User guide

Comparing WFS and Fireware Pro
4 WatchGuard System Manager
• Centralized management of VPN tunnel configurations
• Certificate authority for distributing certificates for IPSec tunnels
Log Server
The Log Server collects log messages, event messages, alarms, and diagnostic messages from one or more
Firebox devices. The log messages are now kept in an *.xml format. This allows you to use third-party
XML tools to create your own custom reports. The Log Server was formerly known as the WatchGuard
Security Event Processor (WSEP).
WebBlocker Server
The WebBlocker Server operates with an HTTP Proxy policy to prevent users from browsing to specified
Web sites. You set the categories of permitted Web sites during Firebox configuration. The HTTP Proxy on
the Firebox then uses information on the WebBlocker Server to find out if a Web site is in a restricted cat-
egory.
Comparing WFS and Fireware Pro
Many of the tools and features you use in WFS are also in Fireware® Pro. Some are enhanced with more
settings or improvements in the methods used to configure and enable them. We also added features
such as dynamic routing, multi-WAN support, and a signature-based intrusion prevention system. At the
same time, we did not move all of the WFS appliance software features into Fireware Pro.
This table is a summary of the features in each type of appliance software.
WatchGuard Firebox System vs. Fireware Feature Matrix
Feature or Functional Area Com plete E ase
of
Use
Like
WFS
Notes
U pgradeable Model upgradeable Yes Yes Yes • Different license key/file
format.
• FIREWARE feature required
before product will allow traffic-
passing policies. LSS will provide
licenses with this feature. This
means LSS registration is
required for the product to
function.
Networking
Features
Port Independence Yes Yes N/A
Secondary IP-
address
Yes Yes Yes
QOS Yes Yes N/A
Dual-WAN Yes Yes N/A May expose more configuration
flexibility in future releases.
W AN-Failover Yes Yes N/A • May expose more configuration
flexibility in future releases.
• IPSec failover TBD.
Server load
balancing (VIP)
Future
Release
N/A N/A S ubsequent release.