The WatchGuard Firebox has certain features, but the challenge is that we have some clients who don't have a network or are only mobile users, which leads us to think the future is in SASE products, not in the WatchGuard Firebox. The mobile coverage should be included with the WatchGuard Firebox, but in some cases, there is no WatchGuard Firebox because the client has no network or all users are in different locations.

I worked with a client with more than 70 branches connected to the hub for SD-WAN. The principal connection was with MPLS, but there was an IPsec VPN through this MPLS and another connection with an ISP connection.

We deploy WatchGuard Firebox with about 85% on-premises and 15% cloud firewalls.

In my environment, I have worked with WatchGuard Firebox primarily deployed in on-premises and hybrid setups. Typically, the physical Firebox appliances are installed on the premises at client offices or branch locations to manage perimeter security, VPN connectivity, and web filtering. I also use WatchGuard Cloud for centralized monitoring, reporting, and management across multiple clients, especially in MSP environments.

We have a food company with two branches. We have an M390 as a main firewall and an M390 high availability as the backup firewall, with two T80s in the branches. We have a VPN for the connections.

It is scalable, suitable for SMB offices, branch deployments, or even retail chains and distributed networks, but it is not much suitable for large enterprise networks.

For example, when configuring an off-site Firebox, such as a satellite office, you do not need to go right there; you just have to configure it on the premises of your office and then send WatchGuard Firebox to that off-site office. It is already configured there, and you just have to turn it on. This is a really simplified way of configuring things.

Daily, we have remote users with the main office in New York, and we have remote users in Arizona and in Caracas, Venezuela. We use WatchGuard Firebox to connect them through a site-to-site VPN connection.