Watchguard Firebox T35-R Installation instructions

Firebox®T35-R
Hardware Guide
Firebox®T35-R
DS3AE5

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 8/8/2022
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2022 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade
names mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence
products and services to more than 75,000 customers worldwide.
The company’s mission is to make enterprise-grade security
accessible to companies of all types and sizes through simplicity,
making WatchGuard an ideal solution for Distributed Enterprises
and SMBs. WatchGuard is headquartered in Seattle, Washington,
with offices throughout North America, Europe, Asia Pacific, and
Latin America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity, for
real-time information about the latest threats and how to cope with
them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. i

Contents
WatchGuard Firebox T35-R Hardware Guide 1
Fireware OS 1
About Your Hardware 1
Hardware Specifications 1
Interface Specifications 1
Power Requirements 2
Environmental Requirements 2
Hardware Description 2
Front 2
Rear 4
Direct DC Terminal Adapter 4
Connect Firebox Cables 5
DIN Rail Mounting Plate 5
Restore Factory Default Settings 5
ii WatchGuard Technologies, Inc.

WatchGuard Firebox T35-R Hardware Guide
WatchGuard Firebox T35-R Hardware Guide
WatchGuard® Firebox security appliances deliver unparalleled unified threat management, superior
performance, ease of use, and value for your small organization or branch office. Our security subscriptions
give you fully integrated protection from spyware, spam, viruses, worms, trojans, web-based exploits, and
blended threats. From firewall and VPN protection to secure remote access, WatchGuard Firebox
appliances support a broad range of network environments.
This guide introduces the Firebox T35-R RoHS-compliant (lead-free) hardware product. Firebox T35-R is a
rugged version of the Firebox T35, suitable for installation in harsh environments outside a typical small
office or rack room.
Fireware OS
The Firebox T35-R supports WatchGuard’s next generation UTM OS—Fireware® OS. Each Firebox
appliance includes Fireware OS and delivers exceptional protection against today's sophisticated threats to
make sure that your business stays connected. For more information on the features of Fireware OS, see
Fireware Help.
About Your Hardware
Hardware Specifications
Processor NXP T1024
Memory 4 GB
Storage 16 GB mSATA
Dimensions D = 164 mm (6.46")
W = 240 mm (9.45")
H = 43 mm(1.7")
Weight 1.74 kg(3.84 lbs)
Interface Specifications
Network Interfaces 5 1000Base-TX, RJ45
I/O Interfaces 2 USB 2.0
1 RJ45 Serial Port
WatchGuard Technologies, Inc. 1

Power Requirements
The Direct DC Terminal Adapter is shipped with the Firebox. If you prefer to use an AC
adapter, you must order it separately from your WatchGuard reseller. You can find a
reseller on the WatchGuard Find Resellers page.
The Direct DC Terminal Adapter connects your T35-R directly to your power supply. The DC power
requirements are:
nInput: 12 - 48VDC +/-5% at 50/60Hz
nMaximum Power Consumption: 24W DC, for example:
o12VDC at 2A
o48VDC at 0.5A
Environmental Requirements
To safely install your Firebox, we recommend that you:
nTurn off electrical power to the circuit until the adapter and earth ground are connected, and you are
ready to turn on the Firebox.
nPut it in a secure area, such as a locked room, to block the device from people who do not have
permission to use it.
nConnect it to a conditioned power supply to prevent damage from sudden power changes.
Other environmental requirements:
nOperating temperature: -40° to 60°C (-40° to 140°F)
nOperating humidity: 5% to 90% non-condensing
nNon-operating temperature: –40° to 70°C (-40° to 158°F)
nNon-operating humidity: 5% to 90% non-condensing
Hardware Description
Front
Front view of the Firebox:
WatchGuard Firebox T35-R Hardware Guide
2 WatchGuard Technologies, Inc.

WatchGuard Firebox T35-R Hardware Guide
Network Interface Status Indicators
The Firebox T35-R has five network interfaces. These interfaces are labeled 0/WAN, 1/LAN, 2, 3, 4.
There are two status indicators for each interface.
Indicator Indicator Color Interface Status
1000
Yellow Link speed: 1000 Mbps
Blinks (speed of blink increases as the data flow
increases)
Data sent and received
10/100
Green Link speed: 10 Mbps or 100
Mbps
Blinks (speed of blink increases as the data flow
increases)
Data sent and received
Power ( )
The Power indicator is lit to indicate power status. It is green when the Firebox is powered on.
Attn
The Attn indicator is yellow when you start the device with the Reset button pressed. For more
information, see Restore Factory Default Settings .
Mode
The Mode indicator shows the status of the external network connection. If the device can connect
to the external network and send traffic, the indicator is green. The indicator flashes if the device
cannot send traffic to the external network.
Status
The Status indicator is lit when there is a management connection to the device. The Status indicator
is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line
interface. It is also lit when the device is polled by WatchGuard System Manager.
Failover
The failover indicator is lit when there is a WAN failover from the primary external interface to the
backup interface. After the external interface connection fails back to the primary external interface,
the indicator is not lit.
USB Interface
The device includes two USB interfaces, one in the front and one in the rear. Connect a USB storage
device for USB backup and restore, or to store a support snapshot. For more information, see
Fireware Help.
WatchGuard Technologies, Inc. 3

Rear
Rear view of the Firebox:
Serial Port (Console)
The leftmost port is an RJ45 serial console port. An RJ45 serial cable is not included with the device.
USB Interface
The device includes two USB interfaces, one in the front and one in the rear. Connect a USB storage
device for USB backup and restore, or to store a support snapshot. For more information, see
Fireware Help.
Reset Button
This resets the device. To restore the device to factory default settings, see Restore Factory Default
Settings .
Power Switch
Controls the power supplied to the device. Move the switch to position |to power on the device, or
position 0to power it off.
Power Input
A Direct DC Terminal Adapter is included with your Firebox. It connects the Firebox directly to your
power supply. If you prefer to use an AC adapter, you must order it separately. See the installation
instructions in Direct DC Terminal Adapter .
Ground Terminal
The ground terminal, indicated by , is where you connect your electrical ground to protect your
Firebox from electrical surges. To meet safety and electromagnetic interference (EMI) requirements,
you must connect the Firebox to an earth ground before you connect power.
Direct DC Terminal Adapter
The Direct DCTerminal Adapter connects the Firebox directly to your power supply. To meet safety and
electromagnetic interference (EMI) requirements, you must connect the Firebox to an earth ground before
you connect power.
A retention mechanism prevents accidental disconnection of the power cord. To
avoid damage to the power cord, before you remove the power adapter, disengage
the retention mechanism. Always pull from the connector and not the cord.
WatchGuard Firebox T35-R Hardware Guide
4 WatchGuard Technologies, Inc.

WatchGuard Firebox T35-R Hardware Guide
Turn off electrical power until the adapter and earth ground are connected, and you are
ready to turn on the Firebox.
To attach the Direct DCTerminal Adapter to the Firebox:
1. Connect a 3.2 mm stranded copper ground wire to the ground terminal on the Firebox.
Connect the other end of the ground wire to the earth ground.
2. Insert the adapter into the DC port of the Firebox.
3. Tighten the retention screw.
4. Connect the positive wire to the side of the adapter indicated by a + symbol, then connect the
negative wire to the side of the adapter indicated by a — symbol.
5. Turn on the Firebox.
Connect Firebox Cables
Connect the Ethernet cables to complete the setup with WatchGuard System Manager or the Fireware Web
UI:
1. Use an Ethernet cable to connect interface 1 of the Firebox to your computer.
2. Use an Ethernet cable to connect interface 0 to a router or network that provides Internet access.
See Set Up Your Firebox for further instructions on how to complete your Firebox deployment.
DIN Rail Mounting Plate
The DIN rail mounting plate enables you to mount the Firebox on a wall in a good location to increase the
wireless range. You can attach the mounting plate to the sides or bottom of the Firebox.
To install the mounting plate:
1. Securely screw the mounting plate to the Firebox with the included screws.
2. Clip the mounting plate onto the DIN rail.
WatchGuard Technologies, Inc. 5

5. Release the Reset button.
6. Wait until the Attn indicator stays lit and does not flash. This can take 75 seconds or more.
You must start the device again before you can connect to it. If you do not, when you try
to connect to the device, a web page appears with the message, "Your device is running
from a backup copy of firmware." This message also appears if the Reset button is
stuck in the depressed position. If you continue to see this message, check the Reset
button and start the device again.
7. Power off the Firebox.
8. Power on the Firebox.
The Firebox restarts with factory-default settings.
WatchGuard Firebox T35-R Hardware Guide
6 WatchGuard Technologies, Inc.
Restore Factory Default Settings
If you have a problem in your configuration file that you cannot correct, you can restore the factory default
settings and start from a new configuration file. For example, if you do not know the administrator account
passphrase, or if a power interruption causes damage to the Fireware OS, you can restore the Firebox to the
factory default settings and build your configuration again.
To reset the Firebox to factory default settings:
1. Power off the Firebox.
2. Press and hold the Reset button on the back of the Firebox.
3. Power on the Firebox while you continue to hold the Reset button.
4. Continue to hold the Reset button until the Attn indicator on the front of the Firebox begins to flash.