WatchGuard Managed Services Release Notes

These release notes are for WatchGuard Managed Services. WatchGuard MDR is a comprehensive security service that provides partners with 24/7/365 managed detection, response, and threat hunting services, and includes direct access to the WatchGuard MDR team.

For more information about new features, download the What's New in WatchGuard Managed Services PowerPoint. For a full description of WatchGuard MDR features and functionality, go to WatchGuard MDR Help.

Release Information Date
Latest WatchGuard MDR Update 29 January 2026
Release Notes Revision Date 29 January 2026

Latest Release

Release Date: 29 January 2026

Enhancements

  • When you allocate users from a WatchGuard MDR license, the WatchGuard MDR team is now automatically granted access to the account to provide managed detection and response services. For more information, go to Manage MDR Team Access to WatchGuard Cloud Accounts in Help Center. [WCD-28493]

Previous Releases

Enhancements

Resolved Issues

  • In the Managed Services portal, on the Onboarding > WatchGuard Agent page, the Status column in the Endpoints with WatchGuard Agent now shows the correct status. [MSRD-6934]

New Features

WatchGuard Open MDR

A new WatchGuard Open MDR license is now available. With this license, MDR monitors your endpoints licensed with one of the Advanced EPDR, EPDR, or EDR Endpoint Security products.

WatchGuard Open MDR can also monitor WatchGuard Fireboxes (with a Total Security Suite license), ThreatSync+ NDR, and user authentications for AuthPoint Multi-Factor Authentication and AuthPoint Total Identity Security.

For third-party cloud integrations, WatchGuard Open MDR can monitor Microsoft 365, Microsoft Defender, AWS CloudTrail, AWS and Azure Cloud Security Posture Management (CSPM) environments, Google Workspace, CrowdStrike EDR, and Okta.

For more information about WatchGuard Open MDR, go to About WatchGuard MDR Licenses in Help Center.

In addition, the WatchGuard Open MDR can collect and monitor syslog data from many third-party firewalls.

For more information about third-party firewall monitoring, go to Configure Third-Party Firewall Syslog Collection for WatchGuard Open MDR in Help Center.

For more information about Okta and CrowdStrike integrations, go to Okta Integration with WatchGuard Open MDR and CrowdStrike EDR Integration with WatchGuard Open MDR.

New Features

Service Provider Dashboard

A new dashboard in the Managed Services portal gives Service Providers a consolidated view of data across all their managed accounts.

For more information, go to Managed Services Portal Dashboard in Help Center.

AWS and Microsoft Azure Cloud Security Posture Management CSPM Integration

If you have a WatchGuard Total MDR license, you can now integrate WatchGuard MDR with AWS CSPM and Microsoft Azure CSPM to combine threat detection and cloud security optimization for your AWS and Azure environments.

For more information, go to AWS Cloud Security Posture Management (CSPM) with WatchGuard MDR or Microsoft Azure Cloud Security Posture Management (CSPM) with WatchGuard MDR in Help Center.

Resolved Issues

  • In the Managed Services portal, the Detections page now shows ThreatSync+ NDR details for APAC customers with WatchGuard Total MDR. [MSRD-6134]
  • In the Managed Services portal, the Service Status page now shows Firebox and AuthPoint data for APAC customers with WatchGuard Total MDR. [MSRD-6128]

Enhancements

  • If you have the WatchGuard Core MDR module allocated to an account with an Endpoint Security product, when you allocate users to the account from a WatchGuard Total MDR license, WatchGuard Core MDR allocations are now automatically removed. [ITDIGIT-17005]
  • In the Managed Services portal, Service Providers can now select managed accounts they want to view from a multi-tier hierarchy in the tenant drop-down list. [MSRD-2708]

New Features

WatchGuard Total MDR

A new WatchGuard Total MDR license is now available. For environments that use one of the Advanced EPDR, EPDR, or EDR Endpoint Security products, WatchGuard MDR can monitor your licensed endpoints and other WatchGuard products, such as Fireboxes, AuthPoint, ThreatSync, and ThreatSync+ NDR. WatchGuard MDR can also monitor third-party cloud integrations that include Microsoft 365, AWS CloudTrail, and Google Workspace.

In the Managed Services portal, you can now go to Connections > Service Status to see a real-time overview of connected endpoints, network devices, cloud services, and AuthPoint users managed by WatchGuard MDR.

For more information about WatchGuard Total MDR, go to About WatchGuard MDR in Help Center.

Enhancements

  • In the Managed Services portal, you can now go to Connections > Endpoints to view all connected endpoints that send data to WatchGuard MDR. This includes endpoints that run WatchGuard Endpoint Security or Microsoft Defender. [MSRD-2748]

Enhancements

  • For environments with WatchGuard Core MDR and WatchGuard Core MDR for Microsoft, you now add recipients for weekly or monthly MDR reports in the Managed Services portal Tenant Settings page. For more information, go to MDR Reports in Help Center.
  • The Monthly Summary Report sent by the SOC team now includes all closed Investigations related to potential security activity that was identified for that period.

New Features

WatchGuard Core MDR for Microsoft

A new WatchGuard Core MDR for Microsoft license is now available. With this license, the WatchGuard SOC can monitor and respond to threats on endpoints that run Microsoft Defender.

For more information about WatchGuard Core MDR for Microsoft, go to About WatchGuard MDR in Help Center.

Managed Services Portal

You can now view dashboards, activity, and reports for WatchGuard MDR in the Managed Services Portal. To open the portal, from WatchGuard Cloud, select Configure > Managed Services or Monitor > Managed Services.

For more information about the Managed Services Portal, go to About the Managed Services Portal in Help Center.