WatchGuard® Model	WatchGuard® XTM 21/21-W	WatchGuard® XTM 22/22-W	WatchGuard® XTM 23/23-W
Ideal For	Remote offices, small businesses that need and easy-to-manage solution at a great price. Available in wired and wireless models.	Remote offices, small business, wireless hotspots that want an affordable, all-in-one security solution. Available in wired and wireless models.	Remote offices, small businesses, wireless hotspots looking for strong security, flexible management , and advanced networking. Available in wired and wireless models.
Hardware
Model Upgradeable			N/A
Interfaces	3: 10/100/1000 and 3:10/100	3: 10/100/1000 and 3:10/100	3: 10/100/1000 and 3:10/100
DMZs	6	6	6
Security
Application Proxies	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP	HTTP, HTTPS, SMTP, FTP, DNS, TCP, POP3, SIP, H.323, TFTP
Intrusion Prevention (DOS, DDOS, PAD, port scanning, spoofing attacks, address space probes, and more)
Wireless Models Only	802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services	802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services	802.11b/g/n, WPA, WPA2, WEP, Wireless Guest Services
User Authentication with transparent Windows authentication
Performance
Firewall Throughput**	110 Mbps	150 Mbps	195 Mbps
VPN Throughput**	35 Mbps	55 Mbps	55 Mbps
XTM Throughput**	18 Mbps	30 Mbps	40 Mbps
Concurrent Sessions* (bi-directional)	10,000	20,000	30,000
VPN Tunnels
Branch Office VPN Tunnels(Max.)	5	20	50
Mobile VPN with SSL Incl/Max	1/11	1/25	55
Mobile VPN with IPSec Client Licenses (Bundled)	1	5	5
Mobile VPN with IPSec Tunnels (Max.)	11	25	55
VPN Authentication
Management
Centralized (Multibox) Management. Optional licenses enable Drag and Drop VPN and one-touch appliance updates.
Networking Features
Dynamic NAT
Static NAT
One to One NAT
VLAN	20, upgradeable to 50 with Fireware® XTM Pro upgrade	20, upgradeable to 50 with Fireware® XTM Pro upgrade	50
Policy-Based Routing	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
WAN Failover	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
Multi-WAN Load Balancing	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
Server Load Balancing	N/A	N/A	N/A
Traffic Management/QoS
High AvailabilityActive/Active or Active/Passive	N/A	N/A	N/A
Dynamic Routing	Optional with Fireware® XTM Pro	Optional with Fireware® XTM Pro
VoIP (SIP and H.323)Support
Additional Security Subscriptions
Application Control	Optional	Optional	Optional
Reputation Enabled Defense	Optional	Optional	Optional
spamBlocker with Virus Outbreak Detection	Optional	Optional	Optional
Gateway AntiVirus/ Intrusion Prevention Service (IPS)	Optional	Optional	Optional
WebBlocker with HTTPS URL filtering	Optional	Optional	Optional
LiveSecurity® Service	1-year, 2-year, and 3-year subscriptions available	1-year, 2-year, and 3-year subscriptions available	1-year, 2-year, and 3-year subscriptions available

*Concurrent sessions here represent the number of bi-directional connections. Firebox e-Series products have previously published uni-directional concurrent sessions which we have converted here for comparison purposes. You can multiply this bi-directional number by 2 to calculate uni-directional data.