Install the Client Software Remotely (Windows computers)

Applies To: WatchGuard EPDR, WatchGuard EDR, WatchGuard EPP

WatchGuard Endpoint Security includes tools to find unmanaged computers and devices on the network and to open a remote installation session from the web UI.

The Unmanaged Computers Discovered list shows computers discovered on the network that do not have WatchGuard Endpoint Security installed, as well as computers where the endpoint security product does not work properly. Use the Unmanaged Computers Discovered list to identify which computers you need to install the client software on. For more information, see Unmanaged Computers Discovered List .

An unprotected computer has installed the WatchGuard client agent and WatchGuard Endpoint Security, but is not protected due to an error or outdated protection. For more information, see Reinstall WatchGuard Client Software Remotely (Windows computers).

Install the Client Agent Remotely on Unmanaged Computers

After you identify computers and servers that are unmanaged, you can remotely install WatchGuard Endpoint Security client agent and software on computers and servers that meet these requirements:

  • UDP ports 21226 and 137 must be accessible
  • TCP port 445 must be accessible
  • NetBIOS over TCP must be enabled
  • DNS queries must be allowed
  • Access to the Admin$ administrative share must be allowed. You must explicitly enable this feature on Windows Home editions.
  • You must have domain administrator credentials or credentials for the local administrator account created by default when the operating system was installed.
  • Windows Remote Management must be enabled.
    • In Control Panel > Network and Sharing Center > Advanced Sharing Settings, select Turn on network discovery and Turn on file and printer sharing.

To remotely install the WatchGuard client agent on one or more unmanaged computers:

  1. From the top navigation bar, select Status.
  2. From the left pane, select the Security dashboard.
  3. In the Protection Status tile, click the xx computers have been discovered that are not being managed link.

 Screen shot of WatchGuard Endpoint Security, Protection Status tile

  1. In the upper-right of the table, select Discovered or Hidden, based on the status of the relevant computers.

 Screen shot of WatchGuard Endpoint Security, Unmanaged Computers Discovered list

  1. Select the computer you want to install the client software on.
  2. Next to the computer, click the options menu and select Install WatchGuard Agent.
    To install the client software on multiple computers simultaneously, select check boxes to the left of each computer, then select Install WatchGuard Agent.
  3. Select the group to add computers to and select the network settings.
    For more information, see Download the WatchGuard Client Agent Installer.

 Screen shot of WatchGuard Endpoint Security, Install WatchGuard Agent dialog box

  1. Enter one or multiple installation credentials.
    Use the local administrator credentials for the target computer(s) or domain administrator credentials.
  2. Click Install.

To remotely install the WatchGuard client agent from the Computer details window:

  1. Select a discovered computer.
    The Computer details window opens.

 Screen shot of WatchGuard Endpoint Security, Install WatchGuard agent error

  1. Click Install WatchGuard Agent.
  2. Select the group to add computers to and select the network settings.
    For more information, see Download the WatchGuard Client Agent Installer.

 Screen shot of WatchGuard Endpoint Security, Add computers to group

  1. Enter one or multiple installation credentials.
    Use the local administrator credentials for the target computer(s) or domain administrator credentials.
  2. Click Install.

See Also

Installation Requirements

Designate a Discovery Computer

Hide Computers from Installation

Download the WatchGuard Client Agent Installer