Applies To: All WatchGuard MDR Products
WatchGuard Managed Detection and Response (MDR) is a managed service that provides security monitoring, threat hunting, attack detection, investigation, and containment for eligible partners and customers.
WatchGuard cybersecurity experts use AI technologies to monitor your environment 24/7 and help you detect and respond to threats. If a potential cyberattack occurs, the WatchGuard MDR team guides you through the containment and remediation process.
WatchGuard MDR includes these capabilities:
Continuous monitoring and threat hunting
The WatchGuard MDR team monitors telemetry from your environment to identify, prioritize, and investigate indicators of compromise and abnormal activity.
Investigation and guided response
When WatchGuard MDR identifies a potential threat, the team investigates the activity and provides remediation guidance. Depending on your configuration, WatchGuard MDR can also isolate affected endpoints.
Coverage across your security stack
Depending on your license, WatchGuard MDR can monitor endpoints, WatchGuard products such as Firebox, FireCloud, AuthPoint, and WatchGuard NDR, cloud environments, and selected third-party integrations.
Optional add-on capabilities
MDR service add-ons for WatchGuard Products can add MDR monitoring for individual WatchGuard products, vulnerability scanning, log storage, or a virtual CISO (VCISO) retainer.
WatchGuard MDR Licenses
WatchGuard MDR has two license categories:
WatchGuard Core MDR Products
WatchGuard core MDR products provide the core WatchGuard MDR for your environment. core MDR product includes 24/7 managed detection and response for endpoints and, depending on the license, additional WatchGuard products, cloud environments, and third-party integrations.
MDR Service Add-ons for WatchGuard Products
MDR service add-ons for WatchGuard products add MDR monitoring or related capabilities to individual WatchGuard products. You can use these licenses alone or with a compatible core MDR product.
For more information about MDR licenses, monitored environments, and license requirements, go to About WatchGuard MDR Licenses.
Get Started
To get started with WatchGuard MDR, go to these help topics:
- Get Started with WatchGuard MDR
- About WatchGuard MDR Licenses
- Configure Endpoint Security Settings for WatchGuard MDR
- WatchGuard MDR Integration Guides
- About the Managed Services Portal
Managed Services Portal
The Managed Services portal provides a unified view of MDR incidents and detections for your managed accounts so that you can identify risks and strengthen your defenses. To open the portal from WatchGuard Cloud, select Monitor > Managed Services.
For more information about the Managed Services portal, go to About the Managed Services Portal.
Key portal topics include:
- Managed Services Portal Dashboard
- Review MDR Investigations
- Review MDR Detections
- View MDR Reports
- Review MDR Endpoints
- Review Vulnerability Scan Results