WatchGuard Support Center

Knowledge Base - Article

 Intrusion Prevention Service and Application Control signature sets size

What is the size of the Intrusion Prevention Service (IPS) and Application Control signature sets used by my Firebox?

The size of the IPS and Application Control signature sets depend on your Firebox model and the installed version of Fireware. For virtual Firebox models, the signature set size also depends on the allocated memory.  IPS and Application Control signatures are delivered together as one signature set.

In Fireware v12.0 and higher there are three signature set sizes:

  • Standard: ~2000 signatures (Firebox T10, XTM 2 Series; XTMv, FireboxV, Firebox Cloud with less than 4 GB memory)
  • Enhanced: ~4000 signatures (Firebox T15, T20, T30, T35, T50, T55, T70, M200, M300, XTM 33, 330, 5 Series, 810, 820, 830, 1050, and 2050, FireboxV)
  • Full: ~8000 signatures (T40, T80, M270, M370, M400, M440, M470, M500, M570, M670 M4600, M5600, XTM 850, 860, 870, 1520, 1525, 2520; XTMv, FireboxV, Firebox Cloud with 4 GB or more of memory)

In Fireware v11.4 - v11.12.x, there are two signature set sizes:

  • Standard: ~1800 signatures (XTM 2 Series, Firebox T10, XTMv under 2 GB)
  • Enterprise: ~6000 signatures (All other XTM and Firebox models)

All signature sets provide excellent detection for most applications and potential threats to your network.

For the most up-to-date and effective IPS and Application Control protection, we recommend you install the latest OS version for your WatchGuard device and enable automated signature updates in the Firebox configuration. To learn more about signature updates, see Subscription Services Status and Manual Signatures Updates.
Note: Fireboxes that run Fireware OS v11.3.x and lower always use the smallest signature set. Support for larger signature sets was added in Fireware OS v11.4.