WatchGuard Firebox Reviews

The basic functionality is fantastic. It has been performing well. I generated a report on one machine, using that as the deployment machine. When scanning the network, it discovered machines on the network and deployed the same endpoint protection from that one machine I have on my network. 

I can see all of that from any cloud solution. So far, it has been really easy to install, deploy, and have visibility on the endpoints that I manage.

I'm just looking for a few extra features, which are likely included in XDR and the other additional software services. Mainly the FortiEDR system. If I go through the computer status and look at the risk, it's a very basic assessment. 

Compared to Rapid7, which is a highly rated vulnerability scanner,  WatchGuard is more limited. Rapid7 can give me vulnerabilities like autorun being enabled and provide solutions to fix them. It can also reassess vulnerabilities. 

However, the EDR Core I'm using only gives me basic information, like "File full of fire and execution detection" as a high vulnerability. It doesn't tell me how to fix it, just that it's a risk. It's very minimal in terms of risk assessment. Rapid7 would say, "This software is outdated," or "You're using an older version of SQL." It's much more detailed, whereas EDR Core is more scaled-down and doesn't provide a full assessment.

So, I'd like a few extra features, especially around threat severity assessment.

I have actually been using this for the past two weeks because I'm using it in a test environment before I deploy it into anything. 

I want to make sure that the features they are providing are what my client really wants. Regarding compliance, it really receives no complaints. 

So, with the EDR tool, which is what I currently use, I have deployed it in my business. I checked if it could gather my asset information, software information and scan my machines for any malware. So, that basic functionality is fantastic. 

It has been stable so far. I haven't noticed any performance impact on my machines. My only complaint is that I can't schedule scans. I can only see live monitoring of micro activity. I'd like to schedule scans at specific times, but maybe that feature is only available in higher subscription tiers.

I've only been using it for two weeks. I would like to see more features, especially with the addition of xDR or Endpoint Detection and Response Pro (EDR Pro). 

I'm still exploring what's available in my current plan. Once I understand everything better, I'll reach out to WatchGuard if I need additional features or clarification. 

However,  I requested a full cybersecurity overview from their sales department to explore all their solutions, including network asset management, penetration testing, etc. They'll recommend different subscription tiers based on my needs.

Fortinet is the main competitor, especially when considering firewall and firewall configuration. Microsoft Defender for Endpoint (MDE) is also in the mix, as some of our clients use it. These are competitors for a comprehensive security offering, not just antivirus. 

Other competitors who offer similar features like asset management would be Trellix, SentinelOne (formerly McAfee), Microsoft Azure Sentinel, and Palo Alto Networks Cortex XDR.

In my experience, WatchGuard shines in deployment simplicity, especially for firewalls and firewall configuration. The renewal process is also easier, and their documentation, support library, and overall support experience are excellent.

The initial setup was easy. It took ten minutes. I read the instructions. I downloaded the software and installed it on my machine in a minute, and it automatically showed up in the cloud console. 

It even identified other machines on the network and asked if I wanted to deploy protection to them. All I had to do was provide admin credentials and let it run. Within half an hour, all the protected machines were visible in the cloud console, including my servers and workstations. 

I would rate my experience with the initial setup a ten out of ten, where one is difficult, and ten is easy. One of the easiest EDR deployments I've ever done.

Some parts are deployed from the cloud. I have my cloud account, but I downloaded the client software that I executed on individual machines. So, it's hybrid, but the core Threat platform is in the cloud. I just installed the client on each machine. So, it's primarily a cloud solution.

I did it all myself. 

The pricing is acceptable and competitive. WatchGuard's pricing is in a range where they can compete effectively with other vendors. WatchGuard offers similar features for a comparable price, making them a good option for small businesses like ours. 

We mainly support small businesses with 1 to 5 users, or maybe up to 50 users at most. That's why we chose WatchGuard. It's cost-effective for small office, home office (SOHO) environments.

It is very easy to use.  It's designed for anyone, even non-technical folks like myself. Anyone could pick it up. It's like "IT for Dummies" - read it, and boom, you're a WatchGuard specialist! But, knowing deployment requirements helps, but WatchGuard makes it user-friendly.

Overall, I would rate the solution a nine out of ten. 

I use the solution in my company mainly for security management and also for VPN.

The most valuable feature of the solution is its ease of use. For budgetary purposes, it meets our requirements.

For most of the part, the tool's interface is quite simple. The product can improve in terms of layout to provide easier access and viewing to users, especially for the reports.

One of the things that I think is missing in the tool is the area of managing IPv4 traffic via the IPv6 tunnel. If a few features were added to the tool, it would be great for migrating our network from IPv4 to IPv6.

I have been using WatchGuard Firebox for three years.

Considering we have even used the tool in our company for the past three years, we don't see much problem with the devices, except with what we call the updating and patching processes, which require some downplay and everything. I think we are quite satisfied with the tool's performance in our company.

I do believe the solution provides devices with a profile for a much higher requirement, but it all depends on the number of users and everything. Currently, my company is not that big, but we are supported by good vendors. I do believe the tool is scalable in terms of the devices because the product does provide a much higher model, but we don't need it because we are quite a small company.

In my company, we have only around 200 users, so we don't have many staff members.

My company contacted the solution's technical support regarding the services, especially when we had some new requirements in terms of configurations and settings or when there were new protocol rules and policies and policies that needed to be implemented. I rate the support an eight out of ten.

Positive

Previously, we used Sangfor, which is a brand from China, for our firewall and internet access management, but we switched to WatchGuard Firebox three years ago. One of the biggest reasons to use WatchGuard Firebox was related to the area of expertise. Our team or staff had experienced some lack of knowledge in Sangfor. After my company figured out which product was easy to learn and after making some comparisons, we decided to go for WatchGuard Firebox.

Compared to Sangfor, I think one of the advantages of WatchGuard Fire is the VPN solution, which includes a certain number of licenses in the package. There is no requirement to purchase more VPN licenses. The con is that Firebox is a part of the existing solution provided by WatchGuard.

When it comes to the product's initial setup phase, our vendors support us, so they handle the setup process. We don't have many issues or problems during procurement or setting up all the configurations for WatchGuard Firebox.

The solution is deployed on the hybrid cloud model.

Last time, we got the tool ready within three days. After we provided all the information that the vendors required regarding the setup and configuration settings that we needed, they set it up within three days. A third party also provides the tool's maintenance services.

From the budgetary perspective, I believe the proposed price for WatchGuard Firebox was certainly much better than the other model that had been promoted to us before because the concerned department in our company procured the tool. I don't have any specific information on it.

I am not sure about the tool's price as the commercial part is under a different department. I think the tool is quite competitive compared to the other brands.

The tool's most effective for managing threats revolves around the area of the reporting services it offers, which is cloud-based reporting, so we can get a lot of information from the services.

I don't have much experience with other models, so I can't speak about WatchGuard Firebox's security. The good thing is that because it is easier to handle, and the company that supports us provides us with a lot of information, it is easier for us to operate the product.

WatchGuard Firebox VPN features significantly enhance operations, making it easier during COVID-19, when many people work from home. There are very good features, I recall, whereby you can access office resources without requiring employees to come to the office. The tool did help us a lot during COVID-19.

Our company has a data leakage prevention solution for our email. It is quite intuitive, but it's not WatchGuard Firebox.

Whether I would recommend the product or not is something that depends since I work in a small company where the income is not too much. Other companies of similar sizes might find some similarities with our organization, so I can recommend WatchGuard Firebox to such users or businesses. Bigger or corporate users who have much more requirement settings or a large number of users should look for a different brand that can support the large numbers.

I rate the overall tool an eight out of ten.

WatchGuard Threat Detection and Response is used to monitor traffic and give alarms to the administration if something goes wrong. It reacts when services protected by it are attacked and sends notifications that something is amiss.

There is a significant improvement in the security of our organization. It's challenging to quantify the cost savings precisely, but it prevents potential breaches and protects our intellectual property. If a breach occurs, it could be catastrophic and very costly.

The most valuable features include the ability to raise alarms when there are issues, easier configuration compared to other vendors, centralized update management, and keeping the product updated efficiently.

The pricing of WatchGuard Threat Detection and Response could be improved. It's not the cheapest option available. That said, it often meets our needs effectively. There are areas for improvement in making the product more economical. 

In the future, I would like to see enhancements in eliminating threats more intuitively, allowing easier identification of issues.

I have been working with WatchGuard Threat Detection and Response for about five years.

In terms of stability, there have been no major issues after upgrades. I would rate the stability of the solution an eight out of ten. There were no significant problems related to this part of the solution.

WatchGuard Threat Detection and Response is quite scalable. It is designed to handle expansion and increase in usage efficiently. I would rate its scalability an eight out of ten.

The customer service and support from WatchGuard are excellent. In Finland, the technical support team has always provided outstanding service whenever required. I would rate the technical support team ten out of ten.

Positive

The initial setup involves configuring many elements, which can be a bit challenging. However, with detailed knowledge and preparation, the setup process can be completed in a day or two.

Usually, WatchGuard's sales team in Finland includes a great technical team. I often turned to them if there was something I could not resolve right away. They provided really good support.

It's challenging to put a monetary value on the return of investment for this product as it primarily enhances security. Its effectiveness in preventing breaches significantly impacts overall cost savings.

WatchGuard Threat Detection and Response is not the cheapest solution. It usually falls in the middle of the price spectrum. However, considering the overall picture, including support and ease of use, it can be more economical in the long run.

There are alternative solutions available, but if you are using WatchGuard firewalls, it is quite easy to use this product too.

In selecting security solutions, it's essential to consider the overall support and long-term ease of use. WatchGuard products, including firewalls, tend to be easier to configure and use compared to some cheaper alternatives.

I'd rate the solution eight out of ten.

The WatchGuard Firebox is excellent for ensuring the security of remote workers, making it ideal for organizations with distributed teams or remote workforce setups.

It manages network traffic, serving as a fundamental component of the firewall.

WatchGuard excels in reporting and monitoring capabilities, offering comprehensive options for filtering and querying data. Their centralized console simplifies management for organizations with multiple Fireboxes. Instead of logging into each firewall individually, administrators can access and monitor their entire firewall infrastructure from a single IP address.

Certain features stand out as particularly effective for threat prevention, such as XDR (Extended Detection and Response) and MDR (Managed Detection and Response). These functionalities, although not inherent to Firebox, can be integrated seamlessly for existing WatchGuard customers. This integration offers significant benefits, as it streamlines security processes and eliminates redundancy that often occurs when using multiple security tools from different vendors.

The distribution and channel strategy, particularly in regions like Pakistan and Afghanistan, may hinder their visibility and adoption. Due to their lack of investment in marketing, channel development, and certifications, WatchGuard faces challenges in gaining visibility and market share, especially in regions like Pakistan. Unlike competitors such as Cisco and Fortinet, who offer extensive training and certifications for their partners, WatchGuard's limited focus in this area hinders their ability to attract technical talent and expand their customer base. To address this issue and improve its presence in the market, WatchGuard could consider offering free or low-cost certification programs to educate potential partners and customers on their technology. By empowering individuals with the necessary skills and knowledge, WatchGuard can create a network of brand ambassadors who can advocate for their solutions and drive adoption.

WatchGuard's offerings are invaluable and I believe they provide superior security solutions compared to Barracuda and Juniper. WatchGuard's products are versatile and suitable for a wide range of organizations from small to large, yet they may not be fully recognized in the enterprise sector due to messaging and marketing strategies that focus on small to medium-sized environments.

The initial setup is straightforward.

The product's simplicity and user-friendly interface require minimal assistance during configuration and deployment. Deployment time varies from customer to customer. For less complex use cases, the firewall can be deployed in just one day.

WatchGuard offers competitive pricing with attractive margins, benefiting both the company and its partners.

Overall, I would rate it eight out of ten.

We have all kinds of customers, including schools, colleges, institutes, and organizations. We do not work in a specific area, and we have a wide range of customers in various sectors.

The Firebox offers valuable features such as network security, URL filtering, UTM features, intrusion prevention and detection, and authentication. It also supports VPN, IPsec, and point-to-point communication. I did not encounter any problems after configuring threat detection and protection, intrusion prevention systems, and intrusion detection systems.

The only problem I have with Firebox is the grouping issue. When implementing a rule using a group of IPs, it is not possible to do that directly. I have to manually add all the IPs, and this is where I think WatchGuard should improve.

I have been using this solution since 2016.

The support system is similar to EPDR and EPP. They will register my case and either call me back, email me, or send me an article or key bulletin if things are sorted out. 

Otherwise, they will take a remote session to resolve the issue. They have a centralized portal where I can get support for EPP and EPDR.

Neutral

Setting up Firebox is not an easy task for everyone. To set up Firebox, one should have at least professional knowledge. Not everyone can do a Firebox setup because it is executed based on protocols. 

One cannot simply pick up Firebox and go through a basic configuration. For Firebox setup, having knowledge equivalent to Cisco CCNA associate level plus professional level is essential. 

Additionally, understanding basic routing and switching is necessary. Having knowledge of IPs and professional skills is crucial. Unlike Sophos, which is easy with a 'next' approach, configuring Firebox requires deep knowledge about protocols and how they work.

My only issue with Firebox is the grouping issue. I recommend Firebox since this device will not let anyone down. If someone drives a Volkswagen, they may find it challenging to switch to another car. It is the same with WatchGuard; once someone adopts this device, they will likely not buy another.  

I rate the overall solution a nine out of ten.

The primary use case of the Firebox mainly revolves around bandwidth management, unnecessary web blocking, application control, and protection against brute force attacks. It is also implemented for load balancing, SD-WAN, and branch-to-branch connectivity from one location to another. We also use it for securing access through VPN and enforcing network security policies.

The WatchGuard Firebox has helped in securing our network by implementing a strong firewall with various features like VPN support, gateway antivirus, and application control. It has aided in preventing brute force attacks and managing our bandwidth effectively.

Some of the most valuable features of the Firebox include web blocking, application control, protection against brute force attacks, load balancing, SD-WAN, and VPN support. These features help us manage and secure our network efficiently.

One area for improvement is the limitation in the product portfolio compared to competitors like Fortinet, which offers a broader portfolio including Authentication, VPNs, FortiMail, Sandbox, and Email Security. WatchGuard's focus on UTM solutions may not meet the needs of all enterprise customers.

We have been using the WatchGuard Firebox for approximately five years.

The stability of the WatchGuard Firebox can vary depending on the customer network environment. The performance and latency may differ from customer to customer and infrastructure to infrastructure.

The scalability of the Firebox depends on the specific model and the number of concurrent users it can support. Different models offer different VPN capacities and can be tailored to fit the needs of various sizes of organizations.

Customer service and support are not explicitly mentioned in terms of rating, but overall feedback seems positive.

Positive

I have previously used various solutions including CyberRooms, Sophos, Fortinet, SonicWall, and other competitors. We largely switched to WatchGuard to integrate their UTM solutions and later their acquired endpoint security portfolios.

The initial setup of the WatchGuard Firebox is straightforward and time-saving. It is designed to be user-friendly even for those with basic IT knowledge, making it easy to deploy and manage.

Implementation can be done by internal IT teams. WatchGuard also provides support for implementation, ensuring that the configurations are appropriately pushed as per the model and requirements.

WatchGuard offers cost-effective solutions, especially beneficial for economically-constrained customers. Pricing and discounts are deal-dependent and vary based on customer requirements.

We evaluated multiple products, including Fortinet, SonicWall, Sophos, CyberRooms, and various others in the market.

To maintain the efficacy of the Firebox, it is crucial to renew the subscription to get security updates and additional support features. Ensuring the subscription is up-to-date is necessary for ongoing product support.

We use the solution to ensure that no data breach, such as credit card details and national insurance numbers, leaves the company. However, we have to allow some information to go through because we send a lot of information to the National Healthcare Service.

If we don't want specific data sent out, the tool will stop that data based on the policy we have allocated to it. It has reduced the risks of sending data where it shouldn't be. I haven't faced any issues with the tool's integration capabilities. 

WatchGuard Data Loss Prevention needs to improve its support. 

I have been working with the product for eight to nine years. 

I haven't had any issues with the tool's stability, so I rate it a ten out of ten. 

I rate the product's scalability a ten out of ten. My company has 380 users who use it daily. 

The tool's support is responsive and very helpful. 

Positive

I chose the tool because it was easy to use and implement. I haven't faced any security breaches since implementing it. 

WatchGuard Data Loss Prevention's deployment is simple. You can complete the policies you want to run in a few hours. Once it's been set up, we only need to analyze it every now and then to ensure it's still functioning as intended.

WatchGuard Data Loss Prevention's pricing is expensive. I rate it a seven out of ten. 

I would recommend the solution to others. It's effective because it stops data from being sent out easily once set up. I rate the overall product a nine out of ten.

I have used WatchGuard Firebox for firewall testing purposes and setting up a couple of new projects for my company. I test the solution's efficiency in blocking IPs, role management and policy optimization. 

The product can be configured very easily. The license model of WatchGuard Firebox is also simple and transparent. A purchaser can effortlessly obtain the required features through the license system. 

WatchGuard Firebox offers a satisfying VM and hardware. The performance of the solution differs when it's deployed as a VM and a physical appliance. 

All basic firewall-based tasks, such as creating a policy or role, can be effortlessly implemented using WatchGuard Firebox. The user interface is simple and intuitive, allowing even a beginner to complete tasks without difficulty. 

It's very difficult to find a reseller of WatchGuard Firebox to purchase a license. The number of resellers for the solution should be increased through partnerships. The solution's network observability should be improved. The observance adaptability of different WatchGuard devices is minimal and it should be improved. The information or guidance provided by the vendor for using APIs, syslogs and exports should be enhanced. 

I have been using WatchGuard Firebox for eight years. 

I would rate the stability an eight out of ten. It's a fairly stable product. 

I would rate the scalability a seven out of ten. In our company, when we perform some load tests on one interface, there is a requirement for multiple packet drops at times, which the firewall might not be able to handle, and the other interfaces might go down as well.

There are some performance issues in WatchGuard Firebox when the load is high, but within limits the solution works perfectly. There are seven users of WatchGuard Firebox in our organization for the network administrator cycle. The solution is used daily in our company. There are no plans to increase the usage of the product any time soon in our organization as it is being used only for testing purposes. 

The solution has a seamless initial setup process. I would rate the initial setup a nine out of ten. All the deployment aspects of WatchGuard Firebox are straightforward, and all basic features are available, but for advanced features, many professionals might prefer other solutions over WatchGuard Firebox.

The deployment process of the solution took about an hour in our company, it was a step-by-step configuration process but there were some issues with the VM otherwise it would have taken much less time. One professional is enough to deploy WatchGuard Firebox. For maintenance of WatchGuard Firebox only one person is required and multiple professionals monitors the solution in rotational shifts. 

The solution was implemented completely in-house. 

I would rate the pricing as four out of ten. It's an affordable tool. The basic product license costs our company ₹400,000 per year. In our organization, we don't purchase any security add-ons with WatchGuard Firebox. 

I am part of the research and development team, so I parallelly use competitor solutions from vendors like Palo Alto, Sophos and Check Point. 

Our company professionals claim that WatchGuard Firebox is competent with other firewall solutions in the market. For security purposes, our organization mostly relies on proxy software and other application firewalls.

Our company is majorly concerned with the application firewall and not the network security; this is why we choose application firewalls like WatchGuard Firebox, which can be used both as a VM and physical appliance. In our organization, we use the solution not only for testing purposes but also for data centers. 

I would rate the product's performance and reliability for the remote workforce an eight out of ten. When I setup a data center and keep the solution as an entry point, then later on when I access it through a VPN, it will be flawless. It's very easy to configure a VPN using WatchGuard Firebox. The solution will showcase stability and easy accessibility even in remote functions.

For small and medium-scale networks, WatchGuard Firebox will be an ideal and cost-effective solution. I would rate the solution as eight out of ten. I would surely recommend the solution to others. 

I used WatchGuard Firebox for small configurations and to give Active Directory access to some users so they could bypass the firewall. I also used the solution as a VPN.

WatchGuard Firebox is easy to configure and has a nice user interface.

The solution's pricing could be improved.

I have been using WatchGuard Firebox for one year.

I rate the solution ten out of ten for stability.

Around five users are using the solution in our organization.

I rate WatchGuard Firebox a seven out of ten for scalability.

On a scale from one to ten, where one is difficult and ten is easy, I rate the solution's initial setup a six or seven out of ten.

The pricing depends on the quality of the product we are buying and the support. WatchGuard Firebox has good quality, but it is expensive.

On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven or eight out of ten.

The solution has some specific rules that detect multiple traffic from the same IP address. It will generate a report and send it to the administration's account email address so that we can analyze it and give the correct feedback for us to take action.

With the high competition in the market with AI, everything is done a lot faster, and all the companies are trying to lower the cost of their IT solutions. Companies that don't make the correct investments in their IT solutions face malware attacks and ransomware attacks. Every company needs security because any kind of disruption will be extremely costly for the company to get out of.

The solution's VPN capabilities have greatly improved our remote work security. It was very easy to configure and use. It was a bit tricky to configure on the remote computer, but everything was okay.

The solution's management interface eases the setup and ongoing maintenance of the solution. I did an update a couple of months ago, and it was very easy. I rate the solution's documentation a six out of ten.

I would recommend WatchGuard Firebox to other users because it's a well-known company that has been in the market for quite some time. It might have some vulnerabilities, like every other product in the market. Once the vulnerability is detected, it quickly makes patches for the system.

Overall, I rate the solution a nine out of ten.

We use WatchGuard Firebox for the site's firewall and VPN solution. The WatchGuard supports remote gateway and mobile VPNs. WatchGuard Firebox serves as the primary firewall for the site.

The solution has many security features. We have an intrusion provision system and filtering and block filtering. These features have been enabled, and we have created services around them.

WatchGuard has several limitations, particularly concerning throughput and performance, and management, firmware updates, and customer support need improvement. The level of support from WatchGuard is not as good as what we get from Cisco and other vendors. The response time is high even in times of priority issues. 

Moreover, the solution doesn’t have deep filtering. This limitation affects packet analysis, traffic analysis, and traffic monitoring, particularly regarding troubleshooting. On the other hand, Fortinet Firewall offers a deep level of troubleshooting and packet filtering. This allows us to obtain detailed information in scenarios like drops or disruptions to understand where the issue occurred, whether with the customer or on our end.

WatchGuard cannot perform packet captures for multiple IPs simultaneously, restricting us from achieving them individually. Due to these limitations, we are considering migrating to Fortinet.

I have been using this solution since 2018.

The solution is stable, as I have been using a couple of devices without any restart since 2018, and there has been no downtime for these devices.

I rate the solution’s stability a nine out of ten.

I rate the solution’s scalability a seven out of ten.

The level of support from WatchGuard is not as good as what we get from Cisco and other vendors. The response time is high even in times of priority issues. It doesn’t have deep filtering. This limitation affects packet analysis, traffic analysis, and traffic monitoring, particularly regarding troubleshooting. On the other hand, Fortinet Firewall offers a deep level of troubleshooting and packet filtering. This allows us to obtain detailed information in scenarios like drops or disruptions to understand where the issue occurred, whether with the customer or on our end.

Neutral

I would rate my experience with the initial setup around six on a scale of one to ten, one being hard and ten being easy.

WatchGuard is better when compared to other firewalls. It is affordable for a midsized company.

WatchGuard is affordable, with features for individual customers, end-users, and midsized companies. However, big businesses with growth and an increasing workload have to migrate.

I rate the solution’s pricing a four on a scale of ten, one being lowest and ten being highest.

We don’t know much about what's happening in the traffic pattern. We will have the opportunity to configure everything. We can use the firewall for dynamic routing and various other tasks. However, despite its capabilities and offerings, there are still some limitations. WatchGuard doesn’t offer deep-level packet filtering or in-depth packet analysis for companies with numerous applications. WatchGuard is a good solution if you require a comprehensive analysis of your organization’s activities within your budget.

Overall, I rate the solution a seven out of ten.