The end-of-life date for TDR was 30 September 2023. The TDR UI in WatchGuard Cloud is no longer available. Host Sensors can continue to function, but remediation and report generation is disabled. We strongly recommend that you upgrade your Host Sensors to WatchGuard Endpoint Security.
WatchGuard EDR Core provides a subset of the functionality available with WatchGuard EDR and is a replacement service for the Threat Detection and Response (TDR) Host Sensor in WatchGuard Cloud.
TDR users can upgrade their Host Sensors to EDR Core or another endpoint security license from WatchGuard Cloud. WatchGuard EDR, EPDR, and Advanced EPDR contain all of the features in EDR Core. The upgrade process is available for Windows computers only. It automatically installs the WatchGuard Endpoint Agent on the endpoints of the account. You do not have to reinstall the agent or protection software.
For a list of the requirements, known issues, and additional steps you must complete to upgrade TDR to Endpoint Security, we recommend that you review this Knowledge Base article (external).
If you have WatchGuard Endpoint Security allocated to the account, but not installed on computers where the Host Sensor is installed, the upgrade process automatically installs the WatchGuard Endpoint Agent and the WatchGuard Endpoint Security protection software on those computers.
On Windows devices where the WatchGuard Endpoint Agent is already installed, the upgrade process uninstalls the TDR Host Sensor. If the currently installed version of the WatchGuard Endpoint Agent is the same or higher than the latest agent, the installed agent is not updated.
Before You Begin
The upgrade process can take some time to complete. Before you upgrade, make sure that your WatchGuard Endpoint Security license has enough endpoints to replace the Host Sensors. For more information on how to allocate endpoints, go to Allocate Endpoints.
In preparation for the release of ThreatSync, accounts with TDR Host Sensor licenses in WatchGuard Cloud were duplicated with EDR Core licenses. You may already have EDR Core licenses in WatchGuard Cloud.
The WatchGuard Endpoint Agent requires access to specific URLs and ports. For more information, go to this Knowledge Base article: URLs used by Panda and WatchGuard Endpoint Security products (external).
During the TDR to WatchGuard Endpoint upgrade process, TDR Host Sensor settings and firewall configurations are not migrated to the endpoint. Some TDR features have equivalent features in ThreatSync and Endpoint Security that you must configure manually.
Upgrade TDR to WatchGuard Endpoint Security
This process is available for Windows endpoints only. For Linux and macOS endpoints, you must manually uninstall the TDR Host Sensor and then install WatchGuard Endpoint Security.
To upgrade TDR to WatchGuard Endpoint Security, in WatchGuard Cloud:
- From Account Manager, select the account with the Host Sensors you want to upgrade.
Your WatchGuard Endpoint Security license must have enough endpoints to replace the Host Sensors. Host Sensors are automatically uninstalled from the endpoints during the upgrade process. - Select Administration > Upgrade TDR to Endpoint Security.
- Determine whether Panda Endpoint Security products are installed on any computers in the account.
- If Panda Endpoint Security products are installed on any of the computers, we recommend that you do not proceed because you will lose access to your Panda Endpoint Security product. This wizard converts your Panda Endpoint Security products to WatchGuard EDR Core. For more information, contact Support.
- If Panda Endpoint Security products are not installed on any of the computers, click Upgrade.
The upgrade process automatically installs the WatchGuard Endpoint Agent on the endpoints of the account. The process can take some time to complete. Make sure that the devices are powered on and connected.
- If Panda Endpoint Security products are installed on any of the computers, we recommend that you do not proceed because you will lose access to your Panda Endpoint Security product. This wizard converts your Panda Endpoint Security products to WatchGuard EDR Core. For more information, contact Support.
The upgrade process can take some time to complete. To review the progress, select Administration > Upgrade TDR to Endpoint Security.
Endpoint Agent MSI Install Issues
URLs used by Panda and WatchGuard Endpoint Security products (external)
Frequently Asked Questions (external)