WatchGuard AuthPoint

WatchGuard AuthPoint Total Identity Security has indeed reduced the managment of our workforce credentials. It is a great product for protecting our employees against leaked credentials, phishing and any other scams that are out there to get users identities. The implementation was great received by the remote and hybrid employees.

We can NOT detect password reuse, so we can't enforce any policies to avoid it. Authpoint does add an extra security layer, thus it is reducing the impact of a possible credentials leak.

We are able to positively identify and log all VPN attempts and correspond them to enabled accounts. The fact that a physical token is not involved is a plus. People often leave home without tokens but seldom leave without their cell phones.

This has eliminated the constant need for password resets from our most difficult users.

WatchGuard offers many solutions for network security from firewall, access point and AuthPoint. You can setup it and protect you organization from threats without getting mad. Also for the end user is very easy to use since you can just approve with push notification or with QR code when required. You can also easily transfer your token between devices

The password management

We are not running "total identity" Just using AuthPoint as an MFA solution

Using MultiFactor Authentication helps organizations keep logins safe and secure. It is also possible to keep away any unauthorized access to important resources. AuthPoint also provides time based One Time Passwords (OTPs) which is very useful and causes less entropy, by which I mean does not need the implementation of more apps. AuthPoint also includes a corporate password manager which auto-fills credentials with browser extensions.

We do not have this product so I cannot answer the question.

Password control has been a strong emphasis for our company. MFA was rapidly accepted and has reduced password change requests. MFA is an essential component in our evolving singe sign n and zero trust initiatives. These initiatives are in keeping with better business acceptance by our business clients and supplier and helps secure our supply chain.

Employees are taking the companies security more seriously. It has given us the freedom to trust more employees with access to certain information that might have been deemed confidential.

Because we are using Sign Sign-On, the amount of password reset request has almost stopped completely. Because the passwords are integrated with our Active Directory, the corporate password complexity, Password Change and Password length policies are all enforced as default.

-

In our specific scenario, it allowed us to more easily centralize our WatchGuard accesses, with minimal password reuse and no password reset requests! It also helps to avoid leaked credentials, since you'd need access to one of our phones, physically, in order to allow an access.

We have increased confidence in the security for end users accounts that have remote access granted<br>Also we allow the users set their own password . They link the app to their mobile phone and their access is tracked and logged giving us increased visibility as to who is connecting remotely.<br><br>