Watchguard Firebox T30 Installation instructions

WatchGuard
Firebox T30 / T50
Hardware Guide
Firebox T30, T30-W, T50, T50-W
BS3AE5, BS3AE5W, BS5AE7, BS5AE7W

ii WatchGuard Firebox T30 / T50
ADDRESS
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
SUPPORT
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
SALES
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
ABOUT WATCHGUARD
WatchGuard offers affordable, all-in-one network and content security solutions that
provide defense-in-depth and help meet regulatory compliance requirements. The
WatchGuard Firebox line combines firewall, VPN, GAV, IPS, spam blocking and URL
filtering to protect your network from spam, viruses, malware, and intrusions. The new
XCS line offers email and web content security combined with data loss prevention.
WatchGuard extensible solutions scale to offer right-sized security ranging from small
businesses to enterprises with 10,000+ employees. WatchGuard builds simple, reliable,
and robust security appliances featuring fast implementation and comprehensive
management and reporting tools. Enterprises throughout the world rely on our
signature red boxes to maximize security without sacrificing efficiency and
productivity.
For more information, please call 206.613.6600 or visit www.watchguard.com.
Copyright and Patent Information
Copyright© 1998–2015 WatchGuard Technologies, Inc. All rights reserved.
WatchGuard, the WatchGuard logo, Firebox, LiveSecurity, and any other mark listed as a trademark in the “Terms of Use”
portion of the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard
Technologies, Inc. and/or it’s subsidiaries in the United States and/or other countries. All other trademarks are the property
of their respective owners.
The Power Architecture and Power.org wordmarks and the Power and Power.org logos and related marks are trademarks
and service marks licensed by Power.org.
Printed in the United States of America.
Part Number: Rev C
Revised: August 9, 2016
U.S. Patent Nos. 6,493,752; 6,597,661; D473,879. Other Patents Pending.
Notice to Users
Information in this guide is subject to change without notice. Updates to this guide are posted at:
http://www.watchguard.com/help/documentation/hardware.asp
Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be
reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Complete copyright, trademark, patent, and licensing information can be
found in the Copyright and Licensing Guide. You can find this document
online at: http://www.watchguard.com/help/documentation/

Hardware Guide 1
Hardware Specifications
WatchGuard® Firebox security appliances deliver unparalleled unified threat management, superior
performance, ease of use, and value for your small organization or branch office. Our security subscriptions
give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-based exploits, and
blended threats. From firewall and VPN protection to secure remote access, WatchGuard Firebox appliances
support a broad range of network environments.
This guide introduces the Firebox T30 and T50, RoHS-compliant (lead-free) hardware products offered by
WatchGuard.
The Firebox T30 and T50 network security appliancesare designed for small organizations and branch offices.
Fireware OS
The Firebox T30 and T50 appliances support WatchGuard’s next generation UTM OS—Fireware® OS. Each
Firebox appliance includes Fireware OS and delivers exceptional protection against today's sophisticated
threats to make sure that your business stays connected. For more information on the features of Fireware OS,
see the current Fireware Help.

2WatchGuard Firebox T30 / T50
Hardware Specifications
Package Contents
Firebox T30 or T50 appliance
Quick Start Guide
1 straight-through Ethernet cable
Power supply
1 power cord (US) or 4 power cords (US, AU, EU, UK)
Hardware Description
Hardware Specifications
Interface Specifications
Firebox T30 / T30-W Firebox T50 / T50-W
Processor Freescale P1011 Freescale P1020
Memory: DDR3 1 GB 2 GB
Storage: SD 8 GB 8 GB
Power supply Input Ratings: 90-264VAC, MAX
1.4A@100VAC, 60-50Hz
Output Ratings : 48V, Max 60W
Input Ratings: 90-264VAC, MAX
1.4A@100VAC, 60-50Hz
Output Ratings: 48V, Max 60W
Dimensions D = 176.1mm (6.93”)
W =235.9mm (9.29”)
H = 29.5mm (1.16”)
D = 176.1mm (6.93”)
W =235.9mm (9.29”)
H = 29.5mm (1.16”)
Weight T30 0.5 kg (1.1 U.S. pounds)
T30-W 0.54 kg (1.19 U.S. pounds)
T50 0.5 kg (1.1 U.S. pounds)
T50-W 0.55 kg (1.2 U.S. pounds)
Network interfaces • 5x 1000Base-TX, RJ45
•Interface4supportsPoE
(Power over Ethernet), compliant
with the IEEE 802.3at standard
• 7x 1000Base-TX, RJ45
•Interface6supportsPoE
(Power over Ethernet), compliant
with the IEEE 802.3at standard
Radio Type and
Frequency Band
(T30-W and T50-W)
• 2.4 GHz 802.11 b/g/n
• 5 GHz 802.11 a/n/ac
• 2.4 GHz 802.11 b/g/n
• 5 GHz 802.11 a/n/ac
I/O interfaces •2USB2.0
• 1 RJ45 Serial Port
•2USB2.0
• 1 RJ45 Serial Port

Hardware Guide 3
Hardware Specifications
Front View
The front panel of the Firebox T30-W.
The front panel of the Firebox T50-W.
Fail Over
The Fail Over indicator is lit when there is a WAN failover from the primary external interface to the
backup interface. After the external interface connection fails back to the primary external interface,
the indicator is not lit.
WAP
On Firebox T30-W and T50-W models, the WAP indicator is lit when the appliance is activated as a
wireless access point or a wireless client. The color indicates the active wireless radio band.
Network interface status indicators
On the Firebox T30, the five network interfaces are labeled 4, 3, 2, 1, 0. On the Firebox T50, the seven
network interfaces are labeled 6, 5, 4, 3, 2, 1, 0. There are two status indicators for each interface.
Status
The Status indicator is red when there is a management connection to the device. The Status
indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or the
command line interface. It is also lit when the device is polled by WatchGuard System Manager.
Indicator Indicator color Wireless Status
WAP Yellow 2.4 GHz radio band
Green 5 GHz radio band
Indicator Indicator color Interface Status
1000 Yellow Link speed: 1000 Mbps
Blinks (speed of blink increases as
the data flow increases)
Data sent and received
10/100 Green Link speed: 10 Mbps or 100 Mbps
Blinks (speed of blink increases as
the data flow increases)
Data sent and received

4WatchGuard Firebox T30 / T50
Hardware Specifications
Mode
The Mode indicator shows the status of the external network connection. If the device can connect
to the external network and send traffic, the indicator is green. The indicator flashes if the device
cannot send traffic to the external network.
Attn
The Attn indicator is yellow when you start the device with the Reset button pressed. For more
information, see “Restore Factory Default Settings” on page 9
Power ( )
The power indicator is green when the device is on.
Rear View
Rear panel of the Firebox T30.
Rear panel of the Firebox T50.
Network interfaces
The Ethernet interfaces have standard RJ45 connectors and support link speeds of 10, 100,
or 1000 Mbps. On each model, the highest numbered interface is a PoE (Power over Ethernet)
interface, compliant with the IEEE 802.3at standard.
oOn the Firebox T30 and T30-W, these interfaces are labeled 0/WAN, 1/LAN, 2, 3, 4-PoE.
oOn the Firebox T50 and T50-W, these interfaces are labeled 0/WAN,1/LAN, 2, 3, 4, 5, 6-PoE.
USB interfaces
The device includes two USB interfaces. Connect a USB storage device to use for USB backup and
restore, or to store a support snapshot. For more information, see the current Fireware Help.
Serial port (Console)
An RJ45 connector for the serial interface. An RJ45 serial cable is not included with the device.
Power switch
Controls the power supplied to the device. Move the switch to position 1to power on the device, or
position 0to power it off.
Power input
An AC power adapter is included with your device. Connect the AC adapter to the device and to a
power source. The power supply tip is plus (+) polarity. Use only the supplied AC power adapter.
Reset button
To reset the device, use the procedure in “Restore Factory Default Settings” on page 9.

Hardware Guide 5
Hardware Specifications
AC Power Adapter
The AC power adapter supplies power for the Firebox. A Firebox shipped outside the U.S. includes four power
cables to connect to the AC power adapter. Use the correct power cable for the power source used in your
country.
Caution
Do not connect this power adapter to any other WatchGuard product.
Wall Mounting Plate
The wall mounting plate (available separately) enables you to mount the Firebox on a wall in a good location
to increase the wireless range.
To install the wall mounting plate:
1. Place the wall mounting plate horizontally against the wall where you want to install the Firebox.
2. Securely screw the wall mounting plate to the wall with four screws 1/8" (3 mm) wide and at least 3/4"
(18 mm) long.
3. Align the two holes on the bottom of the Firebox with the two connection points on the mounting
plate.
4. Push the Firebox toward the mounting plate, until the two connection points on the mounting plate
are inside the holes on the bottom of the Firebox. Then press firmly down to seat the device on the
plate.
To remove the Firebox from the mounting plate, push the Firebox up slightly, and then pull out, to separate
the connection points on the mounting plate from the holes on the bottom of the Firebox.
Environmental Requirements
To safely install your Firebox, we recommend that you:
Install it indoors.
Put it in a secure area, such as a locked room, to block the device from people who do not have
permission to use it
Connect it to a conditioned power supply to prevent damage from sudden power changes
Other environmental requirements:
Operating temperature 0 – 40°C (32 – 104°F)
Operating relative humidity 5% - 90% Non-condensing
Non-operating temperature –40 – 70°C (–40 – 158°F)
Non-operating relative humidity 5% – 90% Non-condensing

6WatchGuard Firebox T30 / T50
Hardware Specifications
Safety Notices
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Read these instructions carefully
before you operate the product, and refer to them as needed for continued safe operation of your product.
Product Safety Certification
The WatchGuard product is safety certified for these standards:
CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10
UL 60950-1, Second Edition 2014-10-14
IEC 60950-1, 2005+A1:2009+A2:2013
EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
Safety Warning
Do not place objects on the power cord.
Do not obstruct the ventilation openings. These openings prevent overheating of the Firebox.
Never push objects of any kind into slots or openings on this equipment. If you make contact with a
voltage point or short out a part, it can result in fire or electrical shock.
When you remove or install an appliance, follow the general installation safety instructions provided
in this Hardware Guide to avoid injury or damage to the device.
You must disconnect the AC power cord from the Firebox before you remove the cover of the Firebox
for any reason.
There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries
according to the manufacturer’s instructions.
Disclaimer
WatchGuard shall not be held liable if the end user alters, modifies, or repairs any WatchGuard hardware
appliance.

Guide de démarrage rapide
Kurzanleitung
Guía Rápida
Guia de início rápido
快速設定手冊
Quick Start Guide
Firebox®T30, T30-W / T50, T50-W
HW Models: BS3AE5, BS3AE5W, BS5AE7, BS5AE7W
Guida introduttiva
WatchGuard® Technologies, Inc.

2 3
Activate Your Device
1. Go to www.watchguard.com/activate
2. Log in to your WatchGuard account, or create a new account*.
*If you create a new account, return to www.watchguard.com/activate after you nish the account
creation process.
3. Type the serial number for your device.
4. During activation, select your setup method:
• RapidDeploy QuickStart – Automatically download and apply a QuickStart
conguration le to your device, pre-congured with security settings
recommended by WatchGuard.
• Classic Activation – Use the Web Setup Wizard to create a basic conguration le
for your device.
5. Use the setup directions in this guide that match the method you selected.
English

4 5
RapidDeploy QuickStart Setup
1. Connect Your Device and Power it On
Make sure the computers on your network are congured to use DHCP. When you install
your Firebox, it will assign an IP address on the 10.0.1.0/24 network.
English
Your Network
Internet
Computer Internet
2. Connect to the Web UI
A. Go to https://10.0.1.1:8080
B. You can safely ignore any certicate warnings you see because the device uses a
self-signed certicate.
C. Log in with the user account admin and the Admin (readwrite) passphrase you set
during activation.
Your device has a basic conguration:
• Allows outbound TCP, UDP, and ping trac
• Blocks all unrequested trac from the external network
• Includes optimized security settings
Classic Activation Setup
1. Connect Your Device and Power it On
Make sure your computer is congured to use DHCP. When you connect to the Firebox,
it will assign an IP address on the 10.0.1.0/24 network.
2. Connect to the Web UI
A. Go to https://10.0.1.1:8080
B. You can safely ignore certicate warnings, because the device uses a
self-signed certicate.
C. Log in with the user name admin and the passphrase readwrite.
D. Follow the directions in the Web Setup Wizard to create a basic conguration le for
a new device. Click More Information if you have questions.
E. When the Wizard completes, log in to the Web UI with the admin user account and
the Admin (readwrite) passphrase you set during the Wizard.
F. Install the Firebox in your network.
Your device has a basic conguration:
• Allows outbound TCP, UDP, and ping trac
• Blocks all unrequested trac from the external network

6 7
About the Device Status Lights
Fail Over – Lights when there is a WAN failover from the primary external interface to the
backup interface.
WAP - (Wireless models only) Lights when the device is activated as a wireless access point
or as a wireless client.
Network interface status indicators – The Firebox T30 has ve network interfaces. The
Firebox T50 has seven network interfaces. There are two status indicators for each interface.
Indicator Indicator color Interface Status
1000 Yellow Link speed: 1000 Mbps
Blinks* Data sent and received
10/100 Green Link speed: 10 Mbps or
100 Mbps
Blinks* Data sent and received
* Blink speed increases as the data ow increases
Status – Shows when there is a management connection to the device. The Status
indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or
the command line interface. It is also lit when the device is polled by WatchGuard System
Manager.
Mode – Shows the status of the external network connection. If the device can connect
to the external network and send trac, the indicator is green. The indicator ashes if the
device cannot connect to the external network and send trac.
Attn – Lights when you start the device with the Reset button pressed.
Power ( ) – The power indicator is lit when the device is on.
Next Steps
Congratulations! You have nished basic setup of your Firebox. You can use the Web UI to
view and edit your conguration and to manage and monitor your device. Here are some
recommendations to help you get started:
Verify your Internet connectivity
• With your Firebox installed in your network, make sure that your users can
successfully browse the Internet.
Upgrade your Firebox to the latest OS version
Keep your Firebox current with the latest version of Fireware OS.
To upgrade:
1. In Fireware Web UI, select System > Upgrade OS.
2. Select Download and install an upgrade directly from watchguard.com.
3. From the drop-down list, select the upgrade version.
4. Click Upgrade.
Explore the features and functions of your Firebox
Browse the Web UI to learn more about the management, monitoring, and security
features. Help is available in the upper right of each screen.
English

8 9
Reset the Firebox to Factory-Default Settings
If you ever need to, you can restore your Firebox to its factory-default settings. For example,
if you do not know your administrator account passphrase or you want to start over with
RapidDeploy QuickStart, you can reset your device.
For more information, see the Hardware Guide for your Firebox, available at:
www.watchguard.com/help/documentation/hardware.asp
简体中文
激活设备
1. 转到 www.watchguard.com/activate
2. 登录到您的 WatchGuard 帐户，或者创建一个新帐户*。
*如果创建新帐户，请在完成帐户创建过程之后返回到 www.watchguard.com/activate 。
3. 输入设备的序列号。
4. 在激活期间，选择安装方法：
• 快速部署 – 自动下载快速部署配置文件并将其应用到您的设备，其中预配置了
WatchGuard 推荐的安全设置。
• 常规激活 – 使用网页安装向导为您的设备创建基本配置。
5. 请根据您的实际安装方法选择本手册中对应的安装说明。