WatchGuard Firebox M5850

WatchGuard M5850. Sustained Performance for Campus and Core Networks.

The Firebox M5850 is built for campus and core networks that can't afford to slow down when every security service is on. More built-in fiber than the M4850, no cap on VPN tunnels, and hot-swap power and fans keep a large network moving. Manage it in WatchGuard Cloud or locally, whichever fits your team.

Shop M5850 Bundles

M5850 Key Specs

Full Security Throughput

13.8 Gbps

IPsec VPN Throughput

26.0 Gbps

Ports

26 (up to 25 Gb) + OCP Bay

Max Connections

38 million

Expert Pre-Sales Advice Certified reps reply in 1 hour.

Config & Managed Services Skip the setup. We'll do it.

POs · Tax-Exempt · Net 30 Welcomed for Corp, Edu, & Gov.

Same-Day Shipping Order by 3pm EST, ships today.

Specifications

WatchGuard Firebox M5850 at a Glance

Performance

Firewall (UDP 1518 / IMIX): 79.0 / 22.0 Gbps
UTM (full / fast scan): 27.0 / 37.5 Gbps
IPS (full / fast scan): 33.5 / 38.0 Gbps
Antivirus: 36.5 Gbps
HTTPS inspection (IPS, full scan): 13.8 Gbps
Sized for: Campus core, large HQ hubs, and data center edge

Interfaces & Hardware

Network ports: 8 x 1 Gb RJ45, 6 x 1 Gb SFP, 8 x 10 Gb SFP+, 4 x 25 Gb SFP28
Expansion: 1 OCP 3.0 bay (4 x 25 Gb SFP28 or 2 x 100 Gb QSFP28)
I/O: 1 serial / 2 USB-A
Power: Dual hot-swap redundant 600W supplies
Cooling: 4 hot-swap fan modules
Size: 1U rackmount

VPN & Networking

VPN (UDP 1518 / IMIX): 26.0 / 5.0 Gbps
Branch Office VPN: Unrestricted
Mobile VPN: Unrestricted
VLANs: Unrestricted
SD-WAN: Multi-WAN failover, dynamic path selection
Routing & HA: BGP, OSPF, RIP; active/passive and active/active HA; link aggregation

Capacity & Security

Concurrent connections: 38 million
Proxy connections: 2.5 million
New connections per second: 286,000
EDR Core: 250 sensors included
Suites: Basic Security or Total Security

Comparing Firebox M Series Models?

The M Series scales from busy midsize offices up to data center hubs. See every model side by side to match throughput, ports, and VPN capacity to your network.

Compare All M Series Models

M5850 FAQ

Who should choose the WatchGuard Firebox M5850?

The M5850 is the middle model in WatchGuard's newest rackmount family, aimed at campus and core networks that need steady performance with full scanning enabled. It's a good fit for a large headquarters acting as the hub for many branch sites, or for an organization that's outgrowing the M4850 or an older M5800.

Is there a limit on VPN tunnels with the M5850?

No. WatchGuard lists both Branch Office VPN and Mobile VPN as unrestricted on the M5850, so tunnel count is limited by your hardware performance, not a license cap. That's a key difference from the M4850, which tops out at 5,000 branch office and 10,000 mobile VPN tunnels. Site to site VPN supports IKEv2, IPSec, and route based tunnels, and remote access supports IKEv2, IPSec, L2TP, and TLS.

What ports does the M5850 include, and can I add more?

The M5850 ships with 26 ports: 8 x 1 Gb RJ45, 6 x 1 Gb SFP, 8 x 10 Gb SFP+, and 4 x 25 Gb SFP28. One OCP 3.0 bay takes an optional 4 x 25 Gb SFP28 card or a 2 x 100 Gb QSFP28 card for faster uplinks. Install modules with the appliance powered off.

Which security suite should I pair with the M5850?

Basic Security covers IPS, Application Control, WebBlocker, spamBlocker, Gateway AntiVirus, Reputation Enabled Defense, and Network Discovery. Total Security adds APT Blocker sandboxing, DNSWatch, IntelligentAV, ThreatSync, longer WatchGuard Cloud data retention, and Gold 24 x 7 support. If the M5850 is protecting your core, Total Security is the safer pick. Our team can help you price both.

What redundancy is built into the M5850?

The M5850 has two redundant 600W power supplies and four fan modules, all hot-swappable. If a fan fails, the rest spin up to compensate while you swap the part. For appliance level redundancy, run two M5850s as an active/passive or active/active HA cluster.

What's the difference between the M5850 and the M4850?

The M5850 steps up to a 20-core processor (the M4850 has 12 cores) and more built-in fiber, with 26 ports compared to 20. Full HTTPS inspection with IPS rises from 8.8 Gbps to 13.8 Gbps, UTM throughput from 19.1 Gbps to 27.0 Gbps, and IPsec VPN from 18.9 Gbps to 26.0 Gbps. The biggest change is VPN scale: the M5850 has no tunnel limit, while the M4850 caps at 5,000 branch office tunnels. Both share the same 1U chassis, OCP bay, and hot-swap power and fans.

Plan Your M5850 Deployment with an Expert.

Tell us how many sites you're connecting and what's running across your core. Our WatchGuard-certified team will help you choose a security suite, plan an HA pair, and pick the right OCP module. Firewalls.com is a WatchGuard One Gold Partner, so you get a team that knows the Firebox lineup inside and out.

Request a Quote

You'll always get our best prices when you're signed in!

WatchGuard Firebox M5850 Base Appliance

The WatchGuard Firebox M5850 is a high-performance rackmount firewall for large distributed enterprises and data center hub deployments, with hot-swappable dual-redundant power and flexible expansion modules.

Firewall Throughput: 79.0 Gbps

VPN Throughput: 26.0 Gbps

Concurrent Connections: 38,000,000

Branch Office VPN Tunnels: Unrestricted

VLANs: Unrestricted

Form Factor: Rackmount with Hot-Swappable Dual-Redundant Power

Management: WatchGuard Cloud with RapidDeploy
From $17,529.00
To $112,930.40 Regular Price $146,460.00

Product Details →

All orders placed after 3pm EST will ship on the next business day
WatchGuard Firebox M5850 Trade-in Appliance

The WatchGuard Firebox M5850 is a high-performance rackmount firewall for large distributed enterprises and data center hub deployments, with hot-swappable dual-redundant power and flexible expansion modules.

Firewall Throughput: 79.0 Gbps

VPN Throughput: 26.0 Gbps

Concurrent Connections: 38,000,000

Branch Office VPN Tunnels: Unrestricted

VLANs: Unrestricted

Form Factor: Rackmount with Hot-Swappable Dual-Redundant Power

Management: WatchGuard Cloud with RapidDeploy
From $36,999.00 Regular Price $43,850.00
To $107,513.60 Regular Price $139,140.00

Product Details →

All orders placed after 3pm EST will ship on the next business day
WatchGuard Firebox M5850 High Availability

The WatchGuard Firebox M5850 is a high-performance rackmount firewall for large distributed enterprises and data center hub deployments, with hot-swappable dual-redundant power and flexible expansion modules.

Firewall Throughput: 79.0 Gbps

VPN Throughput: 26.0 Gbps

Concurrent Connections: 38,000,000

Branch Office VPN Tunnels: Unrestricted

VLANs: Unrestricted

Form Factor: Rackmount with Hot-Swappable Dual-Redundant Power

Management: WatchGuard Cloud with RapidDeploy
From $22,088.00 Regular Price $23,700.00
To $29,887.60 Regular Price $34,240.00

Product Details →

All orders placed after 3pm EST will ship on the next business day

Hi there!

WatchGuard Firebox M5850

WatchGuard M5850. Sustained Performance for Campus and Core Networks.

WatchGuard Firebox M5850 at a Glance

Performance

Interfaces & Hardware

VPN & Networking

Capacity & Security

Comparing Firebox M Series Models?

M5850 FAQ

Plan Your M5850 Deployment with an Expert.

You'll always get our best prices when you're signed in!

WatchGuard Firebox M5850 Base Appliance

WatchGuard Firebox M5850 Trade-in Appliance

WatchGuard Firebox M5850 High Availability

Personal Information

Account Information

Please enter your email address below to receive a password reset link.

Expedited Delivery

Same Day Shipping

WatchGuard Firebox M5850

WatchGuard M5850. Sustained Performance for Campus and Core Networks.

WatchGuard Firebox M5850 at a Glance

Performance

Interfaces & Hardware

VPN & Networking

Capacity & Security

Comparing Firebox M Series Models?

M5850 FAQ

Plan Your M5850 Deployment with an Expert.

You'll always get our best prices when you're signed in!

WatchGuard Firebox M5850 Base Appliance

WatchGuard Firebox M5850 Trade-in Appliance

WatchGuard Firebox M5850 High Availability

Request Emailed Quote