Applies To: Endpoint Security Elite, Endpoint Security 360, Endpoint Security Prime, WatchGuard EDR, WatchGuard EDR Core, Endpoint Security Basic
When you purchase and activate an endpoint security subscription license, the license is automatically added to your WatchGuard Cloud account. You can add and manage endpoint usage in WatchGuard Cloud as usual, with no allocation limits.
After you activate an endpoint security subscription license:
- You can add any number of endpoints to your account and your managed accounts.
- Managed accounts can add any number of endpoints to their account. You can limit the maximum number of endpoints for each account you manage. For more information, go to Limit the Number of Endpoints for a Managed Account.
- Pages in WatchGuard Cloud that show the number of allocated endpoints update to show a count of term endpoints and a count of subscription endpoint usage.
- You can go to the Manage Products page in WatchGuard Support Center to view the subscription details and the endpoint count.
Activate a Subscription License on WatchGuard EDR Core
When you purchase and activate an endpoint security subscription license for Endpoint Security Prime, 360, or Elite, the existing EDR Core license with Total Security Suite automatically upgrades to the new product. If you have already allocated EDR Core to a tenant Service Provider or Subscriber account, EDR Core is upgraded to Endpoint Security Prime, 360, or Elite. If the subscription license expires, the endpoints retain the license. For information on the protection available with expired licenses, go to About Endpoint Security Licenses.
If there is an Endpoint Security Prime, 360, or Elite trial in progress in the account, the trial is canceled and replaced by the subscription. For more information on trials, go to Manage Trials – Service Providers.
Allocation Types
When Service Providers allocate endpoints from a license to their managed accounts, they select an allocation type which specifies how the managed account can use the endpoints.
Term Allocation
When you allocate endpoints as a term allocation, the managed account can allocate a specific number of endpoints to an account for a set duration or term from a term license or MSSP points.
Subscription Allocation
When you allocate endpoints as a subscription allocation, the managed account can allocate a specific number of endpoints or an unlimited number of endpoints. WatchGuard bills the account monthly based on the number of active endpoints.
Linked to License
When you allocate endpoints as Linked to License, the quantity and expiration date of the allocated endpoints are linked to the quantity and expiration date of your term license. Endpoint Security modules with the same license key are also allocated.
Mixed Allocation
To facilitate clear usage reporting down to tenant accounts, we no longer allow Partner accounts or Tier-1 Service Provider accounts to allocate endpoints as mixed. You can select a Term or Subscription allocation type only. Existing mixed allocations can still be used, but cannot be edited. Endpoints that were allocated as mixed show as subscription endpoints in the managed account. With the mixed allocation type, endpoints from the term license are used first, then when no endpoints remain in the term license, endpoints from the subscription license are used.
Subscription Billing
With a subscription license, you receive an invoice monthly. On the last day of each month, WatchGuard Cloud calculates the prorated subscription usage for each endpoint security product for the month from your account and your managed accounts and applies volume discounts. Volume discounts for subscriptions are determined based on your highest usage for any product line, regardless of license type.
For more information, go to:
- About Subscription Licenses in WatchGuard Cloud
- WatchGuard Product Order API (external link) in the API Documentation
Canceled Subscription
If you cancel a subscription, protection is immediately disabled on the affected devices. Computers and devices with a canceled subscription license:
- Are unprotected, with no antivirus, advanced protection, firewall, device control, and URL filtering.
- Cannot access the management UI.
- Do not receive signature file updates.
- Do not have scheduled tasks. All scheduled scans and patch tasks are disabled.
If you reactivate your subscription license within 90 days of cancellation, device protection is automatically re-enabled and updated on devices connected to the Internet (usually within 4 hours). After 90 days, if you reactivate the subscription license, you must reinstall the endpoint agent and then create and assign all settings.
About Endpoint Security Licenses