About Endpoint Security Subscription Licenses

When you purchase and activate an endpoint security subscription license (WatchGuard Advanced EPDR, EPDR, EDR, or EPP), the license is automatically added to your WatchGuard Cloud account. You can add and manage endpoint usage in WatchGuard Cloud as usual, with no allocation limits.

After you activate an endpoint security subscription license:

You can add any number of endpoints to your account and your managed accounts.
Managed accounts can add any number of endpoints to their account. You can limit the maximum number of endpoints for each account you manage. For more information, go to Limit the Number of Endpoints for a Managed Account.
Pages in WatchGuard Cloud that show the number of allocated endpoints update to show a count of term endpoints and a count of subscription endpoint usage.
You can go to the Manage Products page in WatchGuard Support Center to view the subscription details and the endpoint count.

Subscription and Term Licenses

You can have both a term license and a subscription license. Endpoints from term licenses (including Passport) are always used first because they are prepaid.

Product and module licenses must be both subscription licenses or term licenses. You cannot allocate term module licenses when you have a product subscription license.

Subscription usage accounts for your activated term endpoints that have not expired. So, if you have 100 endpoints and an endpoint security product term license for 60 endpoints, then you would receive an invoice for 40 subscription endpoints (100 endpoints – 60 term endpoints).

When you renew or upgrade a term license, your subscription usage count reduces automatically so that you are billed for only the subscription endpoints in excess of your term license. For example, if you have 100 endpoints and you upgrade your existing term license from 60 to 80 endpoints, your subscription license count after you upgrade is 20 endpoints (100 endpoints – 80 term endpoints).

For accounts with an active subscription license, term licenses that expire do not cause overallocation. When a term license expires, any endpoints in excess of your term license are billed as subscription endpoints. Your subscription license usage count automatically increases.

If you cancel a subscription and allocated endpoints exceed your available term license, your account becomes overallocated.

Activate a Subscription License on WatchGuard EDR Core

When you purchase and activate an endpoint security subscription license for WatchGuard EPDR or Advanced EPDR, the existing EDR Core license with Total Security Suite automatically upgrades to the new product. If you have already allocated EDR Core to a tenant Service Provider or Subscriber account, EDR Core is upgraded to WatchGuard EPDR or Advanced EPDR. If the subscription license expires, the endpoints retain the license. For information on the protection available with expired licenses, go to About Endpoint Security Licenses.

If there is a WatchGuard Advanced EPDR or EPDR trial in progress in the account, the trial is canceled and replaced by the subscription. For more information on trials, go to Manage Trials – Service Providers.

Allocation Types

When Service Providers allocate endpoints from a license to their managed accounts, they select an allocation type which specifies how the managed account can use the endpoints.

Term Allocation

When you allocate endpoints as a term allocation, the managed account can allocate a specific number of endpoints to an account for a set duration or term from a term license or MSSP points.

Subscription Allocation

When you allocate endpoints as a subscription allocation, the managed account can allocate a specific number of endpoints or an unlimited number of endpoints. WatchGuard bills the account monthly based on the number of active endpoints.

Mixed Allocation

To facilitate clear usage reporting down to tenant accounts, we no longer allow Partner accounts or Tier-1 Service Provider accounts to allocate endpoints as mixed. You can select a Term or Subscription allocation type only. Existing mixed allocations can still be used, but cannot be edited. Endpoints that were allocated as mixed show as subscription endpoints in the managed account. With the mixed allocation type, endpoints from the term license are used first, then when no endpoints remain in the term license, endpoints from the subscription license are used.

Subscription Billing

With a subscription license, you receive an invoice monthly. On the first of each month, WatchGuard Cloud counts the total number of endpoint security subscription endpoints from all accounts in your account and your managed accounts. This count is the number of endpoints that appears on your invoice for the following month. Any endpoints that you add before the next billing date can immediately use the product or module.

Canceled Subscription

If you cancel a subscription, protection is immediately disabled on the affected devices. Computers and devices with a canceled subscription license:

Are unprotected, with no antivirus, advanced protection, firewall, device control, and URL filtering.
Cannot access the management UI.
Do not receive signature file updates.
Do not have scheduled tasks. All scheduled scans and patch tasks are disabled.