Security Portal

Welcome to the WatchGuard Security Portal where you can look up information about the latest applications, threats, and sites that are covered by your WatchGuard security appliances.


Find out more about the 1800+ applications included in the product by default.



Find detailed information about the vulnerabilities and threats covered by our IPS signatures.



Search the Websense database to see how URLs are categorized. (Websense Cloud is the default option for devices running Fireware XTM 11.7 and later.)

Websense Cloud (WatchGuard login required.)


Search the SurfControl database to see how URLs are categorized. (SurfControl is the only option available for Firebox and XTM devices running Fireware XTM 11.6.x or earlier.)



Knowledge Base:

Websense Best Practices

Confirm that your firewall is correctly configured for the Websense cloud service, including tips and tricks for troubleshooting

Data Loss Prevention (DLP)

Find detailed information about current DLP rules for WatchGuard XTM products.

DLP Rules

Knowledge Base:

How to Test DLP


Knowledge Base:

Submitting Samples for spamBlocker

How to contact WatchGuard with samples of missed spam or legitimate emails that were falsely identified as spam.

Gateway AntiVirus

Knowledge Base:

How to Report Gateway AntiVirus False Positives and False Negatives

Procedure to follow if you suspect a virus has been missed or incorrectly identified

Gateway AntiVirus Signature Set Sizes

Find out which models and software versions have the standard, extended, and enterprise AV sets

Use the EICAR Test File to Test Gateway AV

Simple technique to confirm that AV is configured correctly on your appliance

Reputation Enabled Defense

Has your domain been compromised? Check the behavior score for IP addresses and domains.

WatchGuard’s Reputation Lookup Service

Security Center

WatchGuard’s Blog provides breaking information about new threats and software vulnerabilities. Subscribe via email or RSS feed to get daily video updates and general security news.

View WatchGuard's Blog

Got False Positives?

From time to time, IPS signatures may mistakenly identify legitimate network traffic as suspicious and trigger an alert. When this occurs you can add the IPS signature id to the exclusions list to bypass checking that specific signature. You can open a support case, or quickly report these issues here to WatchGuard so that we can address the issue and continue to improve our signature database.

Report a False Positive Now



About WatchGuard

WatchGuard has deployed nearly a million integrated, multi-function threat management appliances worldwide. Our signature red boxes are architected to be the industry's smartest, fastest, and meanest security devices with every scanning engine running at full throttle. Why buy WatchGuard? Find out here.



  • Global Headquarters
    505 Fifth Avenue South, Suite 500
    Seattle, WA 98104, United States
  • Phone
    1.800.734.9905 US & Canada