WatchGuard Agent Supported Operating Systems

The WatchGuard Agent is used to deploy WatchGuard software such as the WatchGuard Connection Manager for FireCloud and the Endpoint Security products and modules. The WatchGuard Agent supports these client platforms:

  • Windows (Intel & ARM)
  • macOS (Intel & ARM)
  • Linux
  • Android
  • iOS

You cannot install the WatchGuard Agent on Windows Server, Linux, Android, or iOS endpoints for FireCloud. For information on supported operating systems for FireCloud, go to Operating System Compatibility for FireCloud Components.

You can use the WatchGuard Agent to install the WatchGuard MDR Log Collector and WatchGuard MDR Vulnerability Scanner on Linux only. For information on supported distributions, go to Configure Third-Party Firewall Syslog Collection for WatchGuard Open MDR and Configure WatchGuard MDR Vulnerability Scanning in Help Center.

For a list of supported operating systems, go to the appropriate section.

Supported Operating Systems

Workstations with an x86 or x64 Microprocessor

  • Windows 7 (32-bit and 64-bit)
  • Windows 8 (32-bit and 64-bit)
  • Windows 8.1 (32-bit and 64-bit)
  • Windows 10 (32-bit and 64-bit)
  • Windows 11 (32-bit and 64-bit)

Computers with an ARM Microprocessor

  • Windows 10 Pro and Home
  • Windows 11 Pro and Home
    Note that all of the product's features work in ARM, except for some Patch Management and anti-exploit functionality.
  • Windows Server 2025 Standard, Datacenter

Servers with an x86 or x64 Microprocessor

  • Windows Small Business Server 2011, 2012
  • Windows Server 2012 and 2012 R2
  • Windows Server 2016 and 2019
  • Windows Server Core 2008 R2, 2012 R2, 2016, 2019, and 2022
  • Windows Server 2022
  • Windows Server 2025 Standard, Datacenter

As of 30 June 2027, Windows Server 2003 and Server 2008 operating systems will reach EOL. (Windows Server 2008 R2 is not affected.) For more information, go to https://www.watchguard.com/wgrd-trust-center/end-of-life-policy. (external link)

IoT and Windows Embedded Industry

  • Windows Embedded for Point of Service
  • Windows Embedded POSReady 2009, 7, 7 (64-bit)
  • Windows Embedded Standard 2009, 7, 7 (64-bit), 8, 8 (64-bit)
  • Windows Embedded Pro 8, 8 (64-bit)
  • Windows Embedded Industry 8, 8 (64-bit), 8.1, 8.1 (64-bit)
  • Windows IoT Core 10, 10 (64-bit)
  • Windows IoT Enterprise 10, 10 (64-bit), 11
  • Windows Server IoT 2019

To prevent connection issues, make sure that these Microsoft Knowledge Base (KB) changes are installed:

KB948963

This KB adds support for the Windows Server 2003 cipher suites TLS_RSA_WITH_AES_128_CBC_SHA AES128-SHA and TLS_RSA_WITH_AES_256_CBC_SHA AES256-SHA AES. If it is not installed, download the x64 or x32 version, as appropriate. For more information, go to the Microsoft Catalog (external link).

The download files are not hosted on a Microsoft official server as it is no longer supported. If you require them in another language, contact Microsoft.

KB3072630

This KB verifies the digital signature of the WatchGuard installation packages and their corresponding files. If the computer does not have this KB, download it here (external link) and install it.

The installation requires that you restart the computer.

KB3033929

This KB adds SHA 256 support for Windows 7 and 2008. If it is not installed, download the x64 or x32 versions here (external link).

When the KBs are installed, download and extract the contents of the file addcertsv1.3-signed.zip (password panda). Run the file, AddCerts.exe, with administrator privileges from CMD or Windows Explorer.

KB4474419

This KB adds support to SHA 256 for Windows 7 + SP1 and Windows 2008 R2 + SP1. Access this link (external link) to download it.

KB4490628

This KB adds support to SHA 256 for Windows 7 + SP1 and Windows 2008 R2 + SP1. Access this link (external link) to download it.

When the KBs are installed, download and extract the contents of the file CertCheck.zip (password panda). Execute the file called AddCerts.exe with administrator privileges from a CMD window or from Windows Explorer.

After you install the required KBs, use the tool available at PSInfo Check Certificate in Help Center, to identify and update root certificates.

In Citrix environments we recommend that you run CertCheck.exe with the psexec tool.

Rootsupd

This is a Microsoft tool to update computer certificates. It has been removed from the download site as Windows XP is no longer supported. You should use the tool at your own discretion. We suggest that you use a test computer before you deploy it to more computers. Contact Microsoft for help if you have questions.

Download rootsupd and unzip the file (password panda). Run the rootsupd.exe file.

We recommend that you verify that the operating system does not block the execution of the rootsupd.exe file. If necessary, open the file properties to unblock it.

Communications TLS 1.2

For communications through TLS 1.2 protocol, ciphers TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 and TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 are required.

For more information, go to this article on the Microsoft site.

Windows 2008 R2 does not support TLS 1.2 natively. It requires that you install a patch available for certain winHTTP protocols. For more information, go to Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows (external link).

Supported Operating Systems

  • macOS 10.15 Catalina (Supported from v3.00.00.0000)
  • macOS 11.0 Big Sur (Supported from v3.00.00.0000)
  • macOS 12 Monterey (Supported from v3.00.00.0000)
  • macOS 13 Ventura (Supported from v3.02.00.0000)
  • macOS 14 Sonoma (Supported from v3.03.00.0002)
  • macOS 15 Sequoia (Supported from v3.05.00.0001)
  • macOS 26 Tahoe (Supported from v3.07.00.0000)
  • macOS 27 Golden Gate (Supported from 3.08.00.0002)

For High Sierra and higher, kernel extensions must be loaded manually. For more information, go to this Knowledge Base article What can I do to prevent the system extension from being blocked on macOS 10.13 (High Sierra)? (external link)

Supported Operating Systems

To avoid undesired issues, before you install the product on Oracle Linux, make sure you have a compatible kernel version. To go to your kernel version, in the terminal, run uname -r. For a complete list, go to this Knowledge Base article. (external link)

Supported 64-bit Distributions

  • Ubuntu: 14.04 LTS, 14.10, 15.04, 15.10, 16.04 LTS, 16.10, 17.04, 17.10, 18.04 LTS, 18.10, 19.04, 19.10, 20.04 LTS, 20.10, 21.04, 21.10, 22.04 LTS, 22.10, 23.04, 23.10, 24.04, 24.10, 25.04, 25.10, and 26.04.
  • Fedora: 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, and 44.
  • Debian: 8, 9, 10, 11, 12, and 13.
  • Red Hat: 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 8.8, 8.9, 8.10, 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 10.0, 10.1, and 10.2.
  • CentOS: 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, and 8.5.
  • CentOS Stream: 8, 9, and 10.
  • Rocky Linux: 8.3, 8.4, 8.5, 8.6, 8.7, 8.8, 8.9, 8.10, 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 10.0, 10.1, and 10.2.
  • Alma Linux: 8.3, 8.4, 8.5, 8.6, 8.7, 8.8, 8.9, 8.10, 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 10.0, 10.1, and 10.2.
  • Linux Mint: 18, 18.1, 18.2, 18.3, 19, 19.1, 19.2, 19.3, 20, 20.1, 20.2, 20.3, 21, 21.1, 21.2, 21.3, 22, 22.1, 22.2, and 22.3.
  • SUSE Linux Enterprise: 11 SP2, 11 SP3, 11 SP4, 12, 12 SP1, 12 SP2, 12 SP3, 12 SP4, 12 SP5, 15, 15 SP1, 15 SP2, 15 SP3, 15 SP4, 15 SP5, 15 SP6, 15 SP7, and 16.
  • Oracle Linux: 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9 ,8.0, 8, 8.1, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 8.8, 8.9, 8.10, 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 10.0, 10.1, and 10.2.
  • openSUSE: 15.3, 15.4, 15.5, 15.6, and 16.
  • Amazon Linux: 2, 2023

*Oracle Linux 6.10 with kernel 4.1.12-124.16.4.el6uek.x86_6 is incompatible.

Supported 32-bit Distributions

  • Red Hat: 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10.
  • CentOS: 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10.

Supported Operating Systems

  • Android Lollipop 5.0/5.1
  • Android Marshmallow 6.0
  • Android Nougat 7.0 - 7.1
  • Android Oreo 8.0
  • Android Pie 9.0
  • Android 10
  • Android 11
  • Android 12
  • Android 13
  • Android 14
  • Android 15

Supported Operating Systems

  • iOS 15 / iPadOS 15
  • iOS 16 / iPadOS 16
  • iOS 17/ iPadOS 17
  • iOS 18 / iPad OS 18
  • iOS 26 / iPad OS 26