Microsoft Entra External ID vs. WatchGuard AuthPoint

It is not easy to calculate the actual ROI due to the difficult quantification of all factors, but it certainly contributed a lot in protecting, monitoring and controlling access to our system. It also made it much easier to detect vulnerable external users with simple and "easy to hack" passwords they use on multiple apps.

Watchguard Authpoint is well suited to both small and large companies and scales well. It can be adapted to a number of token delivery methods, and mutliple methods (Push, QR code, OTP) can be used simultaneously to support users in different authentication contexts. The geokinetics function allows for real control of international travelers distinguishing them from random individuals using stolen credentials in random remote locations.

Incentivized

• Single sign-on simplifies access to your apps from anywhere
• Strong authentication for your customers using their preferred identity provider.
• Integrating with social accounts such as Facebook or Google+

Incentivized

• The Authpoint Cloud portal is easy to use and navigate
• It integrates well with the Firebox and gateway
• Promptly sends 2FA request onto the user devices
• Its very easy to re-activate token on a new device if the device is lost or stolen
• Troubleshooting logs are available to figure out whats wrong if a user cannot authenticate

Incentivized

• Troubleshooting diagnostic logs effectively requires VS Code
• Group and role management requires additional effort
• The programming model (XML) could use some developer experience love

Incentivized

• While the set up was easy to do the instructions could use a little more details.
• It would be useful to be able to tell how many users are at the firewall level instead of going out to the cloud to look for it.

Incentivized

Today to ensure our ISO 27001 certification it is important that we maintain this solution. Today it is part of the way any employee within the organization works, we no longer have any other way of working and it is the simplest way to ensure that access to the workstation is done with MFA.

Incentivized

After initial setup, it practically runs itself. Onboarding new users is fast and easy as it should be. The AuthPoint mobile app is small and simple to use. The only reason I do not give it a 10 is that I frequently get complaints from end users that the AuthPoint app is "constantly downloading". In fact, it's not downloading anything and that what the users are seeing in the app is a timer for the 6-digit code that changes every minute.

Incentivized

It failed a couple of times for a period of an hour or so, where systems were down.

Incentivized

Never had a problem with Authpoint servers.

Incentivized

WatchGuard support is always quick and reliable. They have urgency levels that you are able to select when creating your support ticket, and they respond in accordance to the severity that you have set. I have never had an issue with getting someone on the phone in the same business day, even for very low priority issues.

Incentivized

It was an Onsite demo at the ditributor with the benefits of Watchguard Authpoint. Was very nice to see the abilities of the product. This Demo was a few years back, since then Authpoint changed allot. It is very nice for partners that you can get this demo without any aditional cost.

Incentivized

We use the online training for all our employees. There are both sales and technical trainings available and there even is a technical certification. You can use this for the Watchguard Partner Program which can give you aditional benefits. Every now and then you have a webinar that discusses multiple Watchguard products.

Incentivized

the first time it takes more effort. It is helpful to already understand how each authentication type works. Then it's much easier to understand the MFA solution that you implement. It is useful to check the release notes from time to time and update the key parts of the Watchguard Authpoint. Authpoint Gateway, Logon App, RDWeb... Also, it's useful to set up notifications when something goes wrong or sometimes check the statistics of how many requests are being approved/denied, etc.

Incentivized

Each one of these alternatives has pros and cons. PingOne from Ping Identity states they "help deliver the secure and seamless customer experience to win battles for customer acquisition, retention, revenue, loyalty, and trust." While that may be the case, they did not fit our needs. We have a complex system and it did not seem to fit into our business.

Incentivized

I would slot Authpoint as better than ESET but not Duo. ESET has the same limitations as Watchguard in the OTP support. It also is an on-prem installed console rather than a cloud, which increases cost and maintenance requirements. The duo now supports standard OTP for admin accounts, so it can be managed by a team.

Incentivized

We are a medium-sized company. We don't need rapid scaling.

Incentivized

• Having monthly active users billing was cost-effective.
• Helped with the IT support that was already managing the Azure platform of the company; this helped to manage the costs better and optimize them.

Incentivized

• Our end uses found this product very easy to use. Using one overview session, I have not had to follow up with users to access the product.
• Once deployed, other users in our environment heard about the ease of use. We then had a 25% increase in requests for the product.
• This product has added to the overall satisfaction of users having to work offsite, attend conferences and other travel while still being able to stay connected to their work product.

Incentivized