Download the WatchGuard Agent Installer

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EDR This topic applies to the WatchGuard EDR endpoint security product., WatchGuard EPP This topic applies to the WatchGuard EPP endpoint security product., WatchGuard EDR Core This topic applies to the WatchGuard EDR Core, available in the Total Security Suite license.

The WatchGuard Agent handles communication between managed computers on the same network and the WatchGuard server. The agent is installed on each endpoint or computer. It has low CPU, memory, and bandwidth usage and uses less than 2 MB of data each day.

To install the endpoint software locally, you download the agent installer and run the installation wizard on the computer or device. The WatchGuard Agent installs the endpoint security product according to the settings you select. There is a single agent for WatchGuard Advanced EPDR, WatchGuard EPDR, WatchGuard EDR, WatchGuard EDR Core, and WatchGuard EPP.

You can also create a download link for the installer and send the link to computers and devices on the network. For more information, go to Create a Download Link.

For information on how to run the installation wizard on different platforms, go to Install the Endpoint Software Locally.

Prior to downloading the installer, you select a group. Any computers or devices that you use the installer on are automatically added to the group you select. The security policies assigned to a computer or device depend on the group it belongs to.

For more information about the different types of groups, go to Manage Computers and Devices in Groups.

Download the WatchGuard Agent Installer

To download the installer:

1. In WatchGuard Cloud, select Configure > Endpoints.
2. Select Computers.
3. Click Add Computers.

4. Select the platform you want to download the installer for (Windows, macOS, Linux, Android, or iOS).
   The Windows version includes the installer for x86 and ARM computers. For iOS devices, we recommend that you download the app integrated with the WatchGuard mobile device management (MDM) solution. For more information, go to Mobile Device Management for iOS Devices.

5. Select the group you want to add the computer to.
   The security policies assigned to a computer depend on the group it belongs to.
   • To add the computer to a group created in the Endpoint Security management UI, select Add Computers to this Group. From the drop-down list, select a folder.
   • (Windows, Linux, or macOS only) To add the computer to an Active Directory group, select Add Computers to their Active Directory Path. Select the network proxy to apply to the computers.
     If the Active Directory administrator moves a computer from one organizational unit to another, the change is reflected in the Endpoint Security management UI as a group change. The security policies assigned to the computer might also change.

For more information about the different types of groups, go to Manage Computers and Devices in Groups.

• To add the computer to a group based on IP addresses, select Select the Group Based on the Computer's IP. Select an IP-based group from the drop-down list.
  For more information, go to Integrate Computers by IP Address.

6. To specify the network settings to apply to the computer, click Default Settings.
   For more information on how to configure network settings, go to Configure Network Settings.
   • If the computer is added to a group created in the Endpoint Security management UI, it automatically inherits default settings from the folder it is in.
   • (Windows, Linux, or macOS only) To add the computer into an Active Directory group, select network settings from the drop-down list that appears.

For information on how to assign settings to computers, go to Assign a Settings Profile.

7. To specify an expiration date for the Windows installer, click in the box and select a date from the calendar.
   After the expiration date, if users try to start the installer, a message informs them that the installer is expired, and they should download a new one or contact their administrator.
8. Click Download Installer.
   The installer downloads.
9. To start the installation, double-click the downloaded installer file.
   For more information, go to Install the Endpoint Software Locally.

Integrate Computers by IP Address

When you create a computer group in the management UI, you can specify IP addresses and IP address ranges to determine which computers are added to the group. For more information, go to Manage Groups.

If you select Select the Group Based on the Computer's IP, WatchGuard Endpoint Security searches all IPs associated with the group and child groups you select.

• If a single IP address is found, the computer moves to the relevant group.
• If multiple IP groups match the computer IP address, the group that is deepest in the tree is selected. If there are multiple groups at the same level with IP addresses that match the computer IP address, the last one is selected.
• If no matches are found, the computer moves to the selected group. If the selected group does not exist when the computer is integrated, it moves to the All group.

After WatchGuard Endpoint Security places a computer in a group, if you change the IP address for the computer, the computer does not automatically move to another group. If you change the IP addresses assigned to a group, the computers in the group are not automatically reorganized.

Create a Download Link

With the Send URL by Email option, you create a download link and send it to users. Users click the link to download the installer to their computers.

To create a download link:

1. In WatchGuard Cloud, select Configure > Endpoints.
2. Select Computers.
3. Click Add Computers.
4. Select the platform you want to create a download link for (Windows, macOS, Linux, Android, or iOS).
   The Windows link includes installers for x86 and ARM processors. For iOS devices, we recommend that you download the app integrated with the WatchGuard mobile device management (MDM) solution. For more information, go to Mobile Device Management for iOS Devices.
5. Select the group you want to add the computer to.
   The security policies assigned to a computer depend on the group it belongs to.

6. To specify an expiration date for the Windows installer, click in the box and select a date from the calendar.
   After the expiration date, if users try to start the installer, a message informs them that the installer is expired, and they should download a new one or contact their administrator.
7. Click Send URL by Email.
   Your email application opens a new email with the link. Send the email to users in the selected group. When a user clicks the link, the installer downloads.
8. To start the installation, the user double-clicks the downloaded installer file.
   For more information, go to Install the Endpoint Software Locally.
   

Related Topics

Install the Endpoint Software Locally

Installation Requirements