Item: WatchGuard Network Security
Rating: 9
Author: Jeff Baek

Use Cases and Deployment Scope

Watchguard M200 Firewall device is providing the first point of defense from internet and external connections. We are depending on this firewall to prevent unauthorized access from an external network, allow secure access from remote locations using VPN for authorized users, limit internal users using unauthorized applications, log all communication going through the gateway for future analysis, virus and malware scan at the gate as well as routing between multiple local subnets. Watchguard firewall device provides a complete one device solution for small to medium size company looking for a device [that] can be easily set up and maintained. Compare to Cisco or Sonicwall devices, the setup process takes a lot less time for a small installation.

Pros and Cons

VPN Tunnel setup
Firewall policy setup for port based internal service
Remote VPN User Setup

The number of DNS servers supported is only 2 or 3 depending on the model, 4 or more could make it easier for network clients who want to set up redundant DNS environment
I can use more tools to help analysis of incoming and outgoing traffic

Return on Investment

Most companies with WatchGuard firewall installed never experienced hacking from outside
With advanced replacement maintenance policy, downtime was minimal when the appliance was damaged
When ransomware was attacked, this device did not provide protection. May need to find alternative solutions to prevent a future breach.

WatchGuard Network Security Partner

As a reseller of WatchGuard, I always work with the client's IT team for product recommendation to implementation. When I need support, WatchGuard tech support provides professional support within hours in most cases. One time I worked with tech support hours to solve the problem continuously until finished. They also support communication with networks using other brands, which was really helpful when you need to set up and maintain multiple network integration projects.

Implementation Rating

I would recommend [identifying] nodes, network and service first. Then set up a basic connection with maximum security. Start to add nodes and allow only necessary service one at a time. Use only a specific port or node while setting up a policy, be extra careful when you need to use an alias for interfaces like external, trusted, and optional.

WatchGuard Network Security Packaging and Licensing

It takes a lot less time to set up a functioning firewall from scratch. Also when your budget it makes it a lot simpler to identify TCO. Also, annual maintenance is a single price for both license and hardware.

Alternatives Considered

SonicWall TZ, SonicWall VPN Clients and SonicWall Web Application Firewall

All around appliance with attractive cost and maintenance expense. Easy setup for simple or simpler networks with limited sites and remote users. Complex network configuration could be challenging.

Key Insights

Do you think WatchGuard Network Security delivers good value for the price?

Yes

Are you happy with WatchGuard Network Security's feature set?

Yes

Did WatchGuard Network Security live up to sales and marketing promises?

Yes

Did implementation of WatchGuard Network Security go as expected?

Yes

Would you buy WatchGuard Network Security again?

Yes

Likelihood to Recommend

Companies with less than 200 nodes looking for simple yet reliable gateway security can use the WatchGuard firewall device. It will cost less and take less time to deploy. Small companies who want to introduce firewalls to the organization the first time or replace aging ones will find WatchGuard devices very attractive. For bigger installations [that] may require multiple networks to be connected together, I found it a little challenging to maintain multiple connections through multiple networks.

WatchGuard Firewall Appliance - Simple Solution for SMB

Overall Satisfaction with WatchGuard Network Security