WatchGuard Firebox M390 High Availability Firewall

The WatchGuard Firebox M390 High Availability Firewall is engineered for organizations that demand uncompromising security with uninterrupted uptime. Built to protect mid-size networks and growing enterprises, this high-availability (HA) appliance combines best-in-class threat prevention, scalable performance, and centralized management in a compact 1U form factor. With a 3-year standard support plan, you gain peace of mind through firmware updates, security service access, and direct vendor assistance, ensuring your network stays ahead of evolving threats while maintaining maximum uptime. The M390 is purpose-built for branch offices, data centers, and campuses that require resilient protection without sacrificing ease of use or operational efficiency.

• Enterprise-grade security with multi-layer threat protection: The Firebox M390 delivers robust firewall capabilities alongside integrated intrusion prevention, malware defense, web protection, application control, and DNS-layer security to guard every layer of your network perimeter.
• High availability for zero-downtime operations: Designed for continuous service, the M390 supports active/active or active/passive HA configurations with synchronized state and session data to ensure automatic failover and seamless policy enforcement during maintenance or outages.
• High-performance, scalable networking: Engineered with hardware-accelerated processing and optimized threat analysis, the M390 provides ample throughput to support growing traffic, secure VPN services, and concurrent user sessions without bottlenecks.
• Flexible deployment and routing options: Ideal for data centers, metropolitan networks, and dispersed campuses, the M390 offers versatile interface configurations, VPN connectivity (site-to-site and remote access), and adaptable routing features to fit diverse network topologies.
• Centralized management with 3-year standard support: Manage policies, devices, and security services from WatchGuard Cloud or WatchGuard System Manager (WSM) with a unified console. The 3-year standard support includes firmware updates, security services access, and direct technical assistance for dependable security operations.

Technical Details of WatchGuard Firebox M390 High Availability Firewall

• Product family: WatchGuard Firebox M-series, High Availability edition
• Form factor: 1U rack-mountable appliance designed for data centers, server rooms, and network closets
• High availability: Supports HA configurations with active/active or active/passive failover and synchronized session data
• Security features: Comprehensive firewall with intrusion prevention, malware protection, gateway antivirus, application control, URL filtering, DNS traffic protection, and threat intelligence integration
• VPN and remote access: Layered VPN options including site-to-site and client-based remote access for secure connectivity
• Management: Centralized policy management via WatchGuard Cloud or WatchGuard System Manager (WSM)
• Support: Includes 3-year standard support covering firmware updates and access to technical assistance
• Warranty: Hardware warranty aligned with WatchGuard’s standard terms for the M390 platform
• Power and cooling: Efficient power consumption in a compact chassis with appropriate cooling for data center environments
• Security services: Compatibility with WatchGuard’s comprehensive security services, enabling layered defenses and consistent policy enforcement across your network

How to install WatchGuard Firebox M390 High Availability Firewall

Installing the WatchGuard Firebox M390 in a high-availability deployment is straightforward when you follow these best-practice steps. Begin with a clear network plan that defines your HA pair, management access, and security policy baselines. Ensure you have the necessary licenses for security services and LiveSecurity, and verify that the latest firmware is available for both devices in the HA pair.

Step 1: Prepare the environment. Rack-mount the M390 in an appropriate data center or network closet, provide stable power, and verify network cabling to required segments (internal network, WAN connectivity, and management network). Physically secure the appliances and confirm proper ventilation to maintain optimal operating temperatures.

Step 2: Connect power and management interfaces. Power up the units and connect management ports to a secure management network. Access the devices through the management console or browser-based interface using the default login credentials provided by WatchGuard’s documentation. It is essential to perform initial access on a secure workstation and change default credentials immediately.

Step 3: Activate licenses and update firmware. Register the devices with your WatchGuard account to apply your 3-year standard support and security service licenses. Check for the latest firmware and apply updates to both units to ensure consistent feature availability and security protections across the high-availability pair.

Step 4: Configure high-availability pairing. Establish the HA relationship by configuring the primary and secondary devices as an active/standby or active/active pair, depending on your redundancy requirements. Enable stateful synchronization to ensure session and policy data are mirrored between units, minimizing disruption during failover.

Step 5: Define the baseline security policy and VPN topology. Create a baseline firewall policy set aligned with your organization’s security posture, including rules for traffic segmentation, access controls, and threat prevention. Configure site-to-site VPN tunnels to connect branch offices or data centers, and set up any required remote access VPN for staff working remotely. Finally, enable centralized logging and reporting to monitor security events and network performance in real time.

Step 6: Integrate with centralized management. Enroll the M390 HA pair in WatchGuard Cloud or WSM for centralized policy management, streamlined updates, and consolidated visibility. This integration simplifies ongoing administration, accelerates policy changes, and enhances incident response across the entire network.

Step 7: test failover and performance. Conduct failover testing to verify seamless continuity during HA transitions. Validate VPN functionality, firewall policy enforcement, and threat prevention during simulated outages. Review performance metrics to ensure the deployment meets your expected throughput, latency, and user experience targets.

These steps provide a practical framework for deploying the WatchGuard Firebox M390 in an HA configuration, enabling strong security posture and resilient network uptime. If your environment evolves, you can scale policy complexity and VPN capacity through WatchGuard’s management platforms while preserving consistent security outcomes.

Frequently asked questions

• What is the WatchGuard Firebox M390 High Availability Firewall? It is a high-availability security appliance designed for mid-size to large networks, delivering enterprise-grade threat protection, VPN capabilities, and centralized management with failover to ensure uninterrupted operations.
• What does the 3-year standard support include? The 3-year plan provides firmware updates, access to security services, and direct technical assistance from WatchGuard to help you maintain secure and up-to-date protection for your network.
• Is the M390 suitable for branch offices? Yes. The M390 offers scalable performance, HA capabilities, and flexible networking features that make it an excellent choice for branch offices requiring reliable security and continuity.
• What management tools are used with this device? WatchGuard Cloud and WatchGuard System Manager (WSM) are used for centralized policy management, deployment, monitoring, and reporting across the HA pair.
• Can I deploy VPN with the M390? Absolutely. The M390 supports site-to-site VPNs and remote access VPNs, enabling secure connectivity for remote workers and distributed sites while enforcing consistent security policies.