Firebox Cloud License Options
Bring Your Own License (BYOL)
With this license option, you pay Microsoft or Amazon for the virtual machine instance and resources it uses. You then purchase a license for Firebox Cloud separately from an authorized WatchGuard reseller. For Firebox Cloud with a BYOL license, you must activate a license key for Firebox Cloud on the WatchGuard website. Then, add the feature key to your Firebox Cloud instance, which enables you to configure all the licensed features. This feature key is unique to that instance and has an expiration date. You can purchase a renewal from an authorized WatchGuard reseller.
After you activate the BYOL license, you can add the Firebox Cloud instance to your WatchGuard Cloud account.
For more information, see Get Started — Add a Device to WatchGuard Cloud.
For information about how you can manage your Firebox Cloud instance as a cloud-managed device in WatchGuard Cloud, see Add Firebox Cloud to WatchGuard Cloud (Cloud-Managed).
For information about feature keys, see About Feature Keys.
The feature key is valid only for the instance ID you specify when you activate the license. If you want to move your Firebox Cloud license to a different instance of Firebox Cloud, you must contact WatchGuard customer care to help you activate the license for a different instance ID.
You can purchase a Firebox Cloud for one of four models. The models are based on the maximum number of CPUs that Firebox Cloud uses. The maximum throughput of Firebox Cloud depends on both the Firebox Cloud model, and the VM size.
For Firebox Cloud with a BYOL, the model determines the maximum supported throughput rates.
|Firebox Cloud Model||Maximum AWS vCPUs or Azure CPU Cores||VPN (Gbps)|
If you deploy Firebox Cloud on a virtual machine with more CPUs than the Firebox Cloud model supports, Firebox Cloud uses only the supported maximum number of CPUs.
For details about the BYOL option for AWS, see WatchGuard Firebox Cloud (BYOL). Cost can vary based on resources used, and by region.
Hourly / Pay As You Go (PAYG)
Both the Azure Firebox Cloud and AWS (PAYG) option includes a 30 day free trial. For the 30 day trial period, there are no hourly software charges but Azure and AWS infrastructure charges still apply. After the 30 day trial expires, the instance converts to a paid subscription.
For details about the PAYG option and associated costs for Azure, see WatchGuard Subscription Costs for Azure PAYG.
For details about the Hourly AWS option and associated costs, see WatchGuard Firebox Cloud (Hourly).
To switch a Firebox Cloud instance from one license type to another, you must deploy a new instance and move the configuration to the new instance. For information about how to move a Firebox configuration, see Move a Configuration to a New Firebox.
Licensed Security Services
Firebox Cloud supports these WatchGuard security services:
- Access Portal (requires Fireware v12.1 or higher)
- Application Control
- APT Blocker
- Botnet Detection
- Data Loss Prevention
- DNSWatch (supported with a BYOL license only)
- Gateway AntiVirus / Intelligent AntiVirus
- Intrusion Prevention Service (IPS)
- Reputation Enabled Defense
- spamBlocker and Quarantine Server (requires Fireware v12.2 or higher)
- Threat Detection and Response (TDR Host Sensor licenses included with a BYOL license only)
- WatchGuard Cloud Visibility (supported with a BYOL license only)
Firebox Cloud with an Hourly / Pay As You Go license does not support WatchGuard Cloud or DNSWatch, and does not include TDR Host Sensor licenses.