Download the WatchGuard Endpoint Agent Installer

Applies To: WatchGuard EPDR, WatchGuard EDR, WatchGuard EPP

The WatchGuard endpoint agent handles communication between managed computers on the same network and the WatchGuard server. The endpoint agent is installed on each endpoint device or computer. It has low CPU, memory, and bandwidth usage and uses less than 2 MB of data each day.

To install the client software locally, you download the endpoint agent installer and run the installation wizard on the computer or device. The endpoint agent installs the endpoint security product. There is a single endpoint agent for WatchGuard EPDR, WatchGuard EDR, and WatchGuard EPP.

You can also create a download link for the installer and send the link to computers and devices on the network. For more information, see Create a Download Link.

For information on how to run the installation wizard on different platforms, see Install the Client Software Locally.

Prior to downloading the installer, you select a group. Any computers or devices that you use the installer on are automatically added to the group you select. The security policies assigned to a computer or device depend on the group it belongs to.

For more information about the different types of groups, see Group Computers and Devices.

Download the Endpoint Agent Installer

To download the installer, from the WatchGuard Endpoint Security web UI:

  1. From the top navigation bar, select Computers.
  2. Click Add Computers.

 Screen shot of WatchGuard Endpoint Security, Add Computers installation window

  1. Select the platform you want to download the installer for (Windows, Linux, Android, or macOS).
    The Windows version includes the installer for x86 and ARM computers.

 Screen shot of WatchGuard Endpoint Security, Add Computers, Windows

 Screen shot of WatchGuard Endpoint Security, Add Computers, macOS

  1. Select the group you want to add the computer to.
    The security policies assigned to a computer depend on the group it belongs to.
    • To add the computer to a group created in the WatchGuard Endpoint Security web UI, select Add Computers to this Group. From the drop-down list, select a folder.
    • To add the computer to an Active Directory group, select Add Computers to their Active Directory Path. Select the network proxy to apply to the computers.
      If the Active Directory administrator moves a computer from one organizational unit to another, the change is reflected in the WatchGuard Endpoint Security web UI as a group change. The security policies assigned to the computer might also change.
  2. For more information about the different types of groups, see Group Computers and Devices.

    • To add the computer to a group based on IP addresses, select Select the Group Based on the Computer's IP. Select an IP-based group from the drop-down list.
      For more information, see Integrate Computers by IP Address.
  1. To specify the network settings to apply to the computer, click Default Settings.
    For more information on how to configure network settings, see Configure Network Settings.
    • If the computer will be added to a group created in the WatchGuard Endpoint Security web UI, it automatically inherits default settings from the folder it is in.
    • To integrate the computer into an Active Directory group, select network settings from the drop-down list that appears.

For information on how to assign settings to computers, see Assign a Settings Profile.

  1. To specify an expiration date for the Windows installer, click in the box and select a date from the calendar.
    After the expiration date, if users try to start the installer, a message informs them that the installer is expired, and they should download a new one or contact their administrator.
  2. Click Download Installer.
    The installer downloads.
  3. To start the installation, double-click the downloaded installer file.
    For more information, see Install the Client Software Locally.

Integrate Computers by IP Address

When you create a computer group in the web UI, you can specify IP addresses and IP address ranges to determine which computers are added to the group. For more information, see Manage Groups.

 Screen shot of WatchGuard Endpoint Security, add Windows computers based on IP

If you select Select the Group Based on the Computer's IP, WatchGuard Endpoint Security searches all IPs associated with the group and child groups you select.

  • If a single IP address is found, the computer moves to the relevant group.
  • If multiple IP groups match the computer IP address, the group that is deepest in the tree is selected. If there are multiple groups at the same level with IP addresses that match the computer IP address, the last one is selected.
  • If no matches are found, the computer moves to the selected group. If the selected group does not exist when the computer is integrated, it moves to the All group.

After WatchGuard Endpoint Security places a computer in a group, if you change the IP address for the computer, the computer does not automatically move to another group. If you change the IP addresses assigned to a group, the computers in the group are not automatically reorganized.

Create a Download Link

With the Send URL by Email option, you create a download link and send it to users. Users click the link to download the installer to their computers.

To create a download link:

  1. From the top navigation bar, select Computers.
  2. Click Add Computers.
  3. Select the platform you want to create a download link for (Windows, Linux, Android, or macOS).
    The Windows link includes installers for x86 and ARM processors.
  4. Select the group you want to add the computer to.
    The security policies assigned to a computer depend on the group it belongs to.

 Screen shot of WatchGuard Endpoint Security, Send URL by Email

  1. To specify an expiration date for the Windows installer, click in the box and select a date from the calendar.
    After the expiration date, if users try to start the installer, a message informs them that the installer is expired, and they should download a new one or contact their administrator.
  2. Click Send URL by Email.
    Your email application opens a new email with the link. Send the email to users in the selected group. When a user clicks the link, the installer downloads.
  3. To start the installation, the user double-clicks the downloaded installer file.
    For more information, see Install the Client Software Locally.

See Also

Install the Client Software Locally

Installation Requirements