WatchGuard Firebox M690 Network Security/Firewall Appliance

The WatchGuard Firebox M690 delivers enterprise-grade security and exceptional performance in a compact 1U appliance designed for midsize organizations and distributed enterprises. Built to keep traffic flowing even under heavy load, the M690 combines robust firewall protection with sophisticated threat prevention and flexible management tools. Its standout firewall throughput of 29.7 Gbps ensures smooth, uninterrupted connectivity for busy networks, while its best-in-class UTM throughput provides comprehensive, multi-layer protection without introducing latency. This makes the M690 an ideal perimeter security solution for headquarters, branch offices, data centers, and regional hubs that demand reliable performance, scalable security, and centralized visibility across locations. Whether you are expanding to support more remote sites, supporting mobile and remote workers, or protecting sensitive data as your network grows, the M690 is engineered to adapt with you. In addition to strong on-device security, it integrates seamlessly with WatchGuard Cloud and WatchGuard Dimension for policy orchestration, real-time monitoring, and proactive threat intelligence, giving IT teams a powerful, easy-to-manage security platform you can trust.

• Blazing firewall performance: The M690 achieves firewall throughput up to 29.7 Gbps, enabling rapid traffic processing for demanding workloads, large numbers of concurrent connections, and high-speed WAN environments without compromising security.
• Industry-leading UTM protection: With best-in-class UTM throughput in its class, it delivers multilayer security—from intrusion prevention and antivirus to application control and web filtering—without slowing legitimate business traffic.
• Comprehensive security stack: Integrated security services provide multi-layer defenses, including firewall, advanced threat protection, IPS, anti-malware, and content filtering, all managed from a single, centralized platform.
• Flexible, centralized management: Designed for distributed enterprises, the M690 supports scalable policy enforcement across multiple sites, with centralized visibility and control through WatchGuard Cloud and Dimension for consistent security posture.
• Affordable, scalable deployment: A cost-effective, future-proof appliance that fits growing midsize networks, offering straightforward deployment, reliable hardware, and a path to expand security coverage as your network evolves.

Technical Details of WatchGuard Firebox M690

• Firewall throughput: Up to 29.7 Gbps to keep core traffic moving and minimize latency during peak periods.
• UTM throughput: Class-leading performance for unified threat management, balancing protection with throughput to preserve user experience.
• Form factor: 1U rack-mountable appliance for data centers, network closets, and edge deployments.
• Security services: Integrated firewall with layered security features, including IPS, content filtering, and application control as part of the unified security stack.
• Management and visibility: Centralized management options through WatchGuard Cloud and WatchGuard Dimension for policy enforcement, monitoring, and reporting across sites.

How to install WatchGuard Firebox M690

Setting up the WatchGuard Firebox M690 is designed to be straightforward, enabling rapid deployment with consistent security posture across locations. Before you begin, ensure you have the required licenses for security services and a network plan that aligns with your current topology and future growth. Here is a streamlined approach to getting the M690 online and protecting your network:

Step 1: Prepare the hardware and rack placement. Unpack the M690 and verify all accessories and power cables are present. Mount the unit securely in a standard 19-inch rack in a clean, well-ventilated area. Confirm you have adequate clearance for airflow and cable management to maintain optimal performance and cooling.

Step 2: Connect networking interfaces. Attach your WAN connection to the appropriate uplink port and connect the internal LAN to your internal switch or router. If you are using multiple sites or VPN tunnels, prepare the IP addressing plan and note any VLANs you plan to terminate at the appliance. Ensure all Ethernet cables are firmly seated and that link lights indicate proper connectivity.

Step 3: Apply power and access the initial configuration. Power on the M690 and connect a management workstation to a dedicated management interface or to a management network. Access the device’s default management URL or IP address using a web browser or the WatchGuard System Manager (WSM). The first-time setup wizard will guide you through network, management, and basic security configurations.

Step 4: License activation and policy import. Activate your security service licenses and any required subscriptions. Import or configure your security policies, threat signatures, application control profiles, URL filters, and VPN settings. If you already have existing policies, you can import them or recreate them in the WatchGuard management tools to maintain consistency across sites.

Step 5: Connect to WatchGuard Cloud or Dimension for centralized management. Enroll the M690 in WatchGuard Cloud or Dimension so you can monitor health, receive alerts, push policy updates, and keep your security posture aligned across all locations. Configure alert thresholds, dashboards, and scheduled reports to stay informed about network activity and potential threats.

Step 6: Perform a validation and baseline test. Verify that firewall rules are enforcing traffic as intended, conduct a basic throughput check to confirm performance targets, and validate VPN connectivity for remote workers or branch sites. Review logs and dashboards to confirm successful operation and identify any adjustments needed for optimization.

Step 7: Establish ongoing maintenance routines. Schedule firmware updates, review security signatures, and set up automated alerts for anomalies. Regularly audit policy configurations and access controls to maintain a strong security posture as your network grows and changes. The M690 is designed to scale with your organization, so plan for phased rollouts, new site integrations, and expanding security services as needed.

By following these steps, you can deploy a robust, scalable security perimeter that protects data, accelerates legitimate traffic, and delivers the centralized visibility IT teams need to manage multi-site networks effectively. The Firebox M690’s balance of high throughput, advanced security capabilities, and flexible management makes it a practical investment for organizations pursuing strong security without compromising performance.

Frequently asked questions

• What makes the Firebox M690 suitable for midsize businesses?
  The M690 combines high firewall throughput with comprehensive, built-in security services and centralized management capabilities. It is designed to handle the needs of growing networks with multiple sites, remote workers, and increasing security requirements, all while remaining cost-effective and easy to manage.
• Does the M690 support VPN and remote access?
  Yes. It supports site-to-site VPN, remote access VPN, and centralized policy enforcement to secure connectivity for distributed offices and remote users. VPN capabilities are integrated with the broader security stack for consistent protection.
• What kind of management options are available?
  You can manage the Firebox M690 locally via its management interface or, for centralized oversight, use WatchGuard Cloud and WatchGuard Dimension. These tools provide policy enforcement, alerting, health monitoring, and reporting across multiple sites.
• What is required to keep the M690 up to date?
  Regular firmware updates and security signature updates are recommended. Licensing for security services may be required to enable full functionality, updates, and protection features.
• Can the M690 scale as the network grows?
  Yes. The M690 is designed for growth across distributed enterprises. It supports multi-site deployments, scalable security policies, and centralized management to maintain a consistent security posture as you add sites, users, and services.