WatchGuard Firebox Reviews

The main use cases for the WatchGuard Firebox are to protect our customers' network, VPN connection or IPsec, or SSL VPN, as by default, it's a protection of the network and the users, and servers.

WatchGuard Firebox technical support is very easy for us to contact, and we also have presales engineers such as Jeremy Schramm, who is French and provides excellent technical help; he visits our office one day a month to assist us in trying some solutions.I utilize AI within the WatchGuard Firebox, as we use the interconnection with threat syncs, and AI is implemented; we try to sell our customers XDR or IDR, so there is AI in the product.I have a good impression of the efficiency for threat detection provided by the WatchGuard Firebox, as we have cybersecurity teams and sell security about the product, so we think it is a good product to protect our clients.

I'm using it in the banking sector only. Basically, I'm using it for security and other purposes, including data loss prevention. Security is the main purpose in banks.

Nowadays, we are using small models for SD WAN also, depending on security purposes. Basically, we have received a good return on investment.

I actually use the host ransomware prevention feature of WatchGuard Threat Detection and Response, and we haven't had issues with that. This is currently maintained by our partner in the WatchGuard management. We are a town hall, but there is an enterprise provider that is currently managing all the WatchGuard Threat Detection and Response installation.

I am not familiar with the automated remediation tools in WatchGuard Threat Detection and Response and how they help in reducing manual intervention because this is managed by our provider.

I have not yet utilized the cloud sandboxing feature in WatchGuard Threat Detection and Response.

The centralized visibility and control of endpoints in WatchGuard Threat Detection and Response helps coordinate cybersecurity, but this is managed by another tool that is installed in our PCs. It is installed and configured, but we don't use it because the main feature is with the EDR. It is configured but not used as a model per se.

The basic functionality is fantastic. It has been performing well. I generated a report on one machine, using that as the deployment machine. When scanning the network, it discovered machines on the network and deployed the same endpoint protection from that one machine I have on my network. 

I can see all of that from any cloud solution. So far, it has been really easy to install, deploy, and have visibility on the endpoints that I manage.

I'm just looking for a few extra features, which are likely included in XDR and the other additional software services. Mainly the FortiEDR system. If I go through the computer status and look at the risk, it's a very basic assessment. 

Compared to Rapid7, which is a highly rated vulnerability scanner,  WatchGuard is more limited. Rapid7 can give me vulnerabilities like autorun being enabled and provide solutions to fix them. It can also reassess vulnerabilities. 

However, the EDR Core I'm using only gives me basic information, like "File full of fire and execution detection" as a high vulnerability. It doesn't tell me how to fix it, just that it's a risk. It's very minimal in terms of risk assessment. Rapid7 would say, "This software is outdated," or "You're using an older version of SQL." It's much more detailed, whereas EDR Core is more scaled-down and doesn't provide a full assessment.

So, I'd like a few extra features, especially around threat severity assessment.

We use the solution to ensure that no data breach, such as credit card details and national insurance numbers, leaves the company. However, we have to allow some information to go through because we send a lot of information to the National Healthcare Service.

If we don't want specific data sent out, the tool will stop that data based on the policy we have allocated to it. It has reduced the risks of sending data where it shouldn't be. I haven't faced any issues with the tool's integration capabilities. 

I use the solution in my company mainly for security management and also for VPN.

The most valuable feature of the solution is its ease of use. For budgetary purposes, it meets our requirements.

The solution is used when you want to handle policies with the file. There are different ways you can use it, like in the firewall rules and in proxy rules, and to secure emails. The tool was used very much when there were emails with other set files, and then it would all be checked in the firewall.

It is a basic tool tool, and it does very well for what it is supposed to do. It does simple checks against signatures. I think it is very much what it needs to be, and it is a basic tool that you just use.

There were a little bit of problems with the tool's updates, making it an area where improvements are needed. Sometimes, the firewalls did not get updated in the databases.

The WatchGuard Firebox is excellent for ensuring the security of remote workers, making it ideal for organizations with distributed teams or remote workforce setups.

It manages network traffic, serving as a fundamental component of the firewall.

WatchGuard excels in reporting and monitoring capabilities, offering comprehensive options for filtering and querying data. Their centralized console simplifies management for organizations with multiple Fireboxes. Instead of logging into each firewall individually, administrators can access and monitor their entire firewall infrastructure from a single IP address.

Certain features stand out as particularly effective for threat prevention, such as XDR (Extended Detection and Response) and MDR (Managed Detection and Response). These functionalities, although not inherent to Firebox, can be integrated seamlessly for existing WatchGuard customers. This integration offers significant benefits, as it streamlines security processes and eliminates redundancy that often occurs when using multiple security tools from different vendors.