The M390 is designed for small to midsize businesses with around 150 to 250 users who need solid throughput, a full UTM security stack, and capacity for VPN-connected branch sites. With 18 Gbps firewall throughput and 2.4 Gbps UTM throughput, it handles a busy office without bottlenecking on security services.

The M390 delivers significantly more performance than the M290: 18 Gbps firewall throughput versus 5.8 Gbps, 2.4 Gbps UTM versus 1.18 Gbps, and 250 BOVPN tunnels versus 75. Both use the same 1U chassis with 8x1G ports and a shared expansion module format, so the step up is entirely in processing power and connection capacity.

Yes. The M390 delivers 1.32 Gbps HTTPS inspection throughput with IPS enabled, which suits offices where a significant portion of traffic is encrypted. TLS decryption and re-encryption are handled inline without requiring a separate appliance.

The M390 has one open expansion bay that accepts four types of optional modules: 4x1G copper, 4x SFP fiber, 2x SFP+ fiber, or 4x 10G multispeed ports. This means you can add 10G uplink capacity or additional fiber ports as your infrastructure evolves, without replacing the firewall.

The M395 is the next-generation successor to the M390. It features twelve 2.5G ports instead of eight 1G ports, higher UTM throughput (3.0 Gbps vs. 2.4 Gbps), a larger concurrent connection table (6,000,000 vs. 4,500,000), and greater VPN capacity (350 tunnels vs. 250). The M395 runs on updated Fireware 2025.1 hardware, reflecting WatchGuard's current-generation platform.