Item: Watchguard Endpoint Security
Rating: 7
Author: David Lorenzo

Use Cases and Deployment Scope

We use WatchGuard EPDR to secure all of our customers, such as their endpoints and their servers. We manage multiple clients and consoles and it is easy to use. The main problem we face is when we want to manage different customers at the same time that we are not able to do it because they are separated in differented consoles. Regardless, the management is pretty nice.

Pros and Cons

Detect malicious files
Detect TTPs on the MITRE ATTACK
Monitor users
Get all the applications installed on the computer

Capability to search for IOCs on the computer which is installed
Be able to search in different customers without having to go one by one console to see the information
Not slowing the system when analyzing multiple and changing files (for example Citrix)

Return on Investment

Reduced costs
Easy management
Improved security (before we only used the TDR)

Alternatives Considered

Bitdefender Managed Detection and Response (MDR) and CrowdStrike Falcon

We are partners from WatchGuard and have a good relationship with them. So when validating some EDRs to install in our customers, we took into account several products, but analyzing the results of usual detections of different malware, malicious file and attacks, and being aware of the money, we chose WatchGuard EPDR.

Key Insights

Do you think Watchguard Endpoint Security delivers good value for the price?

Yes

Are you happy with Watchguard Endpoint Security's feature set?

Yes

Did Watchguard Endpoint Security live up to sales and marketing promises?

Yes

Did implementation of Watchguard Endpoint Security go as expected?

Yes

Would you buy Watchguard Endpoint Security again?

Yes

Usability

The usability of the Watchguard EPDR is one of the main reasons we love the product. It is easy and straight forward to use. There are not excessive configuration to make but you can choose whatever you need for the customer bringing you the flexibility to do it without that much effort.

Central Management

We use the Partner Center to manage the different customers, licenses and all the staff. But we are not able to manage all the detections, malware and so on in the same console. This impact us in having the time to check every customer one by one and sometimes slow the process.

Likelihood to Recommend

It is well suited for organizations which systems are mainly based on Windows environments. On others, for example Mac (in our expirience at least), it makes it a bit difficult to the user who usually reports problems. Also, it is not well suited in cases where you have changing users working from home and the office. It perfectly fits if the work is the same as usual, but when changed, the configuration cannot.

Review of WatchGuard EPDR

Software Version

Overall Satisfaction with WatchGuard EPDR