Watchguard Firebox T85-PoE Installation instructions

Firebox® T85-PoE
Hardware Guide
Firebox® T85-PoE
BL8AE8

WatchGuard Technologies, Inc. 2

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 10/27/2022
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2022 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade
names mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence products
and services to more than 75,000 customers worldwide. The
company’s mission is to make enterprise-grade security accessible
to companies of all types and sizes through simplicity, making
WatchGuard an ideal solution for Distributed Enterprises and SMBs.
WatchGuard is headquartered in Seattle, Washington, with offices
throughout North America, Europe, Asia Pacific, and Latin America.
To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity, for
real-time information about the latest threats and how to cope with
them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. 3

Contents
Firebox T85-PoE Hardware Guide 6
Fireware OS 6
Package Contents 6
About Your Hardware 7
Hardware Specifications 7
Interface Specifications 7
Environmental Requirements 8
Hardware Description 9
Front View 9
Rear View 11
Built-In Interfaces 11
Cooling Fan 12
Interface Modules 13
1 Port 10Gb SFP+ Interface Module 13
LTEInterface Module 15
Install an Interface Module 17
Remove an Interface Module 17
ACPower Adapter 18
Restore Factory-Default Settings 20
Notices 21
Product Safety Certification 21
Safety Warning 21
Disclaimer 21
Hinweise Zur Sicherheit 21
Sicherheitshinweis 22
Aviso De Seguridad 22
4 WatchGuard Technologies, Inc.

Certificación de seguridad del producto 22
Advertencia de seguridad 22
CE Notice 23
RoHS Statement 23
WEEE Statement 23
REACH 24
Taiwan RoHS 24
Limited Hardware Warranty 25
Declaration of Conformity 27
WatchGuard Technologies, Inc. 5

Firebox T85-PoE Hardware Guide
Firebox T85-PoE Hardware Guide
WatchGuard Firebox is a comprehensive advanced network security platform that puts IT security
professionals back in charge of their networks with widely deployable, enterprise-grade security and
threat visibility tools suitable for any organization, regardless of budget, size, or complexity.
The Firebox T85-PoE is WatchGuard’s highest performing tabletop Firebox appliance and supports up to
50 users in mid-size offices and includes two PoE+ (802.3at) ports, and a module bay with 1 x SFP+
module or 4G LTE module options available.
Fireware OS
The Firebox T85-PoE supports WatchGuard’s next generation OS—Fireware® OS. Each Firebox
appliance includes Fireware OS and delivers exceptional protection against today's sophisticated threats
to make sure that your business stays connected. For more information on the features of Fireware OS,
see Fireware Help.
Package Contents
nFirebox T85-PoE appliance
nQuick Start Guide
n1 RJ45 Ethernet cable
n1 120v power adapter
n1 power cord (US, AU, EU, UK)
n4 rubber feet
WatchGuard Technologies, Inc. 6

About Your Hardware
Hardware Specifications
Processor NXP LS1046 1.8GHz
Memory DDR4 4 GB
Storage 128 GB M.2 SSD
Power Supply Input Ratings: 90-264VAC, 2.2A, 47-63Hz
Output Ratings : 54VDC
Dimensions D = 205.5 mm (8.07")
W = 290 mm (11.42")
H = 43 mm(1.69")
Weight 2.6 kg (5.82 lbs)
Interface Specifications
Network
Interfaces
8 RJ45 connectors, 1000 Base-TX (10/100/1000Mbps)
Interfaces 6 and 7 support PoE (Power over Ethernet), compliant with the
IEEE 802.3at standard
Expansion Bay
Options
1 Single port 10Gb SFP+ Interface Module (WG9010)
LTEInterface Module (WG9015)
(Micro SIM, 2 SMA-type antenna connectors)
Antenna Gain (Peak):
0.93 dBi (617-960 MHz)
2.71 dBi (1710-2690 MHz)
3.66 dBi (3300-4200 MHz)
4.37 dBi (5150-7150 MHz)
I/O Interfaces 2 USB 3.0, Type-A
1 RJ45 Serial Port
Firebox T85-PoE Hardware Guide
7 WatchGuard Technologies, Inc.

Firebox T85-PoE Hardware Guide
Environmental Requirements
To safely install your Firebox, we recommend that you:
nInstall it in indoors.
nPut it in a secure area, such as a locked room, to block the device from people who do not have
permission to use it.
nConnect it to a conditioned power supply to prevent damage from sudden power changes.
Other environmental requirements:
nOperating temperature: 0° to 40°C (32° to 104°F)
nOperating humidity: 5% to 90% non-condensing
nNon-operating temperature: –40° to 70°C (-40° to 158°F)
nNon-operating humidity: 5% to 90%, non-condensing
WatchGuard Technologies, Inc. 8

Hardware Description
Front View
Front view of the Firebox:
Failover
The Failover indicator is lit when there is a WAN failover from the primary external interface to the
backup interface. After the external interface connection fails back to the primary external
interface, the indicator is not lit.
Network Interface Status Indicators
The Firebox T85-PoE has eight network interfaces. On the front panel, the network interfaces are
labeled 7, 6, 5, 4, 3, 2, 1, 0. There are two status indicators for each interface. The light blinks
when data is sent and received. The speed of the blink increases as the data flow increases.
Indicator Indicator Interface Status
1000
Yellow
On Link speed: 1000 Mbps
10/100
Green
On Link speed: 10 Mbps or 100 Mbps
Module
This indicator is lit when an interface module is installed.
Status
The Status indicator is red when there is a management connection to the device. The Status
indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or the
command line interface. It is also lit when the device is polled by WatchGuard System Manager.
Mode
The Mode indicator shows the status of the external network connection. If the device can connect
to the external network and send traffic, the indicator is green. The indicator flashes if the device
cannot send traffic to the external network.
Firebox T85-PoE Hardware Guide
9 WatchGuard Technologies, Inc.

Firebox T85-PoE Hardware Guide
Attn
The Attn indicator is yellow when you start the device with the Reset button pressed. For more
information, see Restore Factory-Default Settings .
Power ( )
The Power indicator is lit to indicate power status. It is green when the Firebox is powered on.
WatchGuard Technologies, Inc. 10

Rear View
Rear view of the Firebox:
Reset Button
This resets the device. To restore the device to factory-default settings, see Restore Factory-
Default Settings .
Power Switch
Controls the power supplied to the device. Move the switch to position 1to power on the device, or
position 0to power it off.
Power Input
An AC power adapter is included with your device. Connect the AC adapter to the device and to a
power source. The power supply tip is plus (+) polarity. Use only the supplied AC power adapter.
Built-In Interfaces
Serial Port (Console)
The leftmost port is an RJ45 serial console port. An RJ45 serial cable is not included with the
device.
USB Interfaces
The device includes two USB interfaces. Connect a USB storage device for USB backup and
restore, or to store a support snapshot. For more information, see Fireware Help.
Network Interfaces
The Ethernet interfaces have standard RJ45 connectors and support link speeds of 10, 100, or
1000 Mbps. These interfaces are labeled 0/WAN, 1/LAN, 2, 3, 4, 5, 6-PoE, 7-PoE. Interfaces 6
and 7 are PoE (Power over Ethernet) interfaces, compliant with the IEEE 802.3at standard.
Firebox T85-PoE Hardware Guide
11 WatchGuard Technologies, Inc.

Firebox T85-PoE Hardware Guide
Cooling Fan
The side of the Firebox has a cooling fan that adjusts its speed as needed to decrease the internal
temperature of the device.
nThe fan is designed to start at boot time at a speed of 350 RPM to maintain an optimal temperature.
nWhen the temperature rises, and the CPU temperature exceeds 79°C or the thermal sensor exceeds
71°C, the fan speed increases to 1500 RPM.
nWhen the CPU temperature drops to 66°C, or the thermal sensor drops to 58°C, the fan speed
decreases to the default 350 RPM.
nThe Firebox reboots if the CPU temperature is greater than 84°C or the thermal sensor is greater
than 76°C.
nThe Firebox shuts down when CPU temperature is greater than 100°C.
Do not insert a pointed object to attempt to touch or move the fan blades.
WatchGuard Technologies, Inc. 12

Interface Modules
The Firebox T85-PoE includes an expansion bay for additional interface modules. You must install the
expansion module before you can configure the interfaces.
1 Port 10Gb SFP+ Interface Module
This interface module features a 10Gb SFP+ Copper Ethernet port (WG9010).
The SFP+ port has one LED indicator above the port.
Indicator Interface Status
Solid Yellow Connection, no traffic
Blinks Green and Yellow Connection, traffic
You can purchase compatible SFP+ modules from an authorized WatchGuard reseller.
SFP+ multi-mode transceivers (10GBase-SR/1000Base-SX, 850 nm)
nWatchGuard WG8583
nFinisar FTLX8571D3BCV
nFinisar FTLX8571D3BCL
nCisco SFP-10G-SR
SFP multi-mode transceivers (1000Base-SX, 850nm)
nWatchGuard WG8585
nFinisar FTLF8519P3BNL
nAvago AFBR-5710PZ
Firebox T85-PoE Hardware Guide
13 WatchGuard Technologies, Inc.

Firebox T85-PoE Hardware Guide
SFP single-mode transceivers (1000Base-LX, 1310nm, up to 10km)
nFinisar FTLF1318P3BTL
SFP copper transceivers
nWatchGuard WG8584
nOlink OLST12R-CNS1
nFiberstore SFP-1GT-1MA-JU
WatchGuard Technologies, Inc. 14

LTEInterface Module
The LTE interface module (WG9015) enables you to install a SIMcard for a 4G LTE cellular connection.
You can use this cellular connection as an external interface on the Firebox for WANconnectivity.
Verizon is currently not yet supported for 4G LTE access with the LTE module.
The LTEmodule comes with two external antennas. Insert the antennas in the SMA-type antenna
connectors on the module, then turn clockwise to tighten. We recommend you install the antennas at a 45
degree angle to optimize signal strength and reduce interference.
To install the SIM card, insert a Micro or Nano SIM card into the slot on the LTE interface module before
you install the module into the Firebox.
The LTEinterface module comes with an adapter that enables you to insert a Nano
SIM card into the SIMcard slot.
Firebox T85-PoE Hardware Guide
15 WatchGuard Technologies, Inc.

Firebox T85-PoE Hardware Guide
Align the direction of the SIM card and the placement of the diagonal edge based on the diagram beside
the SIM card slot.
Make sure the SIMcard is fully inserted into the slot.
WatchGuard Technologies, Inc. 16

Install an Interface Module
Interface Modules are not hot-swappable. To avoid damage to the system, you must
disconnect the Firebox from the power source before you install or remove an
interface module.
To install an interface module:
1. Power off the Firebox, and disconnect the power cable.
2. Loosen the two captive screws on the expansion bay cover of the Firebox and remove the cover.
The expansion bay contains guideposts on both sides to help you align the module.
3. Align the metal plate on the bottom of the interface module between the guideposts on both sides.
4. Insert the interface module into the expansion bay, and push the module firmly into place.
5. Tighten the two captive screws on the interface module.
6. Reconnect the power cable to the Firebox.
7. Power on the Firebox.
When the Firebox starts, Fireware automatically detects all installed interfaces.
Remove an Interface Module
Before you remove an installed interface module, make sure that the interfaces on
that module are not enabled in the Firebox configuration. You cannot manage a
Firebox if an enabled interface has been removed.
To remove an installed interface module:
1. Power off the Firebox, and disconnect the power cable.
2. Loosen the two screws on the installed interface module.
3. Slide the interface module out of the expansion bay.
4. Put the removed interface module on an antistatic surface.
5. Install the expansion bay cover and tighten the two captive screws.
Firebox T85-PoE Hardware Guide
17 WatchGuard Technologies, Inc.

Firebox T85-PoE Hardware Guide
ACPower Adapter
The AC power adapter supplies power for the Firebox. Before you connect the adapter, verify that the
color band on the cord matches the color ring around the power plug on the Firebox.
To safely disconnect the power supply:
Slide the black plastic external housing away from the Firebox to expose the internal silver metal
connector. With the internal silver connector exposed, continue to pull to disconnect the cord.
The Firebox T85-PoE includes a power cable to connect to the AC power adapter.
The suffix on the Firebox SKU indicates the type of power plug included with the device. Note that the
suffix is not restrictive – for instance, though tagged as “AU” for Australia, the Type I plug is also used in
China, New Zealand, and Argentina. If your country does not use one of these four plugs, use an adapter
with one of these plugs.
WatchGuard Technologies, Inc. 18

SKUSuffix
Plug
Type Used in regions Photo
-US A US, Canada, Japan, Taiwan, Central
America, Some countries in South
America, Philippines
-UK G United Kingdom, Ireland, Hong Kong,
Singapore, Malaysia, some African
countries
-EU C Europe, Middle East, Korea,
Indonesia, some African countries
-AU I China, Australia, New Zealand
Firebox T85-PoE Hardware Guide
19 WatchGuard Technologies, Inc.

Firebox T85-PoE Hardware Guide
Restore Factory-Default Settings
If you have a problem in your configuration file that you cannot correct, you can restore the factory-default
settings and start from a new configuration file. For example, if you do not know the administrator account
passphrase, or if a power interruption causes damage to the Fireware OS, you can restore the Firebox to
the factory-default settings and build your configuration again.
To reset the Firebox to factory-default settings:
1. Power off the Firebox.
2. Press and hold the Reset button on the back of the Firebox.
3. Power on the Firebox while you continue to hold the Reset button.
4. Continue to hold the Reset button until the Attn indicator on the front of the Firebox begins to flash.
5. Release the Reset button.
6. Wait until the Attn indicator stays lit and does not flash.
7. Power off the Firebox.
8. Power on the Firebox.
The Firebox restarts with factory-default settings.
WatchGuard Technologies, Inc. 20