Up-Level Your Hardening, Hunting and Forensics Skills
Advanced versions of WatchGuard’s endpoint security solutions provide all the capabilities you’ll find in our standard EDR and EPDR products, but with additional features to proactively search for compromised endpoints or harden them against the most common malwareless attack techniques.
This product is not available for purchase without prior authorization. Contact your WatchGuard sales representative for more information.
Close Security Gaps, Stay Ahead of Threats
Today's threat techniques are highly sophisticated and continuously evolving. Simple yet efficient hygiene practices can mean the difference between a minor security operation and becoming a victim. These practices range from reducing the attack surface of the endpoints to uncovering emerging campaigns lurking on the network before an actual compromise.
Monitor or Block Living-off-the-Land Techniques
The enhanced security policies enable you to supervise or harden endpoints from the execution of suspicious scripts and common attack techniques utilized by sophisticated threats such as:
- PowerShell with obfuscated parameters
- Unknown scripts
- Locally compiled programs
- Documents with macros
- Registry modifications that run when Windows starts
Centralize IoC-Based Hunting
WatchGuard Advanced EDR and WatchGuard Advanced EPDR offer a simple way to centrally manage and search for IoCs on the endpoints while consolidating the results in an intuitive dashboard. It enables your team to quickly hunt for recently disclosed incidents or exchange of security intelligence in your industry as well as find impacted endpoints in a forensic analysis. Different types of indicators are supported – hashes, filename, path, domain, IP, and Yara rules.
Compare WatchGuard EDR, EPDR and Advanced EDR/EPDR
Strengthen your security program by adopting a more proactive posture with advanced capabilities on top of WatchGuard EDR and WatchGuard EPDR.
| WatchGuard EDR |
WatchGuard EPDR |
WatchGuard Advanced EDR |
WatchGuard Advanced EPDR |
|
|---|---|---|---|---|
| Lightweight Cloud-based agent | ✓ | ✓ | ✓ | ✓ |
| Collective Intelligence lookups in real time | ✓ | ✓ | ✓ | ✓ |
| Zero-Trust Application Service: pre-execution, execution and post-execution | ✓ | ✓ | ✓ | ✓ |
| In-memory behavior anti-exploits | ✓ | ✓ | ✓ | ✓ |
| Behavior analytics - high fidelity IoA detection - Threat Hunting Service | ✓ | ✓ | ✓ | ✓ |
| Protection of systems when files are created | ✓ | ✓ | ||
| IDS, firewall and device control | ✓ | ✓ | ||
| Web browsing and email protection | ✓ | ✓ | ||
| Category-based URL filtering | ✓ | ✓ | ||
| IoC search in real time at the endpoints | ✓ | ✓ | ||
| Yara rules search | ✓ | ✓ | ||
| Advanced security policies to reduce the attack surface | ✓ | ✓ |
"The average time to detect a breach is 212 days, and the average time to contain it is 75 days: totaling a 287-day breach life cycle. The key thing to understand is that the faster a data breach is detected and contained, the lower the damage costs.”