WatchGuard AuthPoint

AuthPoint is the obvious choice if you already have a WatchGuard edge device, particularly if using it for VPN endpoint. I have not tried implementing it for other services, although it has this capability, but if I didn't already have a WG techstack, I would look at other alternatives to protect non-WatchGuard services.

Watchguard Authpoint is well suited to both small and large companies and scales well. It can be adapted to a number of token delivery methods, and mutliple methods (Push, QR code, OTP) can be used simultaneously to support users in different authentication contexts. The geokinetics function allows for real control of international travelers distinguishing them from random individuals using stolen credentials in random remote locations.

Watchguard Authpoint is perfect for a small to medium sized business looking to secure their user logon experience to systems and applications.

It is also ideal for a user base that is not computer savvy or comfortable with Technology.

WatchGuard AuthPoint isn't useful if you want to secure your on-premises servers or client computers. You can use it to provide an additional security layer for logging in on a PC. But if you already are logged in, you can't authenticate with two-factor for tasks that need admin privileges (UAC in Windows). It is very useful for logging in on websites that support two-factor, like Facebook, WordPress, or programs like Battle.net. It's also very useful to secure your mobile user VPNs.

Authpoint is great for a situation where each individual has their own login but for an outsourced IT department with an MSP, either each technician would need their own account (which raises licensing costs for the client) or the primary tech with the app will always need to be available for other members of their team to login.

Integration with WatchGuard Firebox for SSL VPN access

WatchGuard Authpoint is well suited with integration with Windows, SSO, securing Watchguard SSL VPN, and ensuring compliance with insurance requirements. It will work with Watchguard IKEv2 VPN but not when there is a need to authenticate with Radius server.

The main purpose to implement the MFA for my customers was to provide an easy-to-implement, flexible and cost-effective solution to ensure that only allowed users can remotely access the LAN. The pandemic showed any Company that allowing employees to work remotely is a great resource for both. For IT managers is crucial that the large use of VPNs is not to become an open door for anyone who just stole credentials. With the latest firmware on the recent firewalls, the implementation became even easier since a RADIUS Client Resource in AuthPoint is not necessary anymore. The associated Mobile App runs either on Android or iOS. Another interesting use case is to prevent unauthorized users from login into crucial Windows Server implementing the Logon app. We, administrators, are very careful in keeping secret an administrator account password but, for different reasons, it can be breached. After entering such a password an automatic request for approval reaches the AuthPoint App on your smartphone so, if it is not you, not only the intruder can’t log in, but you know that such credentials had been breached and you must immediately change the password and investigate back. My advice, go for it!

I believe WatchGuard AuthPoint is suited for SSLVPN connections. It verifies the identity to remotely access the network. It also works well as MFA to sign into Windows devices for security. I don't think it's well suited for other third party cloud platforms as it can be problematic to transfer the tokens.

AuthPoint is appropriate for companies concerned about the security of their information, since it allows us to deliver resources to the user for whom it is intended. If we talk about suitable scenarios, AuthPoint is recommended for any type of company. It is less appropriate work environments where user schemes are not defined, or there are no specific policies on team management, for example teams where there is only one user per computer, with users doing totally different functions, it should be noted that integration with Other Firewalls limits sales of this product as potential customers prefer to stick with their captive portal authentication solution provided by their current firewall.

I will recommend it to be implemented on servers. The prompting of MFA when RDP forces small companies to create users for each administrators. Also effective in securing laptops. For firewalls, if it is SSO based implementation, the firewall policies cannot be granular on the access of SSLVPN users and groups.

License implementation can be a problem sometimes, and support doesn't seem to know much when there is an issue.

It is excellent for adding MFA to local desktops and laptops (on and off the LAN).
Integrates to Office 365 for a login provider--has some caveats though.
Integrates with WatchGuard firewalls for MFA on VPN connections.

Our current use cases are mostly for Watchguard Firewall VPN solutions but with WatchGuard Authpoint. We can add 2FA to multiple services that require radius or active directory authentication in that way Watchguard Authpoint is mostly used under its full potential. As a minus it's not compatible with web-based 2FA it can be hard to configure.

- WatchGuard AuthPoint supports several different MFA systems from different companies (Microsoft, Netsuite, etc.) that users love having a single app for all their MFA accounts. - Because there's a per-user recurring subscription, not every company is interested, especially when they have limited use for it (ie. Mobile VPN only).

I'd recommend WatchGuard AuthPoint if you need a solution to secure computer logons, VPN, or other resources with MFA. The logging provides great details. WatchGuard AuthPoint is compatible with many cloud services already.

I originally set up AuthPoint for secure Logins for my Firebox which I have used for many years. 2 years ago I needed a MultiFactor option of a third party Anti-virus and without fail the AuthPoint solution worked perfectly. More recently I needed MultiFactor available logins for my VPN so it only made sense to use the solution I knew I could count on.

Watchguard AuthPoint is an excellent multifactor validation software that integrates seamlessly with native Watchguard Software or Hardware but also works very well with third party software, we have also used it to double validate TeamViewer. A good scenario for its use is one in which you need to secure access to your infrastructure with multifactor access software, if you do not have it, it is a good choice

works great with WatchGuard firewalls. possibly allow integration with other firewalls?

AuthPoint is very well suited for adding multifactor authentication of mobile VPN users connecting to WatchGuard firewalls. Any currently support WatchGuard firewall is supported, not just the high-end firewalls. We use AuthPoint at our main campus location and our small remote offices too. AuthPoint is also an excellent way to add MFA to the computer logon process as well. But AuthPoint can also be used to authenticate for other services and products as well. AuthPoint is probably not a good solution if you do not use WatchGuard firewalls. But if you are using WatchGuard firewalls, it is almost a no-brainer add-on to greatly increase perimeter security with MFA!

{WatchGuard] AuthPoint is great for users that have invested in the WatchGuard family of products/services. For any user logging into corporate networks via SSLVPN, it is a great tool to add that extra level of security. It is very easy to use. If there is no WatchGuard family of products/services in production, we will usually go a different MFA route as there is better 3rd party integration with more products.

Setting up an account in the WatchGuard Cloud and do the configuration is very easy.

In my experience, there is no scenario where WatchGuard's AuthPoint product was not well suited. At this point, the only rate-limiting factor has been pricing in the client's eyes. Fortunately, this has only been in our ala carte solution model. Our MSSP model has been designed to include AuthPoint and has been a great addition to our portfolio.

We have used Watchguard firewalls for the past 20 years and support has always been a leading reason for working with them...in addition to leading-edge security and features and ease of access to high-security devices.

AuthPoint is great for companies with mobile users, as it will protect devices locally and your company's network by adding 2FA for VPN. It can also be integrated with any cloud service by using SAML and the IDP portal. I can't think of a scenario where AuthPoint wouldn't be suitable, considering the increasing threats and exposures globally.