WatchGuard Network Security Implementation for Mid-Sized Businesses
April 15, 2024
WatchGuard Network Security Implementation for Mid-Sized Businesses
Score 9 out of 10
Vetted Review
Verified User
Modules Used
- WatchGuard AuthPoint
Overall Satisfaction with WatchGuard Network Security
We utilize these WatchGuard Network Security devices at each of our locations, with a redundant cluster at our primary location. The sites are connected using the branch office VPN system. Remote users have several VPN options. This has enabled us to provide vendors with limited network access and a VPN connection while providing our employees with full network access. We also implemented several of the security subscriptions including the Geolocation service which improved web-based attacks on our client computers.
- They are quick to provide solutions to zero-day exploits.
- They quickly replace warranted hardware.
- Technical support will continue to provide good service, even when there is not a fast solution.
- There have been occasions where a basic functionality such as having two DHCP servers was not supported and required a feature request to address the issue.
- There are somewhat limited routing functions in the devices that we use.
- The secondary units sold in a cluster cannot be repurposed as a stand-alone unit. This lowers the cost but limits any future uses.
- Our system was able to allow 100% remote access for our 150 users over IKE VPN during the onset of COVID.
- New device configuration is typically easy to implement using past configuration files as templates.
- The use of clustered firewalls significantly reduces downtime during maintenance operations.
We have worked with JSCM Group in ordering our WatchGuard Network Security devices and services. We have worked with them on the implementation of different services such as the WatchGuard MFA Logon app. They are always keeping us up to date on security risks, new products and services, as well as ensuring our licenses are taken care of and our devices are not out of service.
We are not fully integrated with the cloud service yet. However, it holds promise for us to be able to update single policies that can be applied to the dozen or more sites that we manage. This is particularly useful in the management of the Geolocation exception list. Being able to update a single entry will save us about an hour of time that it takes to update each system manually.
We introduced the WatchGuard logon app last year to our system, which is a cloud integrated service. This integration allows us to create logon polices for the app to use, based on Active Directory groups, and firewalls that have been added to the cloud. This does allow our on-call staff the ability to remediate lost tokens, most often phones lost to water damage, while not in the office.
The WatchGuard Network Security interface does not require command line configuration, which was not the case when I last used a Cisco ASA. The UI is very powerful and easy to use and from what we can tell has provided a similar level of security, with a lower level of complexity. Although I was skeptical of the WatchGuard systems having come from a Cisco background, I have been impressed with the capabilities that WatchGuard firewalls provide.
Do you think WatchGuard Network Security delivers good value for the price?
Yes
Are you happy with WatchGuard Network Security's feature set?
Yes
Did WatchGuard Network Security live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of WatchGuard Network Security go as expected?
Yes
Would you buy WatchGuard Network Security again?
Yes