NetIQ Identity Manager vs. WatchGuard AuthPoint

• An organization who needs a way of managing their entire user lifecycle.
• If an organization needed a solid Identity Management (IDM) solution that could do Single Sign-On (SS) and provisioning for services both internally and in the cloud.

WatchGuard Authpoint is well-suited for existing WatchGuard users and those heavily dependent on VPN connection. The app is easy to use and set up on iPhone and Android devices. We use a Firebox M370 and have had zero issues in the deployment or the daily use of WatchGuard AuthPoint. Everything works well and we have had zero issues after initial implementation.

• Easy to use workflow for creating users.
• The self-service portal for resetting passwords etc., is easy to deploy.
• Has strong user activity monitoring.

• The Authpoint Cloud portal is easy to use and navigate
• It integrates well with the Firebox and gateway
• Promptly sends 2FA request onto the user devices
• Its very easy to re-activate token on a new device if the device is lost or stolen
• Troubleshooting logs are available to figure out whats wrong if a user cannot authenticate

• The interface is a bit outdated.
• It would be nice to be able to customize the self-service portal more.
• It would be great if it integrated with more products.

• While the set up was easy to do the instructions could use a little more details.
• It would be useful to be able to tell how many users are at the firewall level instead of going out to the cloud to look for it.

Today to ensure our ISO 27001 certification it is important that we maintain this solution. Today it is part of the way any employee within the organization works, we no longer have any other way of working and it is the simplest way to ensure that access to the workstation is done with MFA.

After initial setup, it practically runs itself. Onboarding new users is fast and easy as it should be. The AuthPoint mobile app is small and simple to use. The only reason I do not give it a 10 is that I frequently get complaints from end users that the AuthPoint app is "constantly downloading". In fact, it's not downloading anything and that what the users are seeing in the app is a timer for the 6-digit code that changes every minute.

It failed a couple of times for a period of an hour or so, where systems were down.

No apparent problem besides a couple of times that systems weren't working

WatchGuard support is always quick and reliable. They have urgency levels that you are able to select when creating your support ticket, and they respond in accordance to the severity that you have set. I have never had an issue with getting someone on the phone in the same business day, even for very low priority issues.

It was an Onsite demo at the ditributor with the benefits of Watchguard Authpoint. Was very nice to see the abilities of the product. This Demo was a few years back, since then Authpoint changed allot. It is very nice for partners that you can get this demo without any aditional cost.

We use the online training for all our employees. There are both sales and technical trainings available and there even is a technical certification. You can use this for the Watchguard Partner Program which can give you aditional benefits. Every now and then you have a webinar that discusses multiple Watchguard products.

the first time it takes more effort. It is helpful to already understand how each authentication type works. Then it's much easier to understand the MFA solution that you implement. It is useful to check the release notes from time to time and update the key parts of the Watchguard Authpoint. Authpoint Gateway, Logon App, RDWeb... Also, it's useful to set up notifications when something goes wrong or sometimes check the statistics of how many requests are being approved/denied, etc.

We use DUO Mobile for our other MFA (i.e., Remote Desktop for Windows.) WatchGuard offers instructions on how to set up MFA with DUO, however, the WatchGuard AuthPoint setup was much simpler, so we opted to go that route. We are planning on looking into switching everything to WatchGuard AuthPoint, however, it's not a high priority at this time.

We are a medium-sized company. We don't need rapid scaling.

• ROI
• Self-Service
• Easy Install

• Integration with current Azure AD and LDAP is important as it saves the users from creating a new account and password to remember for yet another website/product.
• The cost of a user license is nothing compared to the cost of data loss or a company network breach. It secures our devices and data in cases of theft or breaches. Theft of a device, data, or even worse a breach would cost the company thousands to millions of dollars.
• A negative impact is that the users lose about 10-30 seconds with every login or unlock of their computer. However, this is necessary for MFA security.