WatchGuard AuthPoint

WatchGuard AuthPoint does work well for the authentication of SSL VPN users, as well as our NextCloud user authentication. It will probably also work fine if set up to be used for the user authentication on the Access Portal of the Firebox. It could probably also be used for other remote access scenarios like Citrix remote clients and so on. Windows login security can also be greatly improved when Authpoint is used with it. We are also looking into this scenario at the time.

We provide it to our customers when they need to use VPN to connect to their network and this solution improved security since you need to provide your username, password and confirm a push notification or with a OTP from your own device as a mobile phone with AuthPoint app and the token. If you don't want to use a mobile phone it's possible to you hardware token

AuthPoint is the obvious choice if you already have a WatchGuard edge device, particularly if using it for VPN endpoint. I have not tried implementing it for other services, although it has this capability, but if I didn't already have a WG techstack, I would look at other alternatives to protect non-WatchGuard services.

Watchguard Authpoint is well suited to both small and large companies and scales well. It can be adapted to a number of token delivery methods, and mutliple methods (Push, QR code, OTP) can be used simultaneously to support users in different authentication contexts. The geokinetics function allows for real control of international travelers distinguishing them from random individuals using stolen credentials in random remote locations.

I recently had the opportunity to explore WatchGuard AuthPoint, and I must say, it stands out as a robust and user-friendly authentication solution. Any company that has a need for MFA, this is a great product. It is very easy to manage users and create and remove tokens for each account. If you are familiar with Active directory, it syncs seamlessly with all your users.

The Watchguard Authpoint is always used by us on every single one of our Watchguard deployments. We use the Firebox as our standard for the vast majority of our customers, as well as in our own offices. This product allows for the easy deployment, reliability, security, and customization we demand from every solution we implement. The user friendly app makes it a great solution for all users in an organization regardless of technical skill level. Security is paramount, but users have to WANT to comply. Some similar apps on the market make it more challenging or intimidating for some users.

It is easy to set up and use when you want to protect a customer from external access with Multi Factor Authentication. When you have a WatchGuard as a firewall it is easy and possible to connect the WatchGuard directly to AuthPoint. It also connects with Azure AD if you have a customer which doesn't have an on-premise server.

very suitable in all those situations for companies that do not want to use Azure AD, or manage SSLVPN user authentication on an internal AD. (An expired password would make access to corporate resources difficult).

WatchGuard Authpoint is suitable for any scenario, either as a key token generator to access systems or as a two-factor authentication token for VPN connections.

Some scenarios based on my experience where Watchguard AuthPoint is well suit would be remote working. If someone have a full domain with a file server it can be really beneficial to use AuthPoint as it adds an extra level of security for any company. The push to notifications make it a lot easier on the user side of things too.

AuthPoint is a great solution for MFA for VPN. The simplicity of the management console and tokens compared to other MFA applications is night and day. You simply set it up and let it go. If someone loses a phone, it takes you two clicks to deactivate and create a new one for their new device.

WatchGuard AuthPoint integrates easily with other WatchGuard products. If you are already using WatchGuard Firewalls or WatchGuard Cloud, this service will be seamless to add. If you are not using other WatchGuard products, I would look for another solution for multifactor authentication.

WatchGuard AuthPoint is ideal for implementing MFA in VPNs. In addition to this, it can be successfully used for any other service that requires MFA, on a par with the many authenticators on the market

AuthPoint is a great fit for anyone looking for a reliable, easy to use and affordable MFA solution to improve their identity security and overall cybersecurity posture. AuthPoint is great for Active Directory integration, great for Office 365 integration and great with any SAML based integration application. AuthPoint has over 150 application integrations already published, and beyond those it can integrate with pretty much any SAML based app.

Integration with WatchGuard Firebox for SSL VPN access

We have about 25 users who need remote access from home. Adding AuthPoint to our environment added an extra layer of security that we're extremely happy with. It is very easy to set up and easy to use.

The main purpose to implement the MFA for my customers was to provide an easy-to-implement, flexible and cost-effective solution to ensure that only allowed users can remotely access the LAN. The pandemic showed any Company that allowing employees to work remotely is a great resource for both. For IT managers is crucial that the large use of VPNs is not to become an open door for anyone who just stole credentials. With the latest firmware on the recent firewalls, the implementation became even easier since a RADIUS Client Resource in AuthPoint is not necessary anymore. The associated Mobile App runs either on Android or iOS. Another interesting use case is to prevent unauthorized users from login into crucial Windows Server implementing the Logon app. We, administrators, are very careful in keeping secret an administrator account password but, for different reasons, it can be breached. After entering such a password an automatic request for approval reaches the AuthPoint App on your smartphone so, if it is not you, not only the intruder can’t log in, but you know that such credentials had been breached and you must immediately change the password and investigate back. My advice, go for it!

WatchGuard AuthPoint is a great option for anyone who has existing WatchGuard products in their environment. It installs seamlessly and work together perfectly. With it being cloud based, I was able to get everything up and running in just a couple of days. If I didn't have existing WatchGuard products already in our environment, I maybe would have looked at competitive products, but I wouldn't have ruled out WatchGuard AuthPoint even if we didn't.

It's well suited for easy access as it allows push authentication that does not require the user to type codes. It's much easier and faster for the user to use and requires less training as it is automated and user-friendly. Does not require any extra license fee if you use a software key compared to other solutions.

AuthPoint is appropriate for companies concerned about the security of their information, since it allows us to deliver resources to the user for whom it is intended. If we talk about suitable scenarios, AuthPoint is recommended for any type of company. It is less appropriate work environments where user schemes are not defined, or there are no specific policies on team management, for example teams where there is only one user per computer, with users doing totally different functions, it should be noted that integration with Other Firewalls limits sales of this product as potential customers prefer to stick with their captive portal authentication solution provided by their current firewall.

For use, Authpoint with push notifications is a much nicer 2fa token, the tie with the active director is convenient and allows us to cut accounts and services from one point as well as allow users to use one safe secure login. I have been pleased with Authpoint and have had no issues outside; wanting a little more feedback on login fails.

I will recommend it to be implemented on servers. The prompting of MFA when RDP forces small companies to create users for each administrators. Also effective in securing laptops. For firewalls, if it is SSO based implementation, the firewall policies cannot be granular on the access of SSLVPN users and groups.

The two biggest challenges we faced were VPN clients and users who have local admin rights on their computers. We were looking for a solution that protects us with MFA and user friendly. After looking into a few options, we liked WatchGuard AuthPoint. One of our requirements was also to set up MFA for internal requests like active directory changes. WatchGuard Authpoint is not a well-suited solution for internal requests in my opinion.

I have only used it with WatchGuard hardware to secure multiple offices and remote systems, but I believe it does a very good job in these situations.

It works very well to secure our VPN and our servers. We utilize Microsoft 365 and chose to keep the M365 MFA turned on rather than route it via WatchGuard AuthPoint. It seemed a little patched together to get it to work. Also, we did not want to leave all our eggs in one basket. If there are issues with Authpoint at any time users will still be able to access their Microsoft 365 services with the Microsoft MFA.