A reasonable choice for an existing WatchGuard firewall user
June 12, 2021
A reasonable choice for an existing WatchGuard firewall user
Score 7 out of 10
Vetted Review
Verified User
Overall Satisfaction with WatchGuard AuthPoint
It is being used for the whole company to provide MFA for VPN and other websites that support SAML. It is not used for Office365 because of limitations that cause it to prompt for every Office app use. IOS and Android apps work well and are easy to install.
- Quick MFA point on cell phones.
- Integrates with WatchGuard SSL VPN.
- Does an OK job with SAML.
- Poor documentation for SAML with popular sites.
- Will not accept past user ID from 3rd-party site to AuthPoint login. This is a major downfall and causes users to enter their user ID twice. For example, if you enter your email into Tableau Online and then it brings you to the user ID prompt for AuthPoint, you have to enter your email address again.
- SAML login page customization does not work most of the time. If you pick a pre-configured SAML setup (which you must do if AuthPoint knows the site), it will strip all customization. You cannot provide your users any company branding. Microsoft does this customization correctly for their MFA product, AuthPoint is lacking.
- Works.
- Cost effective solution.
- Microsoft Azure Active Directory, The Okta Identity Cloud, Duo / Cisco Secure Access and by Duo
It is only worth purchasing because of the cheap price and integration with WatchGuard VPN. The downside in trying to test a MFA product is having to configure your products (Tableau Online, Office365) to use it and therefore all users immediately will have issues unless using the MFA solution. Plan on testing on a weekend.
WatchGuard was somewhat helpful in config. A lot of questions always have to be sent to level 2 support and you cannot talk to them directly. You burn a lot of time trying many config options in AuthPoint and the 3rd-party to find a match that will work.
Users were fine with installing the app on their work and personal phones. It was great that the AuthPoint config page allows you to see if they did not setup their phone correctly to allow push notifications. If would have been great if they had a link to send the user instructions on how to fix it (IOS and Android). Their config page makes it easy to revoke tokens and re-issue them.
It hopefully will help prevent a hack. But, like any product, the user still may click on Allow to a push notification that they did not initiate. You will also find many websites that support SAML might not add the smarts to make it easier for the users. Some companies chose to make the user select SAML Login or keep getting errors trying to use a password.
Do you think WatchGuard AuthPoint delivers good value for the price?
Yes
Are you happy with WatchGuard AuthPoint's feature set?
No
Did WatchGuard AuthPoint live up to sales and marketing promises?
Yes
Did implementation of WatchGuard AuthPoint go as expected?
Yes
Would you buy WatchGuard AuthPoint again?
No