Firebox Cloud License Options

Firebox Cloud is available in both the Microsoft Azure Marketplace and AWS Marketplace with two license options.

License Types

Bring Your Own License (BYOL)

With this license option, you pay Microsoft or Amazon for the virtual machine instance and resources it uses. You then purchase a license for Firebox Cloud separately from an authorized WatchGuard reseller. For Firebox Cloud with a BYOL license, you must activate a license key for Firebox Cloud on the WatchGuard website. Then, add the feature key to your Firebox Cloud instance, which enables you to configure all the licensed features. This feature key is unique to that instance and has an expiration date. You can purchase a renewal from an authorized WatchGuard reseller.

After you activate the BYOL license, you can add the Firebox Cloud instance to your WatchGuard Cloud account.

For more information, go to Get Started — Add a Device to WatchGuard Cloud.

For information about how you can manage your Firebox Cloud instance as a cloud-managed device in WatchGuard Cloud, go to Add Firebox Cloud to WatchGuard Cloud (Cloud-Managed).

For information about feature keys, go to About Feature Keys.

You can purchase a Firebox Cloud for one of four models. The models are based on the maximum number of CPUs that Firebox Cloud uses. The maximum throughput of Firebox Cloud depends on both the Firebox Cloud model, and the VM size.

For Firebox Cloud with a BYOL, the model determines the maximum supported throughput rates.

Firebox Cloud Model Maximum AWS vCPUs or Azure CPU Cores VPN (Gbps)
Small 2 0.4
Medium 4 1.5
Large 8 3
Extra Large Unrestricted Unrestricted

If you deploy Firebox Cloud on a virtual machine with more CPUs than the Firebox Cloud model supports, Firebox Cloud uses only the supported maximum number of CPUs.

For details about the BYOL option for AWS, go to WatchGuard Firebox Cloud (BYOL). Cost can vary based on resources used, and by region.

Hourly / Pay As You Go (PAYG)

With this license option, the cost of the license for Firebox Cloud and all security services is included in the price charged by Amazon or Microsoft. This provides a perpetual license with no fixed expiration date. There is no need to purchase, activate, or renew a separate license from WatchGuard.

Both the Azure Firebox Cloud and AWS (PAYG) option includes a 30 day free trial. For the 30 day trial period, there are no hourly software charges but Azure and AWS infrastructure charges still apply. After the 30 day trial expires, the instance converts to a paid subscription.

For details about the PAYG option and associated costs for Azure, go to WatchGuard Subscription Costs for Azure PAYG.

For details about the Hourly AWS option and associated costs, go to WatchGuard Firebox Cloud (Hourly).

To switch a Firebox Cloud instance from one license type to another, you must deploy a new instance and move the configuration to the new instance. For information about how to move a Firebox configuration, go to Move a Configuration to a New Firebox.

Licensed Security Services

Firebox Cloud supports these WatchGuard security services:

  • Access Portal (requires Fireware v12.1 or higher)
  • Application Control
  • APT Blocker
  • Botnet Detection
  • Data Loss Prevention
  • DNSWatch (supported with a BYOL license only)
  • Gateway AntiVirus / Intelligent AntiVirus
  • Geolocation
  • IntelligentAV (supported for BYOL licenses and PAYG instances, and requires 4GB of memory)
  • Intrusion Prevention Service (IPS)
  • Reputation Enabled Defense
  • spamBlocker and Quarantine Server (requires Fireware v12.2 or higher)
  • WatchGuard Cloud Visibility (supported with a BYOL license only)
  • WebBlocker

Firebox Cloud with an Hourly / Pay As You Go license does not support WatchGuard Cloud or DNSWatch.