WatchGuard Firebox Cloud Large Virtual Firewall Appliance with 3-Year Total Security

Public cloud environments often lack the robust perimeter defenses that on-premises networks enjoy, leaving virtual machines and applications exposed to web-based attacks and unauthorized access. The WatchGuard Firebox Cloud Large addresses this gap by delivering enterprise-grade network security as a virtual appliance for AWS and Microsoft Azure. With a firewall throughput of 8 Gbps and support for up to 6000 users, it extends unified threat management into virtual private clouds, ensuring that cloud workloads receive the same protection as physical infrastructure.

Who is it for

This solution is ideal for organizations migrating critical workloads to the cloud, DevOps teams needing scalable security for dynamic environments, and IT administrators seeking to unify security policies across on-premises and cloud resources. It suits businesses that require high-performance inspection without hardware constraints, particularly those leveraging multi-cloud strategies or hybrid architectures.

Main features

• 8 Gbps firewall throughput and 2 Gbps full UTM scanning for high-speed traffic inspection.
• Comprehensive threat prevention including IPS, gateway antivirus, URL filtering, application control, APT blocker, and data loss prevention.
• Flexible VPN support with IPSec and SSL VPN for secure site-to-site and remote access connectivity.
• Advanced routing protocols (BGP4, OSPF, RIP) for seamless integration into existing cloud network topologies.
• Centralized management via WatchGuard Cloud and Web UI, with optional integration with WatchGuard Dimension for enhanced visibility and reporting.
• Subscription-based licensing with 3-year Total Security bundle included, covering all security services and updates.

Specifications

• Product type: Virtual firewall appliance
• Deployment environment: AWS, Microsoft Azure
• Firewall throughput: 8 Gbps
• VPN throughput (IPSec): 4 Gbps
• UTM throughput (full scan): 2 Gbps
• Concurrent connections: 2,000,000
• New connections per second: 100,000
• Recommended vCPUs: 8
• Recommended vRAM: 16 GB
• Security algorithms: AES (128-, 192-, 256-bit)
• Management interface: WatchGuard Cloud, Web UI
• High availability: Active/passive clustering support
• SD-WAN capabilities: Yes
• Zero-trust security: Yes
• Content inspection: Deep packet inspection (DPI)

Tips

When deploying in AWS or Azure, allocate the recommended 8 vCPUs and 16 GB vRAM to achieve full throughput. Use the included 3-year Total Security subscription to keep all threat signatures and services current without additional licensing. For hybrid environments, configure site-to-site VPN tunnels to extend on-premises policies seamlessly to the cloud.