Great for SMBs
We are an SMB and have been using WatchGuard products across Canada to secure our headquarters, branch offices, and remote workers. …
Overview
What is WatchGuard Network Security?
WatchGuard Network Security is a network security and firewall software. WatchGuard includes secure Wi-Fi, multi-factor authentication, and network intelligence products and services designed for SMB’s.
Recent Reviews
How WatchGuard Network Security Differs From Its Competitors
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Popular Features
- Policy-based Controls (415)8.787%
- Firewall Management Console (409)8.787%
- Content Inspection (402)8.686%
- Reporting and Logging (406)8.080%
Reviewer Pros & Cons
Features
Return to navigation
Product Details
- About
- Competitors
- Tech Details
- Downloadables
- FAQs
What is WatchGuard Network Security?
WatchGuard Network Security is a network security and firewall software. WatchGuard's advanced network security platform offers IT security professionals enterprise-grade security and threat visibility tools suitable for all organization. In addition to network security, WatchGuard includes secure Wi-Fi, multi-factor authentication, and network intelligence products and services.
WatchGuard Network Security Features
Firewall Features
- Supported: Identification Technologies
- Supported: Visualization Tools
- Supported: Content Inspection
- Supported: Policy-based Controls
- Supported: Active Directory and LDAP
- Supported: Firewall Management Console
- Supported: Reporting and Logging
- Supported: VPN
- Supported: High Availability
- Supported: Stateful Inspection
- Supported: Proxy Server
WatchGuard Network Security Screenshots
WatchGuard Network Security Videos
Watchguard Security
WatchGuard Network Security
WatchGuard Network Security Competitors
WatchGuard Network Security Technical Details
| Deployment Types | On-premise |
|---|---|
| Operating Systems | Windows, Linux, Mac |
| Mobile Application | No |
| Supported Countries | Global |
| Supported Languages | English, Spanish, French, German, Portuguese, Italian, Japanese, Chinese |
WatchGuard Network Security Downloadables
- WatchGuard M270 & M370 Datasheet: UTM performance, ideal for small and midsize organizations with up to 150 users looking for a rack-mounted solution.
- WatchGuard M270 & M370 Datasheet: UTM performance, ideal for small and midsize organizations with up to 150 users looking for a rack-mounted solution.
- WatchGuard Network Security Case Study
- WatchGuard Corporate Brochure
- WatchGuard Total Security Suite Brochure
- WatchGuard M4800 & M5800 Datasheet: Typically deployed at the corporate headquarters, these appliances serve as the “hub” appliance, responsible for managing and securing all communications between the head office and all remote employee and small business sites.
Frequently Asked Questions
WatchGuard Network Security is a network security and firewall software. WatchGuard includes secure Wi-Fi, multi-factor authentication, and network intelligence products and services designed for SMB’s.
Fortinet FortiGate, Sophos SG Firewall Appliances, and Cisco Meraki MX are common alternatives for WatchGuard Network Security.
Reviewers rate Stateful Inspection highest, with a score of 9.1.
The most common users of WatchGuard Network Security are from Small Businesses (1-50 employees).
Comparisons
Compare with
Reviews and Ratings
(793)Attribute Ratings
Reviews
(1-3 of 3)Companies can't remove reviews or game the system. Here's why
We use WatchGuard as our primary firewall and utilize WatchGuard's Multi Factor Authentication (MFA) company-wide to secure our internal applications. We are also a Managed Service Provider and resell all of WatchGuard's products to our customers all over the country. WatchGuard uses Best-in-Breed vendors to provide top-tier services across their product line.
- Next-Gen Firewall Services
- Multi-Factor Authentication
- Hardware Firewall Appliances
- Wireless Access Points could use improvement
- GUI could be updated
86.36363636363637%
8.6
- Inexpensive compared to competition with equal or better features
- No intrusions since we started using it
- Ease of use and management
We are a Managed Service Provider, so we not only implemented the solution on our network, but we also implement the WatchGuard solutions on business all over the country. Our engineers are cross-trained and the solution was easily adoptable by all of them. We have received no issues or complaints from WatchGuard customers or our engineers.
WatchGuard Network Security is a very simple offering that includes the appliance and whichever level of support that the customer chooses to implement (i.e. Standard, Basic or Total Security). The package is straight forward and easy to understand. WatchGuard also offers easy to understand literature that explains what is included in each of the security bundles.
WatchGuard Network Security offers equal or better security, and is substantially less expensive than these other solutions, especially when looking at a 3 year to 5 year period.
52
Sales, Engineering, Administrative and Executive
12
WatchGuard Network Security can be managed bin a single pain of glass by one person, or a team of engineers.
- Next-Gen Firewall
- Multi-Factor Authentication
- Site-to-Site VPN
- SD-WAN
- Secure Private Cloud
- Endpoint Security (Panda)
- Secure Wireless Access Points
- ATP
Yes
We replaced our Juniper Firewall with WatchGuard 12 years ago, and have stayed on the WatchGuard platform since that time. The WatchGuard Firewalls are much easier to use and offer better protection at a lower price point. We have since deployed hundreds of firewalls to customers all over the country.
- Price
- Product Features
- Product Usability
- Product Reputation
The WatchGuard Firewalls are much easier to use than most others solutions and offer better protection at a lower price point.
Look at the entire product set from the vendor to ensure their company vision is heading in the right direction.
- Implemented in-house
No
Change management was a minor issue with the implementation
When we changed to the WatchGuard solution, we overhauled our organizations security policies. It was a minor inconvenience to the staff, but a much needed enhancement to the organizations overall security.
- Changing security policies corporate wide
- Online Training
- In-Person Training
We purchased Total Security to have all available protection possible.
No
WatchGuard support has always been responsive and quick to resolution if there was an issue with one of our devices or one of our customers.
- WatchGuard Dimension
- MFA
- SD-WAN
- VPN
- Naming Convention of Multiple Devices
Yes
The MFA works very well. Dimension can be used on mobile, but gets a bit hard to read.
November 19, 2021
Totally satisfied
We currently use WatchGuard's Firebox for internal network traffic and mobile VPN for productivity applications. We also use the AuthPoint for wireless connections.
- Ease to use
- Affordable
- Gret traffic visibility
- Lower TCO
- Integration of the entire product portfolio to technologies like Splunk. Some features of endpoint security are not integrated yet.
98.18181818181819%
9.8
- WatchGuard has supported well the ROI in these last 10 years of use
- WatchGuard's ease to use has improved the user confidence on connecting applications out of office in this pandemic times
- The Firebox continuous and stable packet processing has allowed us to use the network anywhere, free of concernings.
We are WathGuard's reseller and services partner in Brazil. So as a the customers, We also use WatchGuard's products in our environment.
It helps when understanding product coverage and makes the purchasing simple to process.
Price, effectiveness and simplicity
16
We are a cybersecurity focused company, with our team divided in functions like:
- Tech support
- GRC Analysts
- Office Administration
- Deployment
- Marketing
- Sales
- Data Science
- Cloud Security
- Human Resources
- Alliances and Partnerships
- Post-sales analysts
- Pre-sales analysts
4
We aim to recruit and hire analysts to cover cybersecurity and support WatchGuard deploy/support, mostly with skills like below.
Experience in:
Experience in:
- Management and Operation of any UTM/NGFW platform;
- Complete higher education in Computer Networks, Information Security or IT (provided that the curriculum has depth in the subjects in question). It is essential to have broad expertise (full level) in: MFA, Digital Certificates, Firewalls (Policies and Security Features), Detection and response to security incidents (SIEM platforms), Threat Intelligence Platforms, EDR Platforms, Protocols and Network Connectivity (TCP/IP)Routing (Static, dynamic routes and routing protocols); Switching (Segregation using Vlans, etc.) Minimum proven experience of 5 years working in the Cyber Security area.
- Certifications related to the Information Security area;
- Desirable certificationsSystems Security Certified Practitioner (SSCP) Certified Cyber Professional (CCP)Certified Information System Security Professional (CISSP)
- Network Security and VPN for remote access
- Wireless Secure Access in our office
- Multi-factor Authentication for access the work applications
- Customers were surprised with the lower TCO
- Ease to use and manage
- It started do support integrations with other vendors like Splunk
- The Endpoint Detection and Response is a good way to go for a near future
- Integrate the data correlation from sources like the EDR tools with events management
- Attending regulatory compliances lihe LGPD (Brazil)
Yes
The product replaced was based on Linux and the decision was to improve network security and traffic visibility also.
- Price
- Product Features
- Product Usability
- Product Reputation
We were higly motivated to go onboard with the partnership and to demonstrate to customers that we would rely on product by our own.
We would probably to escalate the platform for something like an universal management.
- Implemented in-house
No
Change management was minimal
We had no problems at all.
- We had no significant issues
- Online training
No. It was not offered because it is not provided in our region.
Yes
Yes. The response time was ok in average.
We have recently faced a problem with a product sold to a customer, when the Firebox that would be replaced was about to expire (two days left), and the new one had to be fixed due to an system error. The WatchGuard Support helped us in an magnificent way, extending the olg Firebox licensing until the system's new one would be fixed.
- The Dimension tool
- The advanced security tools present in the Total Security subscription
- The new visibility and report for user groups
- MFA integration with apple devices
- Splunk
Internet link monitor
Security events monitoring
User activities monitoring (AD)
Security events monitoring
User activities monitoring (AD)
- Proofpoint
- Cyberark
Not sure
- Single Signon
To expand the integrations ecosystem.
Prices were mandatory. The delivery time was good.
No. It's fine.
Yes
We have been enrolled as a beta testers for a long time and it is a pleasure for us to make part of it.
- More traffic speed
- New chipsets were well incorporated
- Not sure of what other benefits are expected from the next upgrade.
No
As a network security architect, it is my job to design NIST SP-800 cybersecurity framework hardened network layer security solutions. These strategies are combined with a comprehensive cybersecurity kill chain plan inclusive of email, network, phone, printer, cloud, server, and endpoint layered defense strategies. As part of the design decision, technologies that consistently have extremely high efficacy while having a low TCO are absolutely essential for this solution to be manageable, effective, and affordable. WatchGuard has been our choice for network layer protection for more than 10 years. We also use their endpoint protection agent technologies and authentication solutions. In doing so, we have been able to deliver high levels of security effectiveness at an affordable price to organizations ranging from one user to 500 users.
- WatchGuard System Manager and centralized management is the key to low TCO
- Security solution efficacy is critical. A solution that is only 95% effective is not good enough.
- Partner support is good and enables us to be able to deliver quality solutions that are consistently functional
- Partner enablement. WG focuses on the channel as they know that the skill of the integrators is what makes the difference between a default appliance and an effective security solution
- Partner communications on technical issues. For example the undocumented feature of SDWAN hidden route. There is still no documentation on that.
- Too infrequent communications about high incidence technical support issues. We do not want to have to be encountering known issues and then having outages or problems that we then have to put in tickets about.
- Pay attention to your most highly technical partners, not just those that sell a lot of equipment. The highly technical partners can and do provide very usable feedback that can make the products better.
- WG wants partners to build relationships with people inside WG so we can drive solutions to problems, but too frequently, we get no response to emails sent to the proper internal resources about legitimate issues.
99.09090909090908%
9.9
- Our business is very WatchGuard-centric and we value our relationship with WatchGuard more than any other manufacturer
- Fireboxes comprise the CORE of everything we do in terms of network layer security. So you literally cannot do a secure environment without a Firebox. Therefore, nearly every single client we have or ever have had has Fireboxes.
- We have been able to consistently prove value by our network layer security techniques we implement on Fireboxes. We are able to have a viable SIEM logging solution and security incident alarm notifications because of Dimension.
- Many of our largest and most valuable customers have come to use through WatchGuard partner finder
- WatchGuard has sometimes very poorly executed aspects of their marketing plans or technologies that have cost us business. For example, they solicited our customers on behalf of competitors repeatedly. WG's wireless technologies were very poorly executed during the controller to wifi cloud transition period for about a couple years. This caused us major problems which caused us to walk away from WG wireless for that time.
We are the WatchGuard network security partner.
Consolidated security services in two major service package flavors does provide simplified solutions offering. This model has worked well. Please continue with that.
SonicWall is insecure and horrible to manage. Cisco ASA is terrible to manage. 98% of breaches occur due to a misconfiguration. Therefore, any device that makes visibility and management difficult inherently results in misconfigurations and insecure configurations. I don't think that WatchGuard realizes how much of their success pivots around WatchGuard System Manager. Not the webUI, but WSM and centralized management server. WatchGuard Cloud will be absolutely nothing if it does not provide us feature parity for WSM.
5
network security engineering and network security support
5
Our engineers must have a very advanced knowledge of layer 3 networking technologies, server support, end user support, endpoint protection strategies, network layer security strategies, understanding of the cybersecurity framework, and the cybersecurity kill chain.
- Fireboxes ARE the network
- Fireboxes provide all the hardcore network layer security we need
- WatchGuard technologies represent a comprehensive ecosystem for network layer security, visibility, awareness and monitoring
- We were one of the first organizations to use autoblocking technologies. We have been using that innovation successfully since 2009.
- We are one of the only WatchGuard partners in the entire world that successfully uses Fireboxes for hardened network layer security microsegmentation and intra-VLAN packet inspection which creates a network security layer at the endpoint level
- We use real time alerting for all network layer security type issues that we think we should know about in real time. As such, we can offer clients a security operations center type of service.
- We review all network security reports for all client sites weekly and are able to identify trends, areas for further investigation, or areas of configuration changing
- For any prospects that contact us, we will use WatchGuard solutions to provide them the most security effective and cost effective cybersecurity kill chain solutions available in the SMB space.
- We plan on using DNSWatchGo and the Access Portal technologies more.
- We plan on using WatchGuard's MFA solution AuthPoint more than we are using it now.
- We also think that WatchGuard has worked out the bugs in their Wifi Cloud solution and it is now a mature product worth adopting.
Yes
We have tried Cisco ASA, Juniper, Barracuda, SonicWall, PaloAlto, Fortinet, and Netgear. We find all of those options to be lacking in functionality, features, support, management capabilities, or just outright lacking in security effectiveness.
- Price
- Product Features
- Product Usability
There is really only a single factor that matters. Security effectiveness at a low total cost of ownership. Forcepoint is security effective, but their baseline unit is around $40,000 unobtainium for most organizations. WatchGuard Fireboxes, year after year, are the only network security appliances that deliver security effectiveness, when properly programmed of course, at an attainable total cost of ownership.
I would have stopped wasting my time reviewing other manufacturer's products.
- Third-party professional services
We are the third-party professional services company that has done over 250 full network rearchitecture and migration projects. WatchGuard Fireboxes are at the core of creating a NIST SP-800 cybersecurity framework compliant network design.
I do not believe that in-house IT for any organization of less than 5000 employees would ever have the adequate network security architecture and engineering skill to properly implement core network security strategies. Companies should be looking to partner with a qualified WatchGuard partner for their needs.
I do not believe that in-house IT for any organization of less than 5000 employees would ever have the adequate network security architecture and engineering skill to properly implement core network security strategies. Companies should be looking to partner with a qualified WatchGuard partner for their needs.
Yes
We always start with simple replacement at first. Remove the old garbage network equipment and put in WatchGuard Firebox. Then once the Firebox is in place, implement security policies. Finally after the network layer is hardened, then refinements for security at the endpoints, servers, email system, etc. are done.
Change management was a major issue with the implementation
The biggest problem with implementing any security into an organization that has effectively had no security, which is what we find in most cases, is the FUD (fear, uncertainty, and doubt) by executive management and most users. It is a complete waste of time to try to find out what websites people need access to in advance. The only implementation that will be successful is one where you go in with your security standard that you think is going to work best for the client's organization, and then be highly available to deal with immediately any issues they encounter with regards to access. You can implement policies for a certain group of users at a time, but we generally find this to be unnecessary. We go in with our grouping of users with the set policies that we have established and maintained after 15 years of experience, and then adapt as needed.
- Educating users and executive management that network layer security is an absolute necessity
- Educating users and executive management that whitelisting websites that they want to access is not only unnecessary but an incorrect security approach
- Educating users and executive management that the Firebox and our security is not the problem. In many cases, the website developers of websites that they access are not maintaining secure website hosting or they are simply utilizing insecure methodologies. And that is the true source of the issues.
- Online training
- In-person training
- Self-taught
After 15+ years of experience with Fireboxes and having successfully trained 10 engineers to be successful supporting and managing Fireboxes, the only way to correctly and adequately learn Fireboxes or any other network security appliance is very heavy experiential effort. You must read the training manuals for Fireboxes, but you must also then spend a very significant amount of time with ANY network security appliance in order to be able to correctly and thoroughly use the solution for security efficacy. Very few people are going to have the skill to organically develop network security strategy on their own. Therefore they should partner with a highly qualified WatchGuard partner and then spend the time to learn how to use the product in order to maintain the security solution and strategy that their partner has implemented. It is actually better if managing network layer security is outsourced to a managed security services provider.
Yes
We are a WatchGuard gold partner and we also pay for 4 hour RMA warranty services on some Fireboxes. We always by TSS, which entitles us and our clients to higher support. Further, the effort we put into being a top tier WatchGuard partner and the relationship that we have built with WatchGuard over the years is how we pay for premium partner support. The level of support we have cannot be simply purchased for a fee.
Yes
I've been an extremely heavy user of WatchGuard products ever since 2007 consulting for 200+ networks. As such, yes I have found a lot of bugs over the years. WatchGuard has a good bug reporting system. They resolve the issue quickly if they are able to reproduce it. One of the reasons you should work with a highly qualified partner is because your partner will be able to use their connections to get issues dealt with even faster. There have been times that I found a bug and was able to email the engineer who manages that bit directly. The issue got fixed in less than 24 hours. That kind of response and collaboration only occurs through relationship.
Because of the quality of our skills as a top tier WatchGuard partner, we are able to have highly sophisticated and valuable interactions with WatchGuard top tier support. In the last few years, WatchGuard has really dramatically increased the skill of their support technicians at all levels. Part of it is due to the high quality of their internal training and the skill of their internal trainers. Part of it is due to a concerted effort by support executive management Shari McLaren to improve support. They have succeeded.
As long as we are asking questions of WatchGuard partner support that is within the scope of what is appropriate to ask them about, we are always able to have more than adequately sophisticated conversations about whatever the technical problem is. This results in problems being solved.
Literally, in 25 years of being in the IT industry, I have not had this experience with any other manufacturer of software or hardware.
As long as we are asking questions of WatchGuard partner support that is within the scope of what is appropriate to ask them about, we are always able to have more than adequately sophisticated conversations about whatever the technical problem is. This results in problems being solved.
Literally, in 25 years of being in the IT industry, I have not had this experience with any other manufacturer of software or hardware.
- Firebox System Manager and Firebox Policy Manager are the essence of effective troubleshooting, monitoring, configuration auditing, and configuration management. 98% of breaches occur due to a misconfiguration. Firebox Policy Manager, in the hands of a skilled network security architect can reveal network layer security misconfigurations faster than any other solution on the market. As such, it also eliminates network layer security misconfigurations.
- Dimension is an excellent visibility product
- WatchGuard's network discovery product is extremely helpful and easy to use
- There are areas of Policy Manager where no import/export or reordering function is available. This feature has been requested for years, but WatchGuard has not invested effort into improving Policy Manager. They are trying to move to WatchGuard Cloud. Unless they provide feature parity at least, then WatchGuard Cloud will never be able to replace WSM.
Yes, but I don't use it