Recently, I purchased a WatchGuard XTM515 Firewall for our company usage. Its price is lower than CISCO and Juniper, but higher than Zyxel and Huawei. So far, WatchGuard is very stable and easy to use. I configured it as the following screen dump for your reference. As a conclusion, I will recommend WatchGuard XTM515 Firewall you.

diag0

My Network Port Connection:

  1. Port # 0  for management console
  2. Port # 1  for internal network LAN connection
  3. Port # 5 & 6 for external broadband WAN connection

Management Connection Setup in two ways as below:

  1. Connect computer to Management Console port # 0, it will auto-get ip address 10.0.0.1, and then remote to https://10.0.0.254:8080
  2. Connect computer to internal network port # 1, it will auto-get ip address, and then remote to https://192.168.1.254:8080
  • Preset User Account:   admin
  • Perset Password:   readwrite

Configuration Step 1. Update the management connection port and then Reboot

diag1

diag2

Configuration Step 2. SNAT

diag3

diag4

Configuration Step 3. Interface Setup for DHCP – IP and MAC addresses

diag5

diag6

Configuration step 4. Firewall – Aliases setup

diag7

4.1 Example Setup of “Deny_to_internet_IP_1_to_99” Policy

diag8

Configuration Steps 5. Firewall -> Firewall Policies

diag9

5.1. Policy Example of “Deny_to_internet” Setup 

diag10

5.2. “Deny_to_internet” Policy -> Schedule

diag11

5.3. Policy Checker

diag12

diag13

diag14

5.4. Example of Setup “HTTP”

diag15

diag16

5.5. Example Setup of “Allow QQ” Policy

diag17

Configuration Step 6. Anti-Virus Function

diag18

Configuration Step 7. Backup

diag19