WatchGuard is excited to announce the general availability of EDR Core and the associated migration tool. The release of EDR Core further realizes our Unified Security vision by providing TDR functionality using Panda technology and the WatchGuard Cloud native XDR solution, ThreatSync (currently in Beta). Highlights of the new improvements based on WatchGuard Endpoint Security functionality include:
- Improved Threat Intelligence and Heuristics
- Improved Anti-tampering protection
- Contextual Detections and Anti-exploit technology (for fileless malware)
- Indicators of Attack (visible in ThreatSync only)
Does this affect me?
EDR Core licenses are included with every Total Security Suite license with a WatchGuard Firebox. All accounts with existing TDR Host Sensor licenses now have equivalent EDR Core licenses added in WatchGuard Cloud.
How do I upgrade?
We have provided a migration tool that facilitates the transition from the TDR Host Sensor to EDR Core. The tool is available from the Administration menu in WatchGuard Cloud. After you follow the prompts on the screen and click Upgrade, all your TDR Host Sensors will automatically upgrade to the WatchGuard Endpoint Agent the next time they connect to the cloud. All accounts can use TDR Host Sensors and EDR Core simultaneously, during migration.
Upgrading to a WatchGuard Endpoint Security product later will be easy because the agent used for EDR Core is the same as other WatchGuard Endpoint Security products. Simply activate a license for the new Endpoint Security product and the WatchGuard Cloud UI will automatically convert to the new product. There is no need to redeploy the agent.
Find out more
For more information, please refer to the Introduction to EDR Core document, the EDR Core documentation in WatchGuard Help Center and the EDR Core FAQ.
For Sales or Support questions, you can find phone numbers for your region online. If you contact WatchGuard Technical Support, please have your registered appliance Serial Number or Partner ID available.