Firebox T85-PoE Hardware Guide

WatchGuard Firebox is a comprehensive advanced network security platform that puts IT security professionals back in charge of their networks with widely deployable, enterprise-grade security and threat visibility tools suitable for any organization, regardless of budget, size, or complexity.

The Firebox T85-PoE is WatchGuard’s highest performing tabletop Firebox appliance and supports up to 50 users in mid-size offices and includes two PoE+ (802.3at) ports, and a module bay with 1 x SFP+ module or 4G LTE module options available.

Fireware OS

The Firebox T85-PoE supports WatchGuard’s next generation OS—Fireware® OS. Each Firebox appliance includes Fireware OS and delivers exceptional protection against today's sophisticated threats to make sure that your business stays connected. For more information on the features of Fireware OS, see Fireware Help.

Package Contents

  • Firebox T85-PoE appliance
  • Quick Start Guide
  • 1 RJ45 Ethernet cable
  • 1 power adapter (100~240V)
  • 1 power cord (US, AU, EU, UK)

About Your Hardware

Hardware Specifications

Processor NXP LS1046 1.8GHz
Memory DDR4 4 GB
Storage 128 GB M.2 SSD
Power Supply Input Ratings: 100-240VAC, 1.8A, 50-60Hz
Output Ratings : 54VDC, 2.22A, 120W
Power Consumption No PoE: 27 watts
With both PoE: 96 watts
MTBF 1,155,348 hours
Dimensions D = 205.5 mm (8.09")
W = 290 mm (11.41")
H = 43 mm (1.7")
Weight 2.6 kg (5.82 lbs)

Interface Specifications

Network Interfaces 8 RJ45 connectors, 1000 Base-TX (10/100/1000Mbps)
Interfaces 6 and 7 support PoE (Power over Ethernet), compliant with the IEEE 802.3at standard
Expansion Bay Options

1 Single port 10Gb SFP+ Interface Module (WG9010)

LTE Interface Module (WG9015)

(Micro SIM, 2 SMA-type antenna connectors)

Antenna Gain (Peak):
0.93 dBi (617-960 MHz)
2.71 dBi (1710-2690 MHz)
3.66 dBi (3300-4200 MHz)
4.37 dBi (5150-7150 MHz)

I/O Interfaces 2 USB 3.0, Type-A
1 RJ45 Serial Port

TPM (Trusted Platform Module)

This hardware contains a TPM chip for use with secure WatchGuard Cloud registration of the device.

Environmental Requirements

To safely install your Firebox, we recommend that you:

  • Install it in indoors.
  • Put it in a secure area, such as a locked room, to block the device from people who do not have permission to use it.
  • Connect it to a conditioned power supply to prevent damage from sudden power changes.

Other environmental requirements:

  • Operating temperature: 0° to 40°C (32° to 104°F)
  • Operating humidity: 5% to 90% non-condensing
  • Non-operating temperature: –40° to 70°C (-40° to 158°F)
  • Non-operating humidity: 5% to 90%, non-condensing

Hardware Description

Front View

Front view of the Firebox:

Front View of the T85-PoE

Failover

The Failover indicator is lit when there is a WAN failover from the primary external interface to the backup interface. After the external interface connection fails back to the primary external interface, the indicator is not lit.

Network Interface Status Indicators

The Firebox T85-PoE has eight network interfaces. On the front panel, the network interfaces are labeled 7, 6, 5, 4, 3, 2, 1, 0. There are two status indicators for each interface. The light blinks when data is sent and received. The speed of the blink increases as the data flow increases.

Indicator Indicator Interface Status

1000
Yellow

On Link speed: 1000 Mbps

10/100
Green

On Link speed: 10 Mbps or 100 Mbps

Module

This indicator is lit when an interface module is installed.

Status

The Status indicator is red when there is a management connection to the device. The Status indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line interface. It is also lit when the device is polled by WatchGuard System Manager.

Mode

The Mode indicator shows the status of the external network connection. If the device can connect to the external network and send traffic, the indicator is green. The indicator flashes if the device cannot send traffic to the external network.

Attn

The Attn indicator is yellow when you start the device with the Reset button pressed. For more information, see Restore Factory-Default Settings.

Power ()

The Power indicator is lit to indicate power status. It is green when the Firebox is powered on.

Rear View

Rear view of the Firebox:

Rear View of the T85-PoE

Module Bay

The module bay enables you to install optional expansion modules such as the single port 10Gb SFP+ interface module (WG9010) or LTE interface module (WG9015). For more information, see Interface Modules.

Serial Port (Console)

The leftmost port is an RJ45 serial console port. An RJ45 serial cable is not included with the device. For information on how to connect to the Fireware CLI (Command Line Interface) with the serial port, see the Fireware CLI Reference Guide.

USB Interfaces

The device includes two USB 3.0 interfaces. Connect a USB storage device for USB backup and restore, or to store a support snapshot. For more information, see Use a USB Drive for System Backup and Restore in Fireware Help.

Network Interfaces

The Ethernet interfaces have standard RJ45 connectors and support link speeds of 10, 100, or 1000 Mbps. These interfaces are labeled 0/WAN, 1/LAN, 2, 3, 4, 5, 6-PoE, 7-PoE. Interfaces 6 and 7 are PoE (Power over Ethernet) interfaces, compliant with the IEEE 802.3at standard.

Reset Button

This resets the device. To restore the device to factory-default settings, see Restore Factory-Default Settings.

Power Switch

Controls the power supplied to the device. Move the switch to position 1 to power on the device, or position 0 to power it off.

Power Input

An AC power adapter is included with your device. Connect the AC adapter to the device and to a power source. The power supply tip is plus (+) polarity. Use only the supplied AC power adapter.

Cooling Fan

The side of the Firebox has a cooling fan that adjusts its speed as needed to decrease the internal temperature of the device.

  • The fan is designed to start at boot time at a speed of 350 RPM to maintain an optimal temperature.
  • When the temperature rises, and the thermal sensor exceeds 71°C, the fan speed increases to 1500 RPM.
  • When the thermal sensor drops to 58°C, the fan speed decreases to the default 350 RPM.
  • The Firebox reboots if the thermal sensor is greater than 76°C.
  • The Firebox shuts down when CPU temperature is greater than 100°C.

Caution: Do not insert a pointed object to attempt to touch or move the fan blades.

Interface Modules

The Firebox T85-PoE includes an expansion bay for additional interface modules. You must install the expansion module before you can configure the interfaces.

Modules are covered under the same hardware warranty and support contract as your Firebox.

1 Port 10Gb SFP+ Interface Module

This interface module features a 10Gb SFP+ Copper Ethernet port (WG9010).

Image of 1 port 10Gb SFP+ Interface Module

The SFP+ port has one LED indicator above the port.

Indicator Interface Status
Solid Yellow Connection, no traffic
Blinks Green and Yellow Connection, traffic

You can purchase compatible SFP+ modules from an authorized WatchGuard reseller.

SFP+ multi-mode transceivers (10GBase-SR/1000Base-SX, 850 nm)

  • Finisar FTLX8574D3BCV (WatchGuard SFP+ transceiver WG8583)
  • Finisar FTLX8571D3BCV
  • Finisar FTLX8571D3BCL
  • Cisco SFP-10G-SR

SFP multi-mode transceivers (1000Base-SX, 850nm)

  • Finisar FTLF8519P3BNL (WatchGuard SFP transceiver WG8585)
  • Avago AFBR-5710PZ

SFP single-mode transceivers (1000Base-LX, 1310nm, up to 10km)

  • Finisar FTLF1318P3BTL

SFP+ single-mode transceiver (10GBase-LR-LW, 1310nm, up to 10km)

  • Finisar FTLX1471D3BCL
  • Finisar FTLX1475D3BCL

SFP+ single-mode transceiver (10GBase-ER, 1550nm, up to 80km)

  • Finisar FTLX1672D3BCL (40km)
  • Finisar FTLX1871D3BCL (80km)

SFP copper transceivers

  • WatchGuard WG8584
  • Olink OLST12R-CNS1
  • Fiberstore SFP-1GT-1MA-JU

LTE Interface Module

The LTE interface module (WG9015) enables you to install a SIM card for a 4G LTE cellular connection. You can use this cellular connection as an external interface on the Firebox for WAN connectivity.

Verizon is currently not supported for 4G LTE access with the LTE module.

Some wireless providers require authentication for the cellular connection in addition to the APN settings. WatchGuard devices with a 4G LTE modem interface module or built-in 5G modem do not currently support configuration of authentication settings. We recommend you use a service that does not require authentication.

Image of the LTE Module

The LTE module comes with two external antennas. Insert the antennas in the SMA-type antenna connectors on the module, then turn clockwise to tighten. We recommend you install the antennas at a 45 degree angle to optimize signal strength and reduce interference.

Image of the LTE Module with antennas at a 45 degree angle

To install the SIM card, insert a Micro or Nano SIM card into the slot on the LTE interface module before you install the module into the Firebox.

The LTE interface module comes with an adapter that enables you to insert a Nano SIM card into the SIM card slot.

Image of the SIM card installation on the LTE module

Align the direction of the SIM card and the placement of the diagonal edge based on the diagram beside the SIM card slot.

Image of the SIM card orientation when installed in the LTE module

Make sure the SIM card is fully inserted into the slot.

Image of the fully inserted SIM card in the LTE module

Install an Interface Module

WARNING: Interface Modules are not hot-swappable. To avoid damage to the system, you must disconnect the Firebox from the power source before you install or remove an interface module.

To install an interface module:

  1. Power off the Firebox, and disconnect the power cable.
  2. Loosen the two captive screws on the expansion bay cover of the Firebox and remove the cover.
    The expansion bay contains guideposts on both sides to help you align the module.
  3. Align the metal plate on the bottom of the interface module between the guideposts on both sides.

Photo of the module and guidepost alignment

  1. Insert the interface module into the expansion bay, and push the module firmly into place.
  2. Tighten the two captive screws on the interface module.
  3. Reconnect the power cable to the Firebox.
  4. Power on the Firebox.
    When the Firebox starts, Fireware automatically detects all installed interfaces.

Remove an Interface Module

WARNING: Before you remove an installed interface module, make sure that the interfaces on that module are not enabled in the Firebox configuration. You cannot manage a Firebox if an enabled interface has been removed.

To remove an installed interface module:

  1. Power off the Firebox, and disconnect the power cable.
  2. Loosen the two screws on the installed interface module.
  3. Slide the interface module out of the expansion bay.
  4. Put the removed interface module on an antistatic surface.
  5. Install the expansion bay cover and tighten the two captive screws.

AC Power Adapter

The AC power adapter supplies power for the Firebox. Before you connect the adapter, verify that the color band on the cord matches the color ring around the power plug on the Firebox.

To safely disconnect the power supply:

Slide the black plastic external housing away from the Firebox to expose the internal silver metal connector. With the internal silver connector exposed, continue to pull to disconnect the cord.


The Firebox T85-PoE includes a power cable to connect to the AC power adapter.

The suffix on the Firebox SKU indicates the type of power plug included with the device. Note that the suffix is not restrictive – for instance, though tagged as “AU” for Australia, the Type I plug is also used in China, New Zealand, and Argentina. If your country does not use one of these four plugs, use an adapter with one of these plugs.

SKU Suffix Plug Type Used in regions Photo
-US A US, Canada, Japan, Taiwan, Central America, Some countries in South America, Philippines
-UK G United Kingdom, Ireland, Hong Kong, Singapore, Malaysia, some African countries
-EU C Europe, Middle East, Korea, Indonesia, some African countries
-AU I China, Australia, New Zealand

Restore Factory-Default Settings

If you have a problem in your configuration file that you cannot correct, you can restore the factory-default settings and start from a new configuration file. For example, if you do not know the administrator account passphrase, or if a power interruption causes damage to the Fireware OS, you can restore the Firebox to the factory-default settings and build your configuration again.

To reset the Firebox to factory-default settings:

  1. Power off the Firebox.
  2. Press and hold the Reset button on the back of the Firebox.
  3. Power on the Firebox while you continue to hold the Reset button.
  4. Continue to hold the Reset button until the Attn indicator on the front of the Firebox begins to flash.
  5. Release the Reset button.
  6. Wait until the Attn indicator stays lit and does not flash.
  7. Power off the Firebox.
  8. Power on the Firebox.
    The Firebox restarts with factory-default settings.

Notices

All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Please read the following instructions carefully before operating the product, and refer to them as needed to ensure the continued safe operation of your product.

Product Safety Certification

The WatchGuard product is safety certified under the following standards:

  • CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10
  • UL 60950-1, Second Edition 2014-10-14
  • IEC 60950-1, 2005+A1:2009+A2:2013
  • IEC 62368-1: 2014 2nd edition
  • EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013

Safety Warning

  • The AC power cord is only for WatchGuard products, and not usable for other equipment.
    本コードは本製品専用です。他の機器には使用しないでください。
  • Do not place objects on the power cord.
  • Do not obstruct the ventilation openings. These openings prevent overheating of the machine.
  • Never push objects of any kind into slots or openings on this equipment. Making a contact with a voltage point or shorting out a part may result in fire or electrical shock.
  • When removing or installing an appliance, follow the general installation safety instructions.
  • You must disconnect the AC power cord from the Firebox before you remove the cover of the Firebox for any reason.
  • There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries according to the manufacturer’s instructions.
    警示 本電池如果更換不正確會有爆炸的危險,請勿自行更換電池。

Disclaimer

WatchGuard shall not be held liable if the end user alters, modifies, or repairs any WatchGuard hardware appliance.

Avis

Tous les produits WatchGuard sont conçus et testés pour répondre à des exigences de sécurité strictes. Ces exigences comprennent les approbations de sécurité des produits et d'autres normes de conformité mondiales. Veuillez lire attentivement ces instructions avant d'utiliser le produit, et consultez-les si nécessaire pour assurer le fonctionnement continu et sûr de votre produit.

  • CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10
  • UL 60950-1, Second Edition 2014-10-14
  • IEC 60950-1, 2005+A1:2009+A2:2013
  • IEC 62368-1: 2014 2nd edition
  • EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013

Remarques sur la sécurité

  • Le cordon d'alimentation secteur est uniquement destiné aux produits WatchGuard et ne peut pas être utilisé pour d'autres équipements.
  • Ne placez pas d'objets sur le cordon d'alimentation.
  • Ne pas obstruer les ouvertures de ventilation. Ces ouvertures évitent la surchauffe de la machine.
  • N'introduisez jamais d'objets d'aucune sorte dans les fentes ou les ouvertures de cet équipement. Établir un contact avec un point de tension ou court-circuiter une pièce peut entraîner un incendie ou un choc électrique.
  • Lors de la dépose ou de l'installation d'un appareil, respectez les consignes générales de sécurité d'installation.
  • Vous devez débrancher le cordon d'alimentation CA du Firebox avant de retirer le couvercle du Firebox pour quelque raison que ce soit.
  • Il y a un risque d'explosion si la batterie est remplacée par un type incorrect. Jetez les piles usagées conformément aux instructions du fabricant.

Clause de non-responsabilité

WatchGuard décline toute responsabilité si l'utilisateur final altère, modifie ou répare tout appareil matériel WatchGuard.

Hinweise Zur Sicherheit

Alle WatchGuard Produkte werden entwickelt und getestet, um strenge Sicherheitsanforderungen zu erfüllen. Diese Anforderungen umfassen Produktsicherheit Zulassungen und andere globale Compliance-Standards. Bitte lesen Sie die folgenden Anweisungen sorgfältig, bevor Sie das Produkt, und bezeichnen sie als notwendig, um den sicheren Betrieb des Geräts zu gewährleisten. Weitere Informationen finden Sie in der elektronischen Hardware Guide.

Die WatchGuard Produkt ist Sicherheit unter den folgenden Normen zertifiziert

  • CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10
  • UL 60950-1, Second Edition 2014-10-14
  • IEC 60950-1:2005+A1:2009+A2:2013
  • IEC 62368-1: 2014 2nd edition
  • EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013

Sicherheitshinweis

  • Das Netzkabel ist nur für WatchGuard-Produkte und nicht für andere Geräte geeignet.
  • Legen Sie keine Gegenstände auf das Netzkabel.
  • Verdecken Sie nicht die Lüftungsöffnungen. Diese Öffnungen verhindern eine Überhitzung der Maschine.
  • Stecken Sie niemals Gegenstände jeglicher Art in die Schlitze oder Öffnungen des Geräts stecken. Der Kontakt mit einem spannungsführenden Punkt oder das Kurzschließen eines Bauteils kann zu einem Brand oder elektrischen Schlag führen.
  • Beim Entfernen oder Installieren eines Gerätes, nach den allgemeinen Installation Sicherheitshinweise.
  • Sie müssen das Netzkabel von der Firebox trennen, bevor Sie die Abdeckung der Firebox aus irgendeinem Grund entfernen.
  • Es besteht Explosionsgefahr, wenn die Batterie durch einen falschen Typ ersetzt wird. Entsorgen Sie gebrauchte Batterien gemäß den Anweisungen des Herstellers.

Haftungsausschluss

WatchGuard haftet nicht, wenn der Endbenutzer eine Hardware-Appliance von WatchGuard ändert, modifiziert oder repariert.

Aviso De Seguridad

Todos los productos WatchGuard están diseñados y probados para satisfacer estrictos requisitos de seguridad. Estos requisitos incluyen la homologación de productos de seguridad y otras normas de cumplimiento global. Por favor, lea atentamente las siguientes instrucciones antes de utilizar el producto, y se refieren a ellos como sea necesario para garantizar el funcionamiento seguro y continuo de su producto. Información adicional se puede encontrar en la Guía del usuario electrónica.

Certificación de seguridad del producto

El producto tiene certificación de seguridad WatchGuard bajo las siguientes normas:

  • CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10
  • UL 60950-1, Second Edition 2014-10-14
  • IEC 60950-1:2005+A1:2009+A2:2013
  • IEC 62368-1: 2014 2nd edition
  • EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013

Advertencia de seguridad

  • El cable de alimentación de CA es solo para productos WatchGuard y no se puede usar para otros equipos.
  • No coloque objetos sobre el cable de alimentación.
  • No obstruya las aberturas de ventilación. Estas aberturas evitan el sobrecalentamiento de la máquina.
  • Nunca introduzca objetos de ningún tipo en las ranuras o aberturas del equipo. El contacto con puntos de voltaje o el cortocircuito de una pieza podría provocar un incendio o una descarga eléctrica.
  • Al extraer o instalar un electrodoméstico, siga las instrucciones generales de instalación de seguridad.
  • Debe desconectar el cable de alimentación de CA del Firebox antes de quitar la tapa del Firebox por cualquier motivo.
  • Existe riesgo de explosión si la batería se reemplaza por una del tipo incorrecto. Deseche las baterías usadas de acuerdo con las instrucciones del fabricante.

Descargo de responsabilidad

WatchGuard no será responsable si el usuario final altera, modifica o repara cualquier dispositivo de hardware de WatchGuard.

CE Notice

The CE logo symbol on your WatchGuard Technologies equipment indicates that it is in compliance with the Electromagnetic Compatibility (EMC) directive and the Low Voltage Directive (LVD) of the European Union (EU).

T85 Declaration of Conformity

RoHS Statement

The Restriction of Hazardous Substances 2.0 (RoHS 2.0) in Electrical and Electronic Equipment Directive was passed into law by the European Union (EU). It affects manufacturers, sellers, distributors and recyclers of electrical and electronic equipment containing lead, cadmium, mercury, hexavalent chrome, polybrominated diphenylether (PBDE), polybrominated biphenyl (PBB), Bis (2-ethylhexyl) phthalate (DEHP), Butyl benzyl phthalate (BBP), Dibutyl phthalate (DBP) and Diisobutyl phthalate (DIBP). After June 4, 2015 the use of these materials are banned in new products sold in Europe.

WatchGuard declares that all products listed herein comply with European Union RoHS Directive (RoHS 2.0 2011/65/EU and 2015/863/EU) requirements taking the following Annex III exemptions: [stating the list of exemptions, 6(c) ,7(a) ,7(C)-1].

Access Points: AP130, AP230W, AP330, AP332CR, AP430CR, AP432

Firebox: N5V, T25, T25-W, T45, T45-PoE, T45-W-PoE, T45-CW, T85-PoE, M290, M390, M590, M690

Substances Listed Limit
Cadmium(Cd) ≤ 0.01% (100 ppm)
Hexa‐valent Chromium (Cr6+) ≤ 0.1% (1000 ppm)
Lead (Pb) ≤ 0.1% (1000 ppm) *
Mercury (Hg) ≤ 0.1% (1000 ppm)
Polybrominated biphenyis (PBB) ≤ 0.1% (1000 ppm)
Polybrominated diphenylethers (PBDE or PBBE) ≤ 0.1% (1000 ppm)
Bis (2-ethylhexyl) phthalate (DEHP) ≤ 0.1% (1000 ppm)
Butyl benzyl phthalate (BBP) ≤ 0.1% (1000 ppm)
Dibutyl phthalate (DBP) ≤ 0.1% (1000 ppm)
Diisobutyl phthalate (DIBP) ≤ 0.1% (1000 ppm)

* (contains Lead > 0.1% by weight because of exempted applications)
7a lead in high melting temperature type solders (i.e. lead based alloys containing 85 % by weight or more lead)
7(c) I. Electrical and electronic components containing lead in a glass or ceramic other than dielectric ceramic in capacitors, e.g. piezo electronic devices, or in a glass or ceramic matrix compound.

WEEE Statement

WatchGuard asks that all our products to be recycled at the end of their current use to comply with local waste compliance requirements.

WatchGuard supports the EU Waste Electrical and Electronic Equipment (WEEE) Directive (2012/19/EU). That means that WEEE may not be disposed as unsorted municipal waste but is to be collected separately.

WatchGuard products are therefore labeled with this symbol:

WEEE symbol

The WEEE symbol on your WatchGuard equipment indicates that it should not be disposed of by the end user with unsorted municipal waste, but in a manner consistent with required EU Directives, and the local transposition of the Directive in the end user's jurisdiction. The symbol is placed per CENELEC standard EN50419.

WEEE may contain hazardous substances which may negatively affect the environment and human health when disposed of through normal channels. Batteries that are not enclosed in the waste equipment must be separated from it and disposed of separately before being handed in at a collection point. Old batteries, and in certain cases also the waste equipment, can likewise be returned free of charge to the point of sale. You are responsible for deleting any personal data on the waste equipment. WatchGuard is committed to reduce the negative environmental and human health effects of WEEE which will help prevent potential negative consequences for the environment and human health. If you are a consumer please use your local recycling option. This is usually your municipal refuse site.

Taiwan RoHS

Taiwan RoHS Declaration

Taiwan BSMI CNS 15936 Type A Notice

警告:為避免電磁干擾,本產品不應安裝或使用於住宅環境。

Limited Hardware Warranty

This Limited Hardware Warranty (the “Warranty”) applies to the enclosed hardware product, not including any associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the “Product”). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF.

If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. (“WatchGuard”) and you agree as set forth below or on the reverse side of this card, as applicable.

  1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the “Warranty Period”): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specifications.

    This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other than WatchGuard except for the replacement or inclusion of specified components authorized in, and performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed by force majeure events, accidents, power spikes or similar events or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof.

  2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above, WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any software, firmware, information or data contained in, stored on, or integrated with any returned Products.
  3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR, AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY O NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO, OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT).
  4. LIMITATION AND LIABILITY. WATCHGUARD’S LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.
  5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington, U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or use of the product or associated documentation to any country to which such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product, and supersedes any prior purchase order, communications, advertising or representations concerning the Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITY’S OBLIGATIONS UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY.

No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard.