Watchguard Firebox T35 Installation instructions

Firebox®T35, T35-W
Hardware Guide
Firebox®T35, T35-W
MS3AE5, MS3AE5W

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 4/30/2019
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2019 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade names
mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence
products and services to more than 75,000 customers worldwide.
The company’s mission is to make enterprise-grade security
accessible to companies of all types and sizes through simplicity,
making WatchGuard an ideal solution for Distributed Enterprises
and SMBs. WatchGuard is headquartered in Seattle, Washington,
with offices throughout North America, Europe, Asia Pacific, and
Latin America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity, for
real-time information about the latest threats and how to cope with
them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. i

Contents
WatchGuard Firebox T35 and T35-W Hardware Guide 1
Fireware OS 1
About Your Hardware 1
Hardware Specifications 1
Interface Specifications 2
Environmental Requirements 2
Hardware Description 2
Front 2
Rear 4
AC Power Adapter 5
Wall Mounting Plate 6
Restore Factory Default Settings 6
ii WatchGuard Technologies, Inc.

WatchGuard Firebox T35 and T35-W Hardware Guide
WatchGuard Firebox T35 and T35-W Hardware Guide
WatchGuard® Firebox security appliances deliver unparalleled unified threat management, superior
performance, ease of use, and value for your small organization or branch office. Our security subscriptions
give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-based exploits, and
blended threats. From firewall and VPN protection to secure remote access, WatchGuard Firebox
appliances support a broad range of network environments.
This guide introduces the Firebox T35/T35-W RoHS-compliant (lead-free) hardware products. The Firebox
T35/T35-W network security appliance is designed for small organizations and branch offices.
Fireware OS
The Firebox T35/T35-W supports WatchGuard’s next generation UTM OS—Fireware® OS. Each Firebox
appliance includes Fireware OS and delivers exceptional protection against today's sophisticated threats to
make sure that your business stays connected. For more information on the features of Fireware OS, see
Explore Fireware Help.
About Your Hardware
Hardware Specifications
Processor NXP T1024
Memory 2 GB
Storage 16 GB mSATA
Power Supply Input Ratings: 100-240VAC, MAX 1.8A@100VAC, 60-50Hz
Output Ratings : 54V, Max 64.8W
Dimensions D = 205.5 mm (8")
W = 217 mm (8.5")
H = 48 mm(1.8")
Weight T35: 0.88 kg(1.94 lbs)
T35–W: 0.9 kg (1.98 lbs)
WatchGuard Technologies, Inc. 1

Interface Specifications
Network Interfaces 5 1000Base-TX, RJ45
Interface 4 supports PoE+ (Power over Ethernet), compliant with the
IEEE 802.3at standard
Radio Type and
Frequency Band
(T35–W)
2.4 GHz 802.11 b/g/n
5 GHz 802.11 a/n/ac
I/O Interfaces 2 USB 2.0
1 RJ45 Serial Port
Environmental Requirements
To safely install your Firebox, we recommend that you:
nInstall it in indoors
nPut it in a secure area, such as a locked room, to block the device from people who do not have
permission to use it
nConnect it to a conditioned power supply to prevent damage from sudden power changes
Other environmental requirements:
nOperating temperature: 0° to 40°C (32° to 104°F)
nOperating humidity: 5% to 90% non-condensing
nNon-operating temperature: –40° to 70°C (-40° to 158°F)
nNon-operating humidity: 5% to 90%, non-condensing
Hardware Description
Front
Front view of the Firebox:
WatchGuard Firebox T35 and T35-W Hardware Guide
2 WatchGuard Technologies, Inc.

WatchGuard Firebox T35 and T35-W Hardware Guide
Fail Over
The Fail Over indicator is lit when there is a WAN failover from the primary external interface to the
backup interface. After the external interface connection fails back to the primary external interface,
the indicator is not lit.
WAP
On the Firebox T35-W models, the WAP indicator is lit when the appliance is activated as a wireless
access point or a wireless client. The color indicates the active wireless radio band.
Indicator Indicator Color Wireless Band
WAP
Yellow 2.4 GHz radio band
Blinks (speed of blink increases as the data flow increases) Data sent and received
Green 5 GHz radio band
Blinks (speed of blink increases as the data flow increases) Data sent and received
Network Interface Status Indicators
The Firebox T35/T35-W has five network interfaces. There are two status indicators for each
interface.
Indicator Indicator Color Interface Status
1000
Yellow Link speed: 1000 Mbps
Blinks (speed of blink increases as the data flow
increases)
Data sent and received
10/100
Green Link speed: 10 Mbps or 100
Mbps
Blinks (speed of blink increases as the data flow
increases)
Data sent and received
Status
The Status indicator is lit when there is a management connection to the device. The Status indicator
is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line
interface. It is also lit when the device is polled by WatchGuard System Manager.
Mode
The Mode indicator shows the status of the external network connection. If the device can connect
to the external network and send traffic, the indicator is green. The indicator flashes if the device
cannot send traffic to the external network.
WatchGuard Technologies, Inc. 3

Attn
The Attn indicator is yellow when you start the device with the Reset button pressed. For more
information, see Restore Factory Default Settings .
Power ( )
The Power indicator is lit to indicate power status. It is green when the Firebox is powered on.
Rear
Rear view of the Firebox:
Serial Port (Console)
The leftmost port is an RJ45 serial console port. An RJ45 serial cable is not included with the device.
USB Interfaces
The device includes two USB interfaces. Connect a USB storage device for USB backup and
restore, or to store a support snapshot. For more information, see Explore Fireware Help.
Network Interfaces
The Ethernet interfaces have standard RJ45 connectors and support link speeds of 10, 100, or 1000
Mbps.
The Firebox T35/T35-W has five network interfaces. These interfaces are labeled 0/WAN, 1/LAN, 2,
3, 4-PoE. Interface 4 is a PoE+ (Power over Ethernet) interface, compliant with the IEEE 802.3at
standard.
Reset Button
This resets the device. To restore the device to factory default settings, see Restore Factory Default
Settings .
Power Switch
Controls the power supplied to the device. Move the switch to position 1to power on the device, or
position 0to power it off.
Power Input
An AC power adapter is included with your device. Connect the AC adapter to the device and to a
power source. The power supply tip is plus (+) polarity. Use only the supplied AC power adapter.
WatchGuard Firebox T35 and T35-W Hardware Guide
4 WatchGuard Technologies, Inc.

WatchGuard Firebox T35 and T35-W Hardware Guide
AC Power Adapter
The AC power adapter supplies power for the Firebox.
A retention mechanism prevents accidental disconnection of the power cord. Before
you unplug the power adapter, disengage the retention mechanism to avoid
damaging the cord. Always pull from the connector and not the cord.
There are two types of AC power adapters for the Firebox T35/T35-W. You will receive either the
rectangular adapter or the round adapter with your Firebox. Both types of adapters have a positive retention
system to prevent accidental disconnection. To safely disconnect the cord:
nFor the round adapter, slide the black plastic external housing away from the Firebox to expose the
internal silver metal connector. With the internal silver connector exposed, continue to pull to
disconnect the cord. The power cord and the power plug on the Firebox are color coded. Verify that the
color band on the cord matches the color ring around the power plug on the Firebox before you connect
the adapter.
nFor the rectangular adapter, press the button on top of the connector to release the connector and pull
from the base of the connector. Pulling from the cord could damage the adapter.
A Firebox shipped outside the U.S. includes four power cables to connect to the AC power adapter. Use the
correct power cable for the power source used in your country.
Do not connect this power adapter to any other WatchGuard product.
WatchGuard Technologies, Inc. 5

Wall Mounting Plate
The wall mounting plate (available separately) enables you to mount the Firebox on a wall in a good location
to increase the wireless range.
To install the wall mounting plate:
1. Place the wall mounting plate horizontally against the wall where you want to install the Firebox.
2. Securely screw the wall mounting plate to the wall with four screws 1/8" (3 mm) wide and at least 3/4"
(18 mm) long.
3. Align the two holes on the bottom of the Firebox with the two connection points on the mounting plate.
4. Push the Firebox toward the mounting plate, until the two connection points on the mounting plate are
inside the holes on the bottom of the Firebox. Then press firmly down to seat the device on the plate.
To remove the Firebox from the mounting plate, push the Firebox up slightly, and then pull out, to separate
the connection points on the mounting plate from the holes on the bottom of the Firebox.
Restore Factory Default Settings
If you have a problem in your configuration file that you cannot correct, you can restore the factory default
settings and start from a new configuration file. For example, if you do not know the administrator account
passphrase, or if a power interruption causes damage to the Fireware OS, you can restore the Firebox to the
factory default settings and build your configuration again.
To reset the Firebox to factory default settings:
1. Power off the Firebox.
2. Press and hold the Reset button on the back of the Firebox.
3. Power on the Firebox while you continue to hold the Reset button.
4. Continue to hold the Reset button until the Attn indicator on the front of the Firebox begins to flash.
5. Release the Reset button.
6. Wait until the Attn indicator stays lit and does not flash. This can take 75 seconds or more.
You must start the device again before you can connect to it. If you do not, when you try
to connect to the device, a web page appears with the message, "Your device is running
from a backup copy of firmware." This message also appears if the Reset button is
stuck in the depressed position. If you continue to see this message, check the Reset
button and start the device again.
7. Power off the Firebox.
8. Power on the Firebox.
The Firebox restarts with factory-default settings.
WatchGuard Firebox T35 and T35-W Hardware Guide
6 WatchGuard Technologies, Inc.