FCC ID: Q6G-XP2E6W Internet Firewall

APPENDIX A Firebox X Edge e-Series Hardware The WatchGuard Firebox X Edge e-Series is a firewall for small organizations and branch offices. The Firebox X Edge e-Series product line includes:

Firebox X Edge e-Series Firebox X Edge e-Series Wireless Firebox X Edge e-Series DSL Package Contents The Firebox X Edge e-Series package includes:

Hardware firewall User Guide 219 Firebox X Edge e-Series User Guide on CD-ROM Firebox X Edge e-Series QuickStart Guide LiveSecurity Service activation card

Hardware warranty card

AC adapter (12V/1.2A) with international plug kit. (For the Firebox X Edge DSL models, a larger 12V/2.0A AC adapter is supplied.) Power cable clip, to attach to the cable and connect to the side of the Edge. This decreases the tension on the power cable.

One straight-through cable

Wall mount plate (wireless models only)

Two antennae (wireless models only) 220 WatchGuard Firebox X Edge Specifications Specifications The specifications for the Firebox X Edge e-Series and the Firebox X Edge e-Series Wireless are:

Processor CPU Memory: Flash Memory: RAM Ethernet interfaces Serial ports Power supply Operating temperature Environment Dimensions for Firebox X Edge e-Series X Scale (ARM) 266 MHz 64 MB 128 MB 6 each 10/100 1 DB9 12V/1.2A 0 - 40 C Indoor use only Depth = 6.25 inches Width = 7.4 inches Height = 1.25 inches Dimensions for Firebox X Edge e-Series Wireless, including antenna Weight of Firebox X Edge e-Series Weight of Firebox X Edge e-Series Wireless Depth = 6.25 inches Width = 10.9 inches Height = 1.25 inches 1.9 U.S. pounds 2.0 U.S. pounds The specifications for the Firebox X Edge e-Series DSL are:

Processor CPU Memory: Flash Memory: RAM Ethernet interfaces DSL interface Serial ports Power supply X Scale (ARM) 266 MHz 64 MB 128 MB 5 each 10/100 1 RJ11 1 DB9 12V/2.0A User Guide 221 Operating temperature Environment Dimensions for Firebox X Edge e-Series DSL Weight 0 - 40 C Indoor use only Depth = 6.25 inches Width = 10 inches Height = 1.25 inches 2.0 U.S. pounds Hardware Description The Firebox X Edge e-Series has a simple hardware architecture. All indicator lights are on the front panel and all ports and connectors are on the rear panel of the device. Front panel The front panel of the Firebox X Edge has 18 indicator lights to show the link status. The top indicator light in each link pair comes on when a link is made and flashes when traffic goes through the related interface. The bottom indicator light in each pair comes on when the link speed is 100 Mbps. If the bottom indicator light does not come on, the link speed is 10 Mbps. WAN 1, 2 Each WAN indicator shows the physical connection to the external Ethernet interfaces. The light is yellow when traffic goes through the related interface. WAP The WAP indicator shows that the Firebox X Edge is activated as a wireless access point. The light is green when traffic goes through the wireless interface on a Firebox X Edge e-Series Wireless model. 222 WatchGuard Firebox X Edge Hardware Description Fail/Over The Fail/Over indicator shows a WAN failover. The light is green when there is a WAN failover from WAN1 to WAN2. The light goes off when the external interface connection goes back to WAN1. Link The link indicator shows a physical connection to a trusted Ethernet interface. The trusted interfaces have the numbers 0 through 6. The light comes on when traffic goes through the related interface. 100 When a trusted network interface operates at 100 Mbps, the related 100 indicator light comes on. When it operates at 10 Mbps, the indicator light does not come on. Status The status indicator shows a management connection to the Firebox X Edge. The light goes on when you use your browser to connect to the Firebox X Edge configuration pages. The light goes off a short time after you close your browser. Mode The mode indicator shows the status of the external network connection. The light comes on when the Ethernet cable is correctly connected to the WAN1 interface. The light is green if the Firebox X Edge can connect to the external network and send traffic. The light flashes if the Firebox X Edge cannot connect to the external network and send traffic. Attn The Attn indicator is reserved for future use. Power The power indicator shows that the Firebox X Edge is on. User Guide 223 Rear view Serial port (DB9) Use the serial port to connect an external modem to the Firebox X Edge. Ethernet interfaces LAN0 through LAN2 The Ethernet interfaces with the marks LAN0 through LAN2 are for the trusted network. OPT interface This Ethernet interface is for the optional network. WAN interfaces 1 and 2 The WAN1 and WAN2 interfaces are for external networks. If you use a Firebox X Edge e-Series DSL model, WAN1 is your interface to the DSL connection. NOTE Power input A 12V/1.2A power supply is included with your Firebox X Edge. Connect the AC adapter to the Firebox X Edge and to a power source. The power supply tip is plus (+) polarity. NOTE If you use a Firebox X Edge e-Series DSL model, you must use the 12V/2.0A AC adapter that comes with the Firebox X Edge e-Series DSL. RESET button To reset the Firebox X Edge, use the procedure in Factory Default Settings on page 43. 224 WatchGuard Firebox X Edge About the Firebox X Edge e-Series Wireless. Side panels Computer lock slot There is a slot for a computer lock on the two side panels of the Firebox X Edge. Antennae (wireless model only) There are wireless antennae on the two side panels of the Firebox X Edge e-Series Wireless models. Wall mounting plate (wireless model only) The wall mounting plate enables you to put the Firebox X Edge in a good location to increase the range. About the Firebox X Edge e-Series Wireless. The Firebox X Edge e-Series Wireless conforms to IEEE 802.11g/b wireless LAN standards. Some key features that have an effect on performance of an 802.11g/b wireless device include antenna direc-

tional gain, signal attenuation (path loss), and channel data rate. Antenna directional gain Antenna directional gain is based on the shape of the radiation pat-

tern around the antenna. The Firebox X Edge e-Series Wireless uses User Guide 225 two 5.1 dBi swivel-mount whip antennas. The whip antenna has a radiation pattern similar to a sphere that is squashed in the center. If the antenna points up, the gain is largest in the horizontal direction and less in the vertical direction. Signal attenuation Signal attenuation refers to the loss of signal power. It can be caused by multi-path reflection. Multi-path reflection occurs when RF signals that come to the receiver must move along more than one path because of walls and other surfaces between the transmit-

ter and the receiver. It changes based on the phase at which the sig-

nals come, but signal strength can be increased or decreased by as much as 30dB. To decrease the effect of multi-path reflection, the Firebox X Edge Wireless uses two antennas spaced some distance apart. This decreases signal cancellation and allows the software to find the best antenna to receive and transmit as conditions change. Wireless clients usually have one antenna and are more sensitive to the effects of antenna location. Because of this, the Firebox X Edge e-Series Wireless can receive signals from a wireless client even if the client does not receive signals from the Firebox X Edge. Channel data rate Channel data rate changes with the modulation type, which changes based on conditions including noise and the distance between transmitter and receiver. In general, the available data rates for an IEEE 802.11g/b device change from 1 Mbps in the worst conditions to 54 Mbps in the best conditions 226 WatchGuard Firebox X Edge About the Firebox X Edge e-Series DSL About the Firebox X Edge e-Series DSL The Firebox X Edge e-Series DSL connects your network to a high-

speed broadband Internet connection. This model includes an internal SerComm integrated ADSL modem and one RJ11 port. You can configure all available DSL properties using the web-based interface of the Firebox X Edge. The Firebox X Edge e-Series DSL is supplied in two hardware config-

urations:

Annex A Annex A supports the public switched telephone network (PSTN) environment. This configuration is used in the United States and many other countries. Annex B Annex B supports the Integrated Services Digital Network (ISDN) environment. This configuration is used in some European countries. User Guide 227 228 WatchGuard Firebox X Edge

APPENDIX B Legal Notifications Copyright, Trademark, and Patent Information Copyright 1998 - 2005 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, Firebox, LiveSecurity, and any other mark listed as a trademark in the Terms of Use portion of the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies, Inc. and/or its subsidiaries in the United States and/or other countries. All other trademarks are the property of their respective owners. Microsoft, Internet Explorer, Windows 95, Windows 98, Windows NT, Windows 2000 and Windows XP are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corporation in the United States and other countries. RealNetworks, RealAudio, and RealVideo are either a registered trademark or trademark of RealNetworks, Inc. in the United States and/or other countries. Java and all Java-based marks are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. All right reserved. 1995-1998 Eric Young (eay@cryptsoft). All rights reserved. 1998-2003 The OpenSSL Project. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. User Guide 229 3. All advertising materials mentioning features or use of this software must display the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/)"

4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact openssl-core@openssl.org. 5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written permission of the OpenSSL Project. 6. Redistributions of any form whatsoever must retain the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit

(http://www.openssl.org/)"

THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com). 1995-2003 Eric Young (eay@cryptsoft.com) All rights reserved. This package is an SSL implementation written by Eric Young (eay@cryptsoft.com). The implementation was written so as to conform with Netscapes SSL. This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson

(tjh@cryptsoft.com). Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgement: "This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)" The word 'cryptographic' can be left out if the routines from the library being used are not cryptographic related. 230 WatchGuard Firebox X Edge Copyright, Trademark, and Patent Information 4. If you include any Windows specific code (or a derivative thereof) from the apps directory

(application code) you must include an acknowledgement: "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"

THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The mod_ssl package falls under the Open-Source Software label because it's distributed under a BSD-style license. The detailed license information follows. Copyright (c) 1998-2003 Ralf S. Engelschall. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgment:

This product includes software developed by Ralf S. Engelschall <rse@engelschall.com> for use in the mod_ssl project (http://www.modssl.org/)."

4. The names "mod_ssl" must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact rse@engelschall.com. 5. Products derived from this software may not be called "mod_ssl" nor may "mod_ssl" appear in their names without prior written permission of Ralf S. Engelschall. 6. Redistributions of any form whatsoever must retain the following acknowledgment: "This product includes software developed by Ralf S. Engelschall <rse@engelschall.com> for use in the mod_ssl project (http://www.modssl.org/)."

THIS SOFTWARE IS PROVIDED BY RALF S. ENGELSCHALL ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL RALF S. ENGELSCHALL OR HIS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Copyright 1999-2001 The OpenLDAP Foundation, Redwood City, California, USA. All Rights Reserved. The OpenLDAP Public License User Guide 231 Version 2.7, 7 September 2001 Redistribution and use of this software and associated documentation ("Software"), with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain copyright statements and notices, 2. Redistributions in binary form must reproduce applicable copyright statements and notices, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution, and 3. Redistributions must contain a verbatim copy of this document. The OpenLDAP Foundation may revise this license from time to time. Each revision is distinguished by a version number. You may use this Software under terms of this license revision or under the terms of any subsequent revision of the license. THIS SOFTWARE IS PROVIDED BY THE OPENLDAP FOUNDATION AND ITS CONTRIBUTORS ``AS IS''

AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OPENLDAP FOUNDATION, ITS CONTRIBUTORS, OR THE AUTHOR(S) OR OWNER(S) OF THE SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The names of the authors and copyright holders must not be used in advertising or otherwise to promote the sale, use or other dealing in this Software without specific, written prior permission. Title to copyright in this Software shall at all times remain with copyright holders. OpenLDAP is a registered trademark of the OpenLDAP Foundation. Copyright 1999-2001 The OpenLDAP Foundation, Redwood City, California, USA. All Rights Reserved. Permission to copy and distribute verbatim copies of this document is granted. 232 WatchGuard Firebox X Edge Certifications and Notices Certifications and Notices WEEE Statement:

WEEE is a general set of requirements dictated in the EU Directive 2002/96/EC. This Directive mandated that member EU countries enact regulations governing the Waste of Electrical and Electronic Equipment (WEEE). The Directive, and its individual transpositions into specific country laws and legislation, is aimed at the reduction of WEEE through reuse, recovery, and recycling of WEEE. WatchGuard is working in partnership with our European Union

(EU) distribution partners to ensure that our products are in compli-

ance with the WEEE statutes, and that the recovery of our product per the specific EU country legislative requirements is seamless for our products end users. If you have a WatchGuard product that is at its end of life and needs to be disposed of, please contact Watch-

Guard Customer Care Department at:

U.S. Customers: 877.232.3531 International Customers: +1.206.613.0456 WatchGuard is reasonably confident that our products do not con-

tain any substances or hazardous materials presently banned by any legislation, and do not present a risk due to hazardous materials. WEEE recovery professionals should also note that these products do not have any materials that are of particular high value in their indi-

vidual form. RoHS Statement:

The member states of European Union approved directive 2002/95/

EC, Restrictions of Hazardous Substances (RoHS directive) that becomes valid on July 1, 2006. It states that all new electrical and electronic equipment put on the market within the member states must not contain certain hazardous materials. The WatchGuard Fire-

box X Edge e-Series will comply with the European Unions R0HS directive 2002/95/EC and similar regulations that may be adopted by other countries for European Sales. FCC Certification This appliance has been tested and found to comply with limits for a Class A digital appliance, pursuant to Part 15 of the FCC Rules. Operation is subject to the following two conditions:

User Guide 233

This appliance may not cause harmful interference. This appliance must accept any interference received, including interference that may cause undesired operation. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commer-

cial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. NOTE Changes or modifications to this equipment that are not expressly approved by WatchGuard could void the user's authority to operate the equipment. FCC Part 68 Statement (DSL Version) This equipment complies with Part 68 of the FCC Rules. A label is attached to the equipment that contains, among other information, its FCC registration number and ringer equivalence number. If requested, this information must be provided to the telephone com-

pany. This equpment uses the following USOC Jack: RJ-11. An FCC compliant telephone cord and modular plug is provided with this equipment. This equipment is designed to be connected to the telephone network or premises wiring using a compatible modu-

lar jack, which is FCC Part 68 compliant. Connection to the tele-

phone network should be made by using the standard modular telephone jack. The REN is useful to determine the quantity of devices that may be connected to the telephone line and still have all of those devices ring when your telephone number is called. In most, but not all areas, the sum of RENs should not exceed 5. To be certain of the number of devices that may be connected to the line, as determined by the total RENs, contact the telephone company to determine the maximum REN for the calling area. If this equipment causes harm to the telephone network, the tele-

phone company may discontinue your service temporarily. If 234 WatchGuard Firebox X Edge Certifications and Notices advance notice is not practical, the telephone company will notify the customer as soon as possible. Also, you will be advised of your right to file a complaint with the FCC if you believe it is necessary. The telephone company may make changes in its facilities, equip-

ment, operations, or procedures that could affect the operation of the equipment. If this happens, the telephone company will provide advance notice in order for you to make the necessary modifications to maintain uninterrupted service. In the event the equipment should fail to operate properly, discon-

nect the unit from the telephone line. Try using another FCC approved device in the same telephone jack. If the trouble persists, call the telephone company repair service bureau. If the trouble does not persist and appears to be with this unit, disconnect the unit from the telephone line and discontinue use of the unit until it is repaired. Please note that the telephone company may ask that you disconnect the equipment from the telephone network until the problem has been corrected or until you are sure that the equipment is not malfunctioning. The user must use the accessories and cables supplied by the manufacturer to get optimum performance from the product. No repairs may be done by the customer. If trouble is experienced with this equipment, please contact your authorized support pro-

vider for repair and warranty information. If the trouble is causing harm to the telephone network, the telephone company may request that you remove the equipment from the network until the problem is resolved. This equipment cannot be used on telephone company-provided coin service. Connection to Party Line Service is subject to state tariffs. CE Notice The CE symbol on your WatchGuard Technologies equipment indi-

cates that it is in compliance with the Electromagnetic Compatibility

(EMC) directive and the Low Voltage Directive (LVD) of the Euro-

pean Union (EU) User Guide 235 Industry Canada This Class A digital apparatus meets all requirements of the Cana-

dian Interference-Causing Equipment Regulations. Cet appareil numerique de la classe A respecte toutes les exigences du Reglement sur le materiel broulleur du Canada. CANADA RSS-210 The term IC: before the radio certification number only signifies that Industry of Canada technical specifications were met. Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired opera-

tion of the device. France NOTE En France, ce produit ne peut tre install et opr qu' l'intrieur, et seulement sur les canaux 10, 11, 12 , 13 comme dfini par IEEE 802.11g/b. L'utilisation de ce produit l'extrieur ou sur n'importe quel autre canal est illgal en France. NOTE In France, this product may only be installed and operated indoors, and only on channels 10, 11, 12, 13 as defined by IEEE 802.11g/b. Use of the product outdoors, or on any other channel, is illegal in France. 236 WatchGuard Firebox X Edge Class A Korean Notice Certifications and Notices VCCI Notice Class A ITE Taiwanese Class A Notice Taiwanese Wireless Notice User Guide 237 Declaration of Conformity 238 WatchGuard Firebox X Edge Limited Hardware Warranty Limited Hardware Warranty This Limited Hardware Warranty (the "Warranty") applies to the enclosed Firebox hardware product, not including any associated software which is licensed pursuant to a separate end-

user license agreement and warranty (the "Product"). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. ("WatchGuard") and you agree as set forth below or on the reverse side of this card, as applicable:

1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter

(the "Warranty Period"): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specifications. This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other than WatchGuard except for the replacement or inclusion of specified components authorized in and performed in strict accordance with documentation provided by WatchGuard; or (ii) damaged or destroyed by accidents, power spikes or similar events or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof. 2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above, WatchGuard will, following receipt of the product you claim is defective and at its option, either (a) repair the Product, or (b) replace the Product; provided, that you will be responsible for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any software, firmware, information or data contained in, stored on, or integrated with any returned Products. 3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR, AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO, OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT). 4. LIMITATION AND LIABILITY. WATCHGUARDS LIABILITY (WHETHER ARISING IN CONTRACT

(INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR User Guide 239 THE USE OF OR INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. 5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington, U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or associated documentation to any country to which such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product, and supersedes any prior purchase order, communications, advertising or representations concerning the Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITYS OBLIGATIONS UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY. No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard. 240 WatchGuard Firebox X Edge