FreeRADIUS vs. WatchGuard AuthPoint

FreeRADIUS is completely scalable and supports both large and small user databases. Because it doesn't take up a lot of server resources, FreeRADIUS is well-suited for organizations with small budgets (it's in the name!) and limited networking hardware. While there is a port of it for Windows, FreeRADIUS is native to Linux so that would be a limitation for many companies who don't use it.

Watchguard Authpoint is well suited to both small and large companies and scales well. It can be adapted to a number of token delivery methods, and mutliple methods (Push, QR code, OTP) can be used simultaneously to support users in different authentication contexts. The geokinetics function allows for real control of international travelers distinguishing them from random individuals using stolen credentials in random remote locations.

Incentivized

• FreeRADIUS is easy to configure
• It is fast a lightweight footprint on the server
• FreeRADIUS works universally with other systems that support radius authentication

• The Authpoint Cloud portal is easy to use and navigate
• It integrates well with the Firebox and gateway
• Promptly sends 2FA request onto the user devices
• Its very easy to re-activate token on a new device if the device is lost or stolen
• Troubleshooting logs are available to figure out whats wrong if a user cannot authenticate

Incentivized

• FreeRADIUS requires a 3rd party interface to make it easier to access (we use Daloradius) - it would nice if it was built in.
• Installation and configuration are pretty easy and straightforward but does require connecting to a database which can be cumbersome.

• While the set up was easy to do the instructions could use a little more details.
• It would be useful to be able to tell how many users are at the firewall level instead of going out to the cloud to look for it.

Incentivized

Today to ensure our ISO 27001 certification it is important that we maintain this solution. Today it is part of the way any employee within the organization works, we no longer have any other way of working and it is the simplest way to ensure that access to the workstation is done with MFA.

Incentivized

After initial setup, it practically runs itself. Onboarding new users is fast and easy as it should be. The AuthPoint mobile app is small and simple to use. The only reason I do not give it a 10 is that I frequently get complaints from end users that the AuthPoint app is "constantly downloading". In fact, it's not downloading anything and that what the users are seeing in the app is a timer for the 6-digit code that changes every minute.

Incentivized

It failed a couple of times for a period of an hour or so, where systems were down.

Incentivized

Never had a problem with Authpoint servers.

Incentivized

WatchGuard support is always quick and reliable. They have urgency levels that you are able to select when creating your support ticket, and they respond in accordance to the severity that you have set. I have never had an issue with getting someone on the phone in the same business day, even for very low priority issues.

Incentivized

It was an Onsite demo at the ditributor with the benefits of Watchguard Authpoint. Was very nice to see the abilities of the product. This Demo was a few years back, since then Authpoint changed allot. It is very nice for partners that you can get this demo without any aditional cost.

Incentivized

We use the online training for all our employees. There are both sales and technical trainings available and there even is a technical certification. You can use this for the Watchguard Partner Program which can give you aditional benefits. Every now and then you have a webinar that discusses multiple Watchguard products.

Incentivized

the first time it takes more effort. It is helpful to already understand how each authentication type works. Then it's much easier to understand the MFA solution that you implement. It is useful to check the release notes from time to time and update the key parts of the Watchguard Authpoint. Authpoint Gateway, Logon App, RDWeb... Also, it's useful to set up notifications when something goes wrong or sometimes check the statistics of how many requests are being approved/denied, etc.

Incentivized

I would slot Authpoint as better than ESET but not Duo. ESET has the same limitations as Watchguard in the OTP support. It also is an on-prem installed console rather than a cloud, which increases cost and maintenance requirements. The duo now supports standard OTP for admin accounts, so it can be managed by a team.

Incentivized

We are a medium-sized company. We don't need rapid scaling.

Incentivized

• We previously used Microsoft Network Policy Server for our RADIUS authentication which works ok but was pretty clunky and requires Windows Server. Switching to FreeRADIUS brought our cost down to zero.
• Because FreeRADIUS works natively in Linux it's easy to setup and works with all distros.
• FreeRADIUS allows us to have user authentication for wifi which is much more secure than a simple shared password solution.

• Our end uses found this product very easy to use. Using one overview session, I have not had to follow up with users to access the product.
• Once deployed, other users in our environment heard about the ease of use. We then had a 25% increase in requests for the product.
• This product has added to the overall satisfaction of users having to work offsite, attend conferences and other travel while still being able to stay connected to their work product.

Incentivized