About WatchGuard NDR for Firebox Licenses

Applies To: ThreatSync+ NDR

WatchGuard NDR for Firebox is licensed by Firebox model to provide comprehensive traffic monitoring, in-depth VPN log analysis, DHCP log analysis, and device monitoring for any endpoint connected to a Firebox. The WatchGuard NDR for Firebox license also includes unlimited device monitoring and is not limited by device count.

To use a WatchGuard NDR for Firebox license, you must have a compatible Firebox model in the same account.

License Combinations and Restrictions

You can have a WatchGuard NDR for Firebox license with a standalone ThreatSync+ SaaS license in the same Subscriber account, but you cannot combine a WatchGuard NDR for Firebox and a Total NDR or ThreatSync+ NDR license.

The WatchGuard NDR for Firebox license does not include these features:

  • ThreatSync+ NDR Collection Agents
  • Windows Log Agents
  • ThreatSync+ NDR Cloud Integrations such as Azure, IONOS, and AWS VPC Flow Logs

If you want these features included with your license, you must purchase a ThreatSync+ NDR or Total NDR license. For more information, go to About ThreatSync+ NDR Licenses and About Total NDR Licenses.

License Activation

You can activate licenses on the Activate Licenses page on the WatchGuard website.

After you activate a WatchGuard NDR for Firebox license, you can review the activated licenses for your account in Support Center on the ThreatSync+ page. Click the name of a license to view the details and history of that license.

Because WatchGuard NDR for Firebox licenses are licensed for each Firebox model, you can have more than one WatchGuard NDR for Firebox license, depending on the number of Fireboxes in your account. For example, if you have 10 Fireboxes in your Subscriber account, you can have a maximum of 10 WatchGuard NDR for Firebox licenses with the same Firebox model.

License Renewals

To renew a license, you purchase a new license and activate it. When you activate the new license, you can select to extend your current license.

For more information, go to Activate a WatchGuard NDR for Firebox License.

License Expiration

WatchGuard NDR for Firebox licenses expire on the expiration date at 00:00 UTC. After a WatchGuard NDR for Firebox term license expires, there is a seven-day grace period. If you renew your license before the grace period ends, no further action is required. If you do not renew your license before the grace period ends, and all WatchGuard NDR for Firebox licenses in the same account are also expired:

  • The license on the corresponding Firebox is deactivated and unassigned.
  • ThreatSync+ NDR no longer monitors network traffic.
  • Access to the ThreatSync+ NDR management UI is disabled.
  • The ThreatSync+ NDR configuration and data are deleted.

After you renew your license, ThreatSync+ NDR starts to monitor network traffic again and you can access the management UI.

Related Topics

Activate a WatchGuard NDR for Firebox License

Allocate WatchGuard NDR for Firebox Licenses