Watchguard Firebox T20 Installation instructions

Firebox®T20, T20-W
Hardware Guide
Firebox®T20, T20-W
FS2AE5, FS2AE5W

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 1/24/2020
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2020 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade names
mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence
products and services to more than 75,000 customers worldwide.
The company’s mission is to make enterprise-grade security
accessible to companies of all types and sizes through simplicity,
making WatchGuard an ideal solution for Distributed Enterprises
and SMBs. WatchGuard is headquartered in Seattle, Washington,
with offices throughout North America, Europe, Asia Pacific, and
Latin America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity,
for real-time information about the latest threats and how to cope
with them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. i

Contents
WatchGuard Firebox T20/T20-W Hardware Guide iv
Fireware OS iv
About Your Hardware iv
Hardware Specifications iv
Interface Specifications v
Environmental Requirements v
Hardware Description vi
Front vi
Rear vii
AC Power Adapter ix
Wall Mounting Plate ix
Restore Factory-Default Settings x
Notices xi
Product Safety Certification xi
Safety Warning xi
Disclaimer xi
Hinweise Zur Sicherheit xi
Sicherheitshinweis xii
Aviso De Seguridad xii
Certificación de seguridad del producto xii
Advertencia de seguridad xii
Federal Communications Commission Interference Statement xiii
IMPORTANT NOTE: xiii
FCC Radiation Exposure Statement: (Wireless) xiii
Europe – EU Declaration of Conformity (Wireless) xiii
CE Notice xiv
ii WatchGuard Technologies, Inc.

RoHS Statement xiv
WEEE Statement xiv
REACH xv
Industry Canada Statement xv
Caution:(Wireless) xvi
Avertissement: xvi
For Mobile Device Usage (Wireless) xvi
Radiation Exposure Statement xvi
Déclaration d’exposition aux radiations: xvi
France (Wireless) xvi
Japan VCCI Notice (Class A ITE) xvi
Taiwan RoHS (T20) xvii
Taiwan Class A Notice xvii
Taiwan NCC xvii
Mexico Notice xviii
Limited Hardware Warranty xviii
Declaration of Conformity xx
WatchGuard Technologies, Inc. iii

WatchGuard Firebox T20/T20-W Hardware Guide
WatchGuard® Firebox security appliances deliver unparalleled unified threat management, superior
performance, ease of use, and value for your small organization or branch office. Our security subscriptions
give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-based exploits, and
blended threats. From firewall and VPN protection to secure remote access, WatchGuard Firebox
appliances support a broad range of network environments.
This guide introduces the Firebox T20 RoHS-compliant (lead-free) hardware product. The Firebox T20
network security appliance is designed for small organizations and branch offices.
Fireware OS
The Firebox T20 supports WatchGuard’s next generation UTM OS—Fireware® OS. Each Firebox appliance
includes Fireware OS and delivers exceptional protection against today's sophisticated threats to make
sure that your business stays connected. For more information on the features of Fireware OS, see
Fireware Help.
About Your Hardware
Hardware Specifications
Processor NXP LS1023A, 1.0GHz, 2-Core
Memory DDR4 2GB with ECC
Storage eMMC 4GB
Power Supply Input Ratings: 100-240V AC, MAX 1.2A, 50-60Hz
Output: 12V DC
Dimensions D = 205.5 mm (8")
W = 217 mm (8.5")
H = 43 mm(1.7")
Weight T20: 0.88 kg(1.94 lbs)
T20–W: 0.9 kg (1.98 lbs)
WatchGuard Firebox T20/T20-W Hardware Guide
iv WatchGuard Technologies, Inc.

WatchGuard Firebox T20/T20-W Hardware Guide
Interface Specifications
Network Interfaces 5 RJ45 connectors, 1000 Base-TX (10/100/1000Mbps)
T20-W is compliant with the IEEE802.11AC wave1 standard.
Radio Type and Frequency Band
(T20–W)
A single 3x3:3 radio that can operate on one of these bands:
n2.4 GHz 802.11 b/g/n
n5 GHz 802.11 a/n/ac
I/O Interfaces 2x USB3.0, Type-A
1 RJ45 Serial Port
Environmental Requirements
To safely install your Firebox, we recommend that you:
nInstall it indoors.
nPut it in a secure area, such as a locked room, to block the device from people who do not have
permission to use it.
nConnect it to a conditioned power supply to prevent damage from sudden power changes.
Other environmental requirements:
nOperating temperature: 0° to 40°C (32° to 104°F)
nOperating humidity: 5% to 90% non-condensing
nNon-operating temperature: –25° to 75°C (-13° to 167°F)
nNon-operating humidity: 0% to 95% non-condensing
WatchGuard Technologies, Inc. v

Hardware Description
Front
Front view of the Firebox:
Failover
The Failover indicator is lit when there is a WAN failover from the primary external interface to the
backup interface. After the external interface connection fails back to the primary external interface,
the indicator is not lit.
WAP
On the Firebox T20-W model, the WAP indicator is lit when the appliance is activated as a wireless
access point or a wireless client. The color indicates the active wireless radio band. The light blinks
when data is sent and received. The speed of the blink increases as the data flow increases.
Indicator Indicator Color Wireless Band
WAP
Yellow 2.4 GHz radio band
Green 5 GHz radio band
WatchGuard Firebox T20/T20-W Hardware Guide
vi WatchGuard Technologies, Inc.

WatchGuard Firebox T20/T20-W Hardware Guide
Network Interface Status Indicators
The Firebox T20 has five network interfaces. There are two status indicators for each interface.
Indicator Indicator Color Interface Status
1000
Yellow
On Link speed: 1000 Mbps
Blinks (speed of blink increases as the data flow
increases)
Data sent and received
10/100
Green
On Link speed: 10 Mbps or 100
Mbps
Blinks (speed of blink increases as the data flow
increases)
Data sent and received
Status
The Status indicator is lit when there is a management connection to the device. The Status indicator
is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line
interface. It is also lit when the device is polled by WatchGuard System Manager.
Mode
The Mode indicator shows the status of the external network connection. If the device can connect
to the external network and send traffic, the indicator is green. The indicator flashes if the device
cannot send traffic to the external network.
Attn
The Attn indicator is yellow when you start the device with the Reset button pressed. For more
information, see Restore Factory-Default Settings .
Power ( )
The Power indicator is lit to indicate power status. It is green when the Firebox is powered on.
Rear
Rear view of the Firebox:
Serial Port (Console)
The leftmost port is an RJ45 serial console port. An RJ45 serial cable is not included with the device.
WatchGuard Technologies, Inc. vii

USB Interfaces
The device includes two USB 3.0 interfaces. Connect a USB storage device for USB backup and
restore, or to store a support snapshot. For more information, see Fireware Help.
Network Interfaces
The Ethernet interfaces have standard RJ45 connectors and support link speeds of 10, 100, or 1000
Mbps.
The Firebox T20 has five network interfaces. These interfaces are labeled 0/WAN, 1/LAN, 2, 3, 4.
Reset Button
This resets the device. To restore the device to factory-default settings, see Restore Factory-Default
Settings .
Power Switch
Controls the power supplied to the device. Move the switch to position 1to power on the device, or
position 0to power it off.
Power Input
An AC power adapter is included with your device. Connect the AC adapter to the device and to a
power source. The power supply tip is plus (+) polarity. Use only the supplied AC power adapter.
WatchGuard Firebox T20/T20-W Hardware Guide
viii WatchGuard Technologies, Inc.

WatchGuard Firebox T20/T20-W Hardware Guide
AC Power Adapter
The AC power adapter supplies power for the Firebox. The power supply connector has a screw-type
retention mechanism. To prevent a disruption in the power supply, tighten the screw on the connector.
Before you connect the adapter, verify that the color band on the cord matches the color ring around the
power plug on the Firebox.
To safely connect the power supply:
Insert the silver connector on the power cord into the power port on the Firebox. Tighten the screw
until the connector is securely attached to the Firebox.
A T20 Firebox shipped outside the United States includes four power plugs to connect to the AC power
adapter. Use the correct power plug for the power source used in your country.
Wall Mounting Plate
The wall mounting plate (available separately) enables you to mount the Firebox on a wall in a good location
to increase the wireless range.
You need four screws 1/8" (3 mm) wide and at least 3/4" (18 mm) long to install the mounting plate.
To install the wall mounting plate:
1. Place the wall mounting plate horizontally against the wall where you want to install the Firebox.
2. Securely screw the wall mounting plate to the wall with the four screws.
3. Align the two holes on the bottom of the Firebox with the two connection points on the mounting plate.
4. Push the Firebox toward the mounting plate, until the two connection points on the mounting plate are
inside the holes on the bottom of the Firebox. Then press firmly down to seat the device on the plate.
To remove the Firebox from the mounting plate, push the Firebox up slightly, and then pull out, to separate
the connection points on the mounting plate from the holes on the bottom of the Firebox.
WatchGuard Technologies, Inc. ix