T125 - 5 Year #WGT125805Get a Quote
Add-On Services
Individual services that can be layered onto an existing licence.
WatchGuard Add-On Services (Service Subscription - Hardware Required)
-
WatchGuard APT Blocker for Firebox T125 - 1 Year #WGT125171Get a Quote
-
WatchGuard APT Blocker for Firebox T125 - 3 Year #WGT125173Get a Quote
-
WatchGuard APT Blocker for Firebox T125 - 5 Year #WGT125175Get a Quote
-
WatchGuard Network Detection and Response for Firebox T125 - 1 Year #WGN12522201Get a Quote
-
WatchGuard Network Detection and Response for Firebox T125 - 3 Year #WGN12522203Get a Quote
-
WatchGuard Network Detection and Response for Firebox T125 - 5 Year #WGN12522205Get a Quote
-
WatchGuard Cloud 1-Month Data Retention for Firebox T125 - 1 Year #WGT12521801Get a Quote
-
WatchGuard Cloud 1-Month Data Retention for Firebox T125 - 3 Year #WGT12521803Get a Quote
-
WatchGuard Cloud 1-Month Data Retention for Firebox T125 - 5 Year #WGT12521805Get a Quote
Accessories
Mounting hardware and physical accessories for this appliance.
WatchGuard Accessories
-
WatchGuard Firebox T125/T145 Rack Kit #WG9032Get a Quote
WatchGuard Firebox T125 Specifications
WatchGuard published maximums, measured under the test conditions noted below.
Throughput
| UTM (full scan) | 510 Mbps |
|---|---|
| Firewall (IMIX) | 660 Mbps |
| VPN (IMIX) | 480 Mbps |
| HTTPS (IPS enabled, full scan) | 270 Mbps |
| Antivirus | 880 Mbps |
| IPS (full scan) | 725 Mbps |
| Firewall (UDP 1518) | 2.28 Gbps |
| VPN (UDP 1518) | 1.44 Gbps |
Capacity
| Network Interfaces | 1 × 2.5 GbE, 4 × 1 GbE |
|---|---|
| I/O Interfaces | 1 Serial / 2 USB-A 3.2 |
| Concurrent connections | 3,850,000 |
| Concurrent connections (proxy) | 125,000 |
| New connections per second | 26,500 |
| VLANs | Unlimited |
| WSM licenses (incl) | 0 |
| EDR Core Sensors included | 5 |
VPN Tunnels
| Branch Office VPN | 10 |
|---|---|
| Mobile VPN | 10 |
Security Features
| Firewall | Stateful packet inspection, TLS decryption, proxy firewall |
|---|---|
| Application Proxies | HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS and Explicit Proxy |
| Threat Protection | DoS attacks, fragmented & malformed packets, blended threats |
| Filtering Options | Browser Safe Search, Google for Business |
VPN
| Site-to-Site VPN | IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke |
|---|---|
| Remote Access VPN | IKEv2, IPSec, L2TP, TLS |
Visibility
| Logging and notifications | WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3 |
|---|---|
| Reporting | WatchGuard Cloud includes over 100 pre-defined reports, executive summary, and visibility tools |
Networking
| SD-WAN | Multi-WAN failover, dynamic path selection, jitter/loss/latency measurement |
|---|---|
| Dynamic Routing | RIP, OSPF, BGP |
| High Availability | Active/passive, active/active |
| QoS | 802.1Q, DSCP, IP Precedence |
| Traffic Management | By policy or application |
| IP Address Assignment | Static, DHCP (server, client, relay), PPPoE, DynDNS |
| NAT | Static, dynamic, 1:1, IPSec traversal, policy-based |
| Link Aggregation | 802.3ad dynamic, static, active/backup |
Physical & Power
| Product Dimensions | 9" × 8.25" × 1.7" (230 × 210 × 44 mm) |
|---|---|
| Shipping Dimensions | 12.2" × 9.8" × 3.9" (311 × 250 × 98 mm) |
| Product Weight | T125: 2.92 lbs (2.07 kg) · T125-W: 3.11 lbs (2.17 kg) |
| Shipping Weight | T125: 4.52 lbs (2.05 kg) · T125-W: 4.80 lbs (2.18 kg) |
| Power Consumption | 20 W (max) |
| Input Power | 100-240 VAC autosensing |
| Operating Temperature | 32–104°F (0–40°C) |
| Storage Temperature | -40–158°F (-40–70°C) |
| Relative Humidity | 10% to 85% non-condensing |
| Altitude | 0 to 9,843 ft at 95°F (3,000 m at 35°C) |
| MTBF | 846,422 hours |
Certifications
| Security | Pending: CC, FIPS 140-2 |
|---|---|
| Safety | NRTL / CB |
| Network | IPv6 Ready Gold (routing) |
| Hazardous Substance Control | WEEE, RoHS, REACH |
Throughput rates are determined using multiple flows through multiple ports and will vary depending on the environment and configuration. Max firewall throughput tested via direct connection using 1518-byte UDP frames based on RFC 2544 methodology, on Fireware 2025.1.
UTM throughput is measured using HTTP traffic with AV, IPS and Application Control enabled, and does not account for all security services available on the appliance.
Physical specifications cover both the T125 and the Wi-Fi equipped T125-W.
Part numbers are WatchGuard catalogue SKUs and are listed for reference. Availability and lead time are confirmed at quote.
Firebox T125
Includes IntelligentAV, 4x 1Gb and 1x 2.5Gb ports, with optional Wi-Fi 7 for smart, space-saving network protection.
High-Speed Security, Especially Designed for Remote Sites
Engineered for today's agile workforces, the T125 combines advanced threat protection with SD-WAN compatibility, making it ideal for small sites, branch offices, and remote locations. It offers enterprise-level networking in a compact design, equipped with dual-band SMA antennas for wireless flexibility and 2.5 Gbps-capable interfaces for high-speed connectivity. With all logging and reporting features included at no additional cost, users gain access to over 100 dashboards and reports, including PCI and HIPAA standards.
Strong Security at Every Layer
Uniquely architected to be the industry's smartest, fastest, and most effective network security products, WatchGuard solutions deliver in-depth defenses against advanced malware, ransomware, botnets, trojans, viruses, drive-by downloads, data loss, phishing, and much more.
Interested in the WatchGuard Firebox T125?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote