

This scans incoming files, creates MD5 hashes and checks them with the LastLine cloud service to see if they're known malware. Gateway AV scanning is enabled on selected proxies and you'll need this running if you want to apply APT protection. We chose the latter for transparent scanning where the POP3 proxy client was set to append the subject line of dodgy messages with 'Spam', 'Bulk' or 'Suspect' tags so we could filter them out using Outlook message rules. Spam control is a cinch the spamBlocker wizard asked us to select incoming SMTP traffic and provide an internal mail server address or just activate IMAP or POP3. For web content filtering, we chose from 110 URL categories, added blocking actions for the HTTP and HTTPS proxies and left the wizard to add new firewall rules for our policies. The T15 employs proxies to control different traffic types and on first contact, each one loads a wizard to help with initial setup. And if you choose to go it alone, the appliance's web console offers a wizard-based setup routine that creates a base set of firewall policies for securing internet access.

Worry not about deployment as the subscription includes a free remote setup and configuration session with a WatchGuard in-house engineer. Enabling gateway AV drops this by 120Mbits/sec and even with all UTM features running, it still musters a very respectable 90Mbits/sec.

The T15 is no slouch in the performance stakes either as it boasts a high raw firewall throughput of 400Mbits/sec. It also activates data loss prevention (DLP), Dimension Command plus the advanced persistent threat (APT) blocker and includes a Gold Support subscription. WatchGuard's Total Security Suite subscription enables web content filtering, application controls, anti-spam, gateway antivirus (AV), network discovery, IPS and reputation enabled defence.
