TrustRadius: an HG Insights company

WatchGuard Endpoint Security

Score8.7 out of 10

257 Reviews and Ratings

What is WatchGuard Endpoint Security?

WatchGuard EPDR (formerly Panda Adaptive Defense 360) combines next-generation antivirus protection, endpoint detection and response (EDR), patch management, content filtering, email security, full disk encryption, and more, into one package. The platform touts a unique zero-trust security service that certifies the legitimacy and safety of all running applications thanks to a combination of automated, AI-driven processes and investigation services provided by a team of malware analysts.

Read more details.

Media

Screenshot of Main Security Dashboard
Screenshot of Main Security Dashboard
Screenshot of Risks Dashboard
Screenshot of Endpoint Access Enforcement
Screenshot of Incident Details

1 / 5

Screenshot of Main Security Dashboard

Top Performing Features

  • Endpoint Detection and Response (EDR)

    Continuous monitoring and response to advanced internet threats by endpoint agents.

    Category average: 9.2

  • Malware Detection

    Detection and blocking of zero-day file and fileless malware.

    Category average: 9.1

  • Centralized Management

    Centralized management supporting multi-factor authentication, customized views, and role-based access control.

    Category average: 8.7

Areas for Improvement

  • Anti-Exploit Technology

    In-memory and application layer attack blocking (e.g. ransomeware)

    Category average: 8.8

  • Vulnerability Management

    Vulnerability prioritization for fixes.

    Category average: 8.6

  • Hybrid Deployment Support

    Administrators should be able to choose endpoint security on-premise, cloud, or hybrid.

    Category average: 7.9

Who Buys & Uses WatchGuard Endpoint Security

Pros

  • Accurate threat detection and prevention with low false positives
  • Centralized cloud management simplifies administration across endpoints
  • Seamless integration within the broader Watchguard ecosystem

Cons

  • Reporting features lack detail and customization options
  • User interface is perceived as unintuitive and could benefit from redesign
  • Cost is considered relatively high compared to some alternatives

Watchguard Endpoint Security keeps getting the job done

Use Cases and Deployment Scope

Watchguard Endpoint Security satisfies cyber liability insurance which is great. But it also has a more full range of effective modules watching different kinds of traffic and activities on a PC. Much more then regular antivirus.

Pros

  • Catch malware url access
  • Quiet to the user
  • Very few false positives

Cons

  • Reporting limited
  • Alerting very basic via e-mail

Return on Investment

  • We're able to charge more for the product then traditional antivirus as it's many faceted and has more value
  • Watchguard Endpoint Security satisfies cyber liability insurance which everyone shoud have

Alternatives Considered

ESET PROTECT

Other Software Used

Microsoft 365, ConnectWise Automate, ConnectWise PSA, WatchGuard AuthPoint, WatchGuard Firebox Cloud, Windows Server

Powerful unified security in one neat package

Use Cases and Deployment Scope

We use WatchGuard as our primary endpoint security solution for customers, larger customers benefit from its Unified Security approach (network, endpoint, cloud) and overall am very happy. For us WatchGuard is profitable, easy to deploy and manage and is exceptionally extensible.

While we do support things like Defender for Endpoint and other competitors when needed, its just such as stark difference that we really push WatchGuard as a business. Easy to deploy, configure, adjust, segment, integrates with pretty much anything. For an SME that wants enterprise security without all the cost and complications, WatchGuard are just the ticket. And even for our larger customers it just scales so well.

Most of our customers are regulated is some way, so I'm never looking for the cheapest product or the one that offers crazy margins - there's always a give right? WatchGuard are just perfect, so that's what we sell to our customers.

Pros

  • Web Access Control
  • EPP, EDR and EPDR options
  • License allocation for tenants
  • Threat Intelligence
  • Single-Pane of Glass (yes, really)
  • Product Updates
  • Passing pentents
  • Extensible security (XDR, etc)

Cons

  • AuthPoint could do with more integrations / piggyback off larger IdPs

Return on Investment

  • Healthy margins when reselling
  • De-risks most of our customers completely
  • Supports multi-engine / defence in depth because it's easy to configure
  • Anti-Exploit is easy-peasy
  • Web-Access Control lets us block most naughty stuff
  • 50-70% ROI when accounting for ease of selling, ongoing maintenance, etc. Very fire-and-forget for SMEs who all are broadly the same industry

Alternatives Considered

Microsoft Defender for Endpoint, Sophos Managed Detection and Response, Symantec Advanced Threat Protection, Bitdefender GravityZone and Cortex Xpanse by Palo Alto Networks

Other Software Used

Microsoft Defender for Endpoint, Bitdefender GravityZone, Cortex Xpanse by Palo Alto Networks

Watchguard Endpoint Security's strength lies in its advanced endpoint protection

Use Cases and Deployment Scope

WatchGuard Endpoint Security effectively protects workstations and servers with a discreet and resource-efficient agent. Management via WatchGuard Cloud is quite easy and provides a comprehensive overview of the security of your entire machine fleet. On the other hand, the close relationship between the terminal security solution and that of the internet gateway makes it possible to automate actions in the event of detected threats.

Pros

  • Reducing "noise," fewer alerts for more protection
  • Automatic blocking and cleaning of infected devices
  • A single platform for configuring, deploying and monitoring agents

Cons

  • Provide predefined configuration templates (desktop workstation, laptop, kiosk, etc.)

Return on Investment

  • It's difficult to quantify, as we're just starting to migrate our customers to the WatchGuard solution.

Alternatives Considered

WithSecure Elements Endpoint Protection

Other Software Used

Atera, Microsoft 365, WithSecure Endpoint Detection and Response (EDR), TeamViewer, Splashtop

Watchguard Endpoint Security - a Comprehensive Solution for Current Watchguard Customers

Use Cases and Deployment Scope

Watchguard Endpoint Security comes bundled with the Firebox Total Security suite. This is a fantastic value because it helps mitigate threats not only at the network level but also at the endpoint user level. Since we already have endpoint protection in place, we primarily use it as a supplement to SentinelOne. There was one instance where WatchGuard EDR attempted to update using a temporary file that SentinelOne repeatedly flagged and prevented from executing. Aside from that situation, we have not experienced any other issues. The WatchGuard EDR agent seems very stable and static overall, and I have been very happy with its performance, compatibility, and cloud-based setup. In our environments, SentinelOne has caught nearly everything before WatchGuard EDR has had a chance to detect it. The only area where WatchGuard EDR has occasionally ahead been with temporary file detections. With the Total Security suite being used in high security environments I do not find this surprising that WG EDR hasn't found many threats. We'll continue to use it alongside SentinelOne for an enhanced security posture.

Pros

  • Temp file scanning
  • Ease of deployment
  • Management
  • Endpoint visibility

Cons

  • Endpoint UI is lacking and confusing when a user comes across an issue
  • Since this is a supplement, I often find myself needing to relearn the management side as it's very different from other security software

Return on Investment

  • Easily manage firewalls, MFA, & EDR all in one place.
  • Very flexible tiered protection models create a good fit for individual clients and computers.
  • They're still adapting into a new interface which causes a learning cycle. Overall, this is a good thing since things are constantly improving, but I've found myself getting lost in UI while trying to do another task.

Alternatives Considered

WatchGuard AuthPoint, WatchGuard Managed Detection & Response, WatchGuard DNSWatchGO, Watchguard Endpoint Security and WatchGuard Network Security

Other Software Used

WatchGuard AuthPoint, WatchGuard DNSWatchGO, WatchGuard Network Security, WatchGuard Managed Detection & Response

Watchguard Endpoint Security Leveled-Up Our EDR Game

Use Cases and Deployment Scope

We recently switched to Watchguard Endpoint Security from a competitors product - and are still learning the complete feature-set offered. That said, we have been Watchguard Firewalls for over a decade. The integration with the Watchguard authentication client installed on all of our endpoints helps with client/device information, as well as ALL of the traffic coming and going from their device. All presented in a nice - easily digestible GUI that can also be shared with upper management and non-IT folks. Even they can understand it!

Pros

  • Client Hardware Visibility - You can see what Windows updates/patches they are missing, the last time they were online, traffic to and from their device etc.
  • Device isolation. Once a threat actor or file is discovered, you can immediately quarantine the device to prevent the exporting of data/information to the threat actor
  • Integrates with our existing Watchguard Firewall hardware - so that the EDR feature-set works alongside the network protection as well
  • GUI is fantastic - very easy to see client hardware insights, current active threats or PUA, and helps you triage various issues depending on level of risk associated with each.

Cons

  • Getting an initial quote took some time. Unsure if that was a problem with our reseller - or lack of response from Watchguard.
  • EDU pricing was available, but wasn't as substantial of a discounted rate than the competitor that we switched from. Was still fully E-Rate eligible, though!

Return on Investment

  • We are already seeing a slight cost-savings from the competitor product we moved from. But are still only a few months in.
  • Our helpdesk techs are saving tons of time and wear and tear on their vehicles not having to drive out to remote off-site locations to support staff devices. Windows Patch-Management being included in this suite is well-worth the cost alone - for our district.
  • Being able to pull up the main dashboard in a meeting with our admin team and show them what staff are doing on their devices via web logs has been a huge help as well. We don't want to micromanage our staff - but we also don't want them needlessly letting YouTube run their classrooms each day, either.

Alternatives Considered

Symantec Advanced Threat Protection