Allocate Endpoints

When an endpoint security license is activated by a Service Provider, the available licenses (WatchGuard EPDR, EDR, or EPP) and endpoint allocation appear in the Inventory page in WatchGuard Cloud.

As a Service Provider, you can allocate endpoints to your own account or any account you manage from the Inventory page. When you select Overview from Account Manager, the Inventory > Summary page shows you a summary of the users and devices in your inventory. On the Overview > Inventory > Summary page, the Endpoints section shows this information:

  • Next License Expiration — Next endpoint security license expiration date
  • Unallocated Endpoints or Modules — Number of unallocated endpoints for an endpoint security product (WatchGuard EPDR, EDR, or EPP) or module (Advanced Reporting Tool, Data Control, Full Encryption, Patch Management, or SIEMFeeder)
  • Allocated Endpoints or Modules — Number of endpoints for an endpoint security product (WatchGuard EPDR, EDR, or EPP) or module (Advanced Reporting Tool, Data Control, Full Encryption, Patch Management, or SIEMFeeder) currently allocated to accounts

The Licenses page shows the endpoint security products and modules you have licenses for, the type of license (for example, subscription, term, or trial), license key, quantity, and expiration date.

To start trials for endpoint security products and modules, click Start a Trial above the table. For more information, see Start a Trial.

The Allocation page shows the next license expiration date, as well as, for each endpoint security product and module, the number of endpoints allocated to managed accounts and the number of unallocated endpoints in your account.

The Allocation page includes a table that shows your managed accounts. To filter the table, select Subscribers or Service Providers. You can also type in the Search box to search for a specific account or product.

Select an account in the table to allocate additional endpoints to that account or click Allocate Endpoints to select an account and allocate endpoints. You can allocate more than one endpoint security product or module to a Service Provider account. Accounts with a trial in progress show the product name with a Trial label.

When you allocate an term endpoint to an account, you specify an allocation expiration date. If you cancel a license or a license expires, there is a seven-day grace period before the protection is disabled on the endpoints. For more information, see About Endpoint Security Licenses.

Allocate Endpoints to an Account

Before you can allocate endpoints to an account, the Service Provider account must have activated licenses. For more information, see Activate an Endpoint Security License.

Service Providers can allocate endpoints as a term or subscription allocation.

Refer to the appropriate section:

Allocate Term Endpoints to an Account

To allocate term endpoints to an account:

  1. Log in to your Service Provider account.
    The Overview page for your Service Provider inventory opens.
  2. Select Inventory > Endpoint > Allocation.
  3. If the account does not have any endpoints allocated, click Allocate Endpoints.
    To update the number of existing endpoints for an account, in the table, select the Name of the account you want to update.


  1. From the Account Name drop-down list, select the account you want to allocate endpoints to.
  2. From the Product drop-down list, select the product you want to allocate to the account.
    The number of unallocated endpoints available in the license shows at the top of the page.
  3. In the Quantity text box, type the number of endpoints you want to allocate to the account.

Screen shot of Endpoint Allocation page with modules

  1. In the Modules section, select the check box for the modules you want to allocate to the account.
  2. In the Quantity text box, type the number of modules you want to allocate to the account.
    You cannot allocate more modules than the number of endpoints you have allocated from the license.
  3. By default, the expiration is set to Never. To specify an expiration date, select Custom.
    Select an expiration date of 1 month, 3 months, or a year. You can also select a date in the calendar.
  4. Click Save.

Allocate Subscription Endpoints to an Account

If you purchased a subscription contract through a distributor, you can allocate subscription endpoints to your accounts.

If you allocate an unlimited number of subscription endpoints to an account, your Service Provider account could become overallocated. If this happens, you cannot access the management UI and no new installations are permitted.

To allocate subscription endpoints to an account:

  1. Log in to your Service Provider account.
    The Overview page for your Service Provider inventory opens.
  2. Select Inventory > Endpoint > Allocation.
  3. If the account does not have any endpoints allocated, click Allocate Endpoints.
    To update the number of existing endpoints for an account, in the table, select the Name of the account you want to update.
  4. From the Account Name drop-down list, select the account you want to allocate endpoints to.

  5. From the Product drop-down list, select the product you want to allocate to the account.

  1. In the Usage-Based Billing section, select an allocation option:
    • Unlimited number of endpoints — Select this option to allow the account to add any number of endpoints to their account.
    • Limit the number of endpoints — Select this option to limit the maximum number of endpoints for an account.
  2. If you want to limit the number of endpoint licenses, in the Maximum Number of Endpoints text box, type the maximum number of endpoints you want to allocate to the account.
    This is the number of subscription endpoints you receive an invoice for.
  3. In the Modules section, select the check box for the modules you want to allocate to the account.
  4. In the Quantity text box, type the number of modules you want to allocate to the account.
    You cannot allocate more endpoints than the number of endpoints you have a license for.
  5. Click Save.

Deallocate Endpoints

When you deallocate endpoints, you remove endpoint protection from an account.

If your account becomes overallocated, you cannot access the management UI and no new installations are permitted. Tier-1 Service Provider accounts can become overallocated when an account they manage allocates more endpoints than there are available in the license. Access to all accounts in the management UI is disabled. You can review Subscriber dashboards and audit logs to identify accounts that are over their limit. When an account is overallocated, we recommend that you reduce the number of allocated endpoints (deallocate), or increase the number of endpoints in the endpoint security license.

If you deallocate a license, there is a seven-day grace period before the protection is disabled on the endpoints. For more information, see About Endpoint Security Licenses.

To deallocate an endpoint:

  1. In the table, next to the account you want to deallocate endpoints from, click and select Deallocate License.

  1. In the confirmation dialog box, click Deallocate.
    If there are no licenses, the account displays an Unlicensed label. You cannot access the endpoint security product.

You can also deallocate endpoints on the Allocation page. Set the quantity of licenses to 0 and click Save.

Related Topics

About Endpoint Security Licenses

About Endpoint Security Subscription Licenses

WatchGuard Endpoint Security Modules