Watchguard Firebox M290 Installation instructions

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
1/21
WatchGuard Firebox M290/390/590/690 Hardware Guide
WatchGuard® Firebox security appliances deliver unparalleled unified threat management, superior
performance, ease of use, and value for your small organization or branch office. Our security
subscriptions give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-
based exploits, and blended threats. From firewall and VPN protection to secure remote access,
WatchGuard Firebox appliances support a broad range of network environments.
This guide introduces the WatchGuard M290/390/590/690 RoHS-compliant (lead-free) hardware
products.
Fireware OS
Firebox M290/390/590/690 devices use WatchGuard’s next generation UTM OS — Fireware OS. The
Firebox includes Fireware OS and delivers exceptional protection against today's sophisticated threats to
make sure that your business stays connected. For more information on the features of Fireware, see
Fireware Help.
Package Contents
Firebox M290/390/590/690
Quick Start Guide
1 straight-through Ethernet cable (green)
1 power cord for the M290/390 and 2 power cords for the M590/690 based on the SKU/region of
the product
2 rack mount ear brackets, with 4 screws each
4 rubber feet
About Your Hardware
Hardware Specifications
Processor NXP LX1046A NXP LX2084A NXP LX2120A NXP LX2160A
Storage 128 GB m.2 128 GB m.2 128 GB m.2 512 GB m.2
RAM 4 GB with ECC 8 GB with ECC 8 GB with ECC 16 GB with ECC
 M290 M390 M590 M690

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
2/21
Power
Supply
Single 65W 90-
264VAC, 47-63Hz
Single 150W 90-
264VAC, 47-63Hz
Dual 150W 90-
264VAC, 47-63Hz
Dual 150W 90-
264VAC, 47-63Hz
Dimensions D = 30.7cm (12.09")
W = 43.8cm (17.24")
H = 4.4cm(1.73")
D = 30.7cm (12.09")
W = 43.8cm (17.24")
H = 4.4cm(1.73")
D = 30.7cm (12.09")
W = 43.8cm (17.24")
H = 4.4cm(1.73")
D = 30.7cm (12.09")
W = 43.8cm (17.24")
H = 4.4cm(1.73")
Weight 3.65kg (8.0469 lbs) 3.65kg (8.0469 lbs) 4.5kg (9.92 lbs) 4.6 kg (10.14 lbs)
Interface Specifications
This specification describes the interfaces on the Firebox M290/390/590/690 models as shipped.
Network
interfaces
8 x 1000 Base-TX
(10/100/1000Mbps
RJ45 connector
8 x 1000 Base-TX
(10/100/1000Mbps)
RJ45 connector
8 x 1000 Base-TX
(10/100/1000Mbps)
RJ45 connector
2 x 10G SFP+
interfaces
8 x 1000 Base-TX
(10/100/1000Mbps)
RJ45 connector
2 x 10G SFP+
interfaces
2 x 10GbE
(1000/2500/10000
Mbps) RJ45 Connector
I/O
Interfaces
2 x USB 3.0
1 x RJ45 RS232
console port
2 x USB 3.0
1 x RJ45 RS232
console port
2 x USB 3.0
1 x RJ45 RS232
console port
2 x USB 3.0
1 x RJ45 RS232 console
port
This specification describes the interfaces on the Firebox M290/M390/M590/M690 devices as shipped.
These Fireboxes also have a slot where you can install an additional interface module. The supported
interface modules are described in the Hardware Description section.
Environmental Requirements
To safely install your Firebox, we recommend that you:
Install it in a network rack
Put it in a secure area, such as a locked room, to block the device from people who do not have
permission to use it
Connect it to a conditioned power supply to prevent damage from sudden power changes
Other environmental requirements:
Operating temperature: 0° to 40°C (32° to 104°F)
Operating humidity: 5% to 90% non-condensing
Non-operating temperature: –40° to 70°C (-40° to 158°F)
Non-operating humidity: 5% to 90%, non-condensing
Hardware Description
Front View
 M290 M390 M590 M690
 M290 M390 M590 M690

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
3/21
Front view of the Firebox M290, M390, M590, and M690:
View of the indicators and ports on the front left panel of the Firebox M690:
Buttons and Indicators
Power ( )
The power indicator is green when the device is powered on.
Arm/Disarm ( )
When the device is armed and ready to pass traffic, this indicator is green. When the device is
powered on, but not ready to pass traffic, this indicator is red.
Storage ( )
When there is activity on the mSATA card or hard disk, this indicator is yellow.
Power Button ( )
The Power button is lit to indicate power status. It is green when the Firebox is powered on, and
red when power is available, but the Firebox is powered off.
When the Power button is red, press it to power on the Firebox.
When the Power button is green, press and hold it for five seconds to power off the Firebox. The
Firebox does note power off if you briefly press the Power button.
Reset Button
The Reset button, located to the right of the Power button, resets the device to factory-default
settings. To reset the device, see Restore Factory Default Settings

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
4/21
Built-in Interfaces
The Firebox M290/390/590/690 models have eight built-in network interfaces, two USB interfaces, and
one serial console port. The Firebox M590 and M690 have additional 10G interfaces.
Dual USB interfaces
Connect a USB storage device to use for USB backup and restore, or to store a support snapshot.
For more information about USB functions, see Fireware Help.
Console port
An RJ45 connector for the serial (console) interface is the bottom interface located to the left of the
USB interfaces. You can connect to this serial interface to log in to the Fireware command line
interface.
For more information about the command line interface, see the current Fireware Command Line
Interface Reference .
1GB RJ45 Ethernet interfaces
Interfaces 0-7 are RJ45 Ethernet interfaces that support link speeds of 10, 100, or 1000 Mbps. Each
RJ45 interface has two indicators. The right indicator shows the interface connection status. The
left indicator shows interface activity.
Connection (right)
Yellow Link at 1000 Mbps
Green Link at 100 Mbps
Not Lit Link at 10 Mbps or no link
Activity (left) Yellow, blinks Power on, network activity
Not Lit Power off, no connections
10Gb SFP+ interfaces (M590 and M690)
The Firebox M590 and M690 interfaces 8 and 9 are SFP+ interfaces that support link speeds of
10000 Mbps. These SFP+ ports only support 10000 Mbps full duplex operations, and cannot be set
to auto negotiate.
Each SFP+ interface has one indicator for activity.
Activity Orange, blinks Power on, network activity
Not Lit Power off, no connections
10Gb RJ45 Ethernet interfaces
Interfaces 10 and 11 are RJ45 Ethernet interfaces that support link speeds of 1000, 2500, or 10000
Mbps. Each RJ45 interface has two indicators. The right indicator shows the interface connection
status. The left indicator shows interface activity.
Connection (right)
Yellow Link at 10 Gbps
Green Link at 2.5 Gbps
Not Lit Link at 1 Gbps, 100 Mbps, or no link
Indicator Indicator Color Interface Status
Indicator Indicator Color Interface Status
Indicator Indicator Color Interface Status

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
5/21
Activity (left) Yellow, blinks Power on, network activity
Not Lit Power off, no connections
Interface Modules
To add more interfaces to your Firebox, you can install an interface module in the interface module slot.
You must install the interface module before you can configure the interfaces. For instructions to install
or remove interface modules, see Interface Module Installation.
Interface modules are not hot-swappable. To avoid damage to the system, power
off the Firebox before you install or remove interface modules.
You can purchase compatible interface modules from an authorized WatchGuard reseller:
WatchGuard Firebox M 4 x 1Gb Copper Module (WG9018)
WatchGuard Firebox M 4 x 1Gb SFP Fiber Module (WG9019)
WatchGuard Firebox M 2 x10 Gb SFP+ Fiber Module (WG9020)
WatchGuard Firebox M 4 x Multispeed (1/2.5/5G) Copper Module with PoE (WG9021)
For each interface module, ports are numbered from 0-3 or 0-1. The interface numbers that appear in
the Firebox configuration depend on the number of ports on the interface module. In the management
software, the interfaces numbers start after the number of interfaces built into the base model.
4 0-3 8-11 10-13 12-15
2 0-1 8-9 10-11 12-13
Indicators for the modular interfaces are described in the subsequent sections.
4 Port 1G RJ45 Interface Module
4 Port 1G SFP Interface Module
2 Port 10G SFP+ Interface Module
4 Port Multispeed RJ45 Interface Module with PoE
Rear View
Rear view of the Firebox M690:
Indicator Indicator Color Interface Status
Number
of Ports
Modular
Interface
Port
Numbers
Interface Numbers in
Management Software
(M290 and M390)
Interface Numbers in
Management
Software (M590)
Interface Numbers in
Management
Software (M690)

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
6/21
Cooling fans
The fans decrease the internal temperature of the device. The fans start at maximum RPM when
the Firebox is powered on. The device adjusts the fan speed based on the external temperature
and device CPU load.
AC receptacles
Each AC receptacle on the Firebox accepts a detachable AC power cord supplied with the Firebox.
M290 and M390 devices have a standard auto-sensing AC power supply.
M590 and M690 devices have dual auto-sensing AC power supplies. An audible alarm indicates if
power is unavailable or if a power supply does not function correctly.
We recommend you connect both power supplies on the M590 and M690 to power for
redundancy. If only one power supply is connected, an audible alarm will indicate that
power is unavailable on the disconnected power supply. You can temporarily disable
this alarm until the next reboot from the Fireware Command Line Interface (CLI) with
the command diagnose hardware dualpoweralarm off . For more information, see the
Fireware Command Line Interface Reference.
PoE power receptacle (for module use)
M590 and M690 devices have a receptacle that accepts 54V DC power for use with the 4 Port
Multispeed RJ45 Interface Module with PoE.
You can use the optional 54V power supply to provide PoE power to the module ports:WG8034
(US), WG8035 (EU), WG8036 (UK), WG8037 (AU)
Power switch
Controls the power supplied to the Firebox.
Rack Mount Installation
You can use either the included front ear brackets or the rack rail kit to install your Firebox in a network
rack.
Your Firebox ships with two front ear brackets.
The included front ear bracket kit includes:
2 long front ear brackets
8 small screws
A rack rail kit is available separately. The WatchGuard part number for the rail kit is WG8596.
The rack rail kit includes:
2 sliding rails
6 small screws and 8 large screws

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
7/21
Front ear bracket kit
2 short front ear brackets
4 small screws
2 large screws
Precautions
When you install the device in a rack, make sure you consider these factors:
Elevated Operating Ambient Temperature
If you install the device in a closed or multi-unit rack assembly, the operating ambient temperature
of the rack environment may be greater than room ambient. Make sure the ambient temperature
of the rack environment is within the certified operating range specified in this Hardware Guide.
Reduced Air Flow
When you install the device in a rack, make sure that the amount of air flow required for safe
operation of the equipment is not compromised.
Mechanical Loading
When you mount the device in the rack, avoid hazardous conditions caused by uneven mechanical
loading.
Circuit Overloading
Make sure you connect the device to the power supply circuit in such a way that there is no
overloading of the circuits, and no impact on overcurrent protection and supply wiring.
Reliable Grounding
Make sure all rack-mounted equipment is correctly grounded. For example, make sure you use
power strips instead of direct connections to the branch circuit.
Do not use your slide/rail mounted device as a shelf or work space.
Rack Installation with Included Front Ear Brackets
You can use the front ear bracket kit to install your Firebox in a network rack. The included front ear
brackets attach to the side of the Firebox and can support it without the optional rack kit. You cannot use
the included front ear brackets and the rail kit together.
Use these steps to attach the front ear brackets and install the Firebox in a network rack. It could require
two people to safely complete these steps.
1. Locate the front ear brackets and screws.
2. Locate six rack screws (not included).
3. Use four of the screws provided with the front ear brackets to attach a bracket to the front of the
Firebox on one side.
4. Use the other four screws to attach the other front ear bracket to the other side of the Firebox.
5. Position the Firebox in the network rack so that the holes in the brackets align with the holes in
the front of the rack.
6. Use three rack screws to securely attach the brackets to the rack.
Rack Installation with Rack Rail Kit
You can use the optional rack rail kit to install your Firebox in a network rack.

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
8/21
To use the rack rail kit, do not attach the included front ear brackets.
Separate the inner rails from the outer rails.
Attach the inner rails and front ear brackets to the Firebox.
Attach the outer rails to the rack.
Install the Firebox in the rack.
Remove the Firebox from the rack
Interface Module Installation
You can install an interface module in the interface module slot of your Firebox. The supported interface
modules are described in detail in the Interface Modules section.
Interface modules are not hot-swappable. To avoid damage to the system, power
off the Firebox before you install or remove interface modules.
Install an Interface Module
To install an interface module:
1. Disconnect the power cable from the Firebox.
2. Loosen the two captive screws on the slot cover.
3. Remove the slot cover to expose the interface slot.
4. Insert the interface module into the slot, and push it firmly into place.
5. Tighten the two captive screws on the interface module to attach the interface to the Firebox.
6. Reconnect the power cables to the Firebox.
The Firebox starts automatically. When the Firebox starts, Fireware automatically detects all installed interfaces.
Remove an Interface Module
Before you remove an installed interface module, make sure that the interfaces on
that module are not enabled in the Firebox configuration. You cannot manage a
Firebox if an enabled interface has been removed.
To remove an installed interface module:
1. Disconnect the power cable from the Firebox.
2. Disconnect all network cables from the installed interface module.
3. Loosen the two screws on the installed interface module.
4. Slide the interface module out of the slot.
5. Place the removed interface module on an antistatic surface, or immediately install it in another
slot.

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid=…
9/21
6. Install a slot cover over the empty slot or install another interface module. The slot cover keeps
dust out of the Firebox.
Restore Factory Default Settings
If you ever need to, you can restore your Firebox to its factory-default settings. For example, if you do not
know the administrator account passphrase or you want to start over with a new configuration, you can
reset your device. Make sure you back up your device configuration before you reset your device in case
you want to restore it in the future.
To reset your device:
1. If necessary, use the power switch on the rear of the device to power it on.
2. Press and hold the Power button on the front of the device for five seconds to power it off.
3. Press and hold the Reset button, while you briefly press the Power button on the front of the
device to power it on.
4. Continue to hold the Reset button while the Arm indicator is red.
5. Continue to hold the Reset button while the Arm indicator is slowly flashing green.
6. When the Arm indicator flashes green more rapidly, release the Reset button.
7. Wait until the Arm indicator starts flashing red.
8. Press and hold the Power button on the front of the device for five seconds to power off the
device.
9. Briefly press the Power button on the front of the device to power it on.
Notices
All WatchGuard products are designed and tested to meet strict safety requirements. These
requirements include product safety approvals and other global compliance standards. Please read the
following instructions carefully before operating the product, and refer to them as needed to ensure the
continued safe operation of your product.
Product Safety Certification
The WatchGuard product is safety certified under the following standards:
CAN/CSA C 22.2 No. 60950-1-07+A1:2011+A2:2014
UL 60950-1:2007 R10.14
IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013
EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
Safety Warnings
Do not place objects on the power cord.
Ne placez pas d'objets sur le cordon d'alimentation.
Do not obstruct the ventilation openings. These openings prevent overheating of the machine.
Ne pas obstruer les ouvertures de ventilation. Ces ouvertures empêchent la surchauffe de la
machine.
Never push objects of any kind into slots or openings on this equipment. Making a contact with a
voltage point or shorting out a part may result in fire or electrical shock.
N'insérez jamais d'objets de quelque nature que ce soit dans les fentes ou les ouvertures de cet
équipement. Établir un contact avec un point de tension ou court-circuiter une pièce peut
provoquer un incendie ou un choc électrique.

06.10.21, 10:40
WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html?cshid…
10/21
When removing or installing an appliance, follow the general installation safety instructions.
Lors du retrait ou de l'installation d'un appareil, suivez les instructions générales de sécurité
d'installation.
You must disconnect the AC power cord from the Firebox before you remove the cover of the
Firebox for any reason.
Vous devez débrancher le cordon d'alimentation CA du Firebox avant de retirer le couvercle du
Firebox pour quelque raison que ce soit.
There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries
according to the manufacturer’s instructions.
Il existe un risque d'explosion si la batterie est remplacée par un type incorrect. Jetez les piles
usagées conformément aux instructions du fabricant.
警示 本電池如果更換不正確會有爆炸的危險，請勿自行更換電池
Class I Equipment. This equipment must be earthed. The power plug must be connected to a
properly wired earth ground socket outlet. An improperly wired socket outlet could place hazardous
voltages on accessible metal parts.
Équipement de classe I. Cet équipement doit être mis à la terre. La fiche d'alimentation doit être
connectée à une prise de terre correctement câblée. Une prise de courant mal câblée peut placer
des tensions dangereuses sur les pièces métalliques accessibles.
All Ethernet cables are designed for intra-building connection to other equipment. Do not connect
these ports directly to communication wiring or other wiring that exits the building where the
appliance is located.
Tous les câbles Ethernet sont conçus pour une connexion intra-bâtiment à d'autres équipements.
Ne connectez pas ces ports directement au câblage de communication ou à tout autre câblage qui
sort du bâtiment où se trouve l'appareil.
Disconnect the power source prior to defeating or bypassing the equipment protection means (like
enclosure), and to restore the equipment protection means before restoring power.
Déconnectez la source d'alimentation avant de désactiver ou de contourner les moyens de
protection de l'équipement (comme le boîtier), et de rétablir les moyens de protection de
l'équipement avant de rétablir l'alimentation.
安全須知
警告：在進入機箱內部以安裝或卸下系統組件之前，必須斷開系統與所有電源的連接，並從電源模組拔下電源
線。
1. 在清理本產品時請先將交流插座拔除，不能使用液態或噴霧式的清潔劑來清理，急速落下或掉下將會傷害到
這個機器。
2. 如果有以下的情況發生，請將這儀器交給服務人員來檢查
(1) 電源線或插座損害
(2) 有液體滲透到本產品
(3) 儀器暴露在潮濕的地方
(4) 這個儀器不在動作或你根據使用手冊也無法使他動作時
(5) 儀器被摔下來且損害時
Disclaimer
WatchGuard shall not be held liable if the end user alters, modifies, or repairs any WatchGuard hardware
appliance.
Hinweise Zur Sicherheit