WatchGuard Blog: Endpoint Security

Endpoint Security: NEW Automated Deployment Scripting for NinjaOne

Carlos Arnal — Thu, 28 Sep 2023 10:46:50 -0700

Today, we are releasing a WatchGuard Endpoint Security deployment script for NinjaOne that uses parameters in the script to install to the correct selected customer. By using these scripts, we allow NinjaOne users to install our protection on demand or automatically. Once set up, WatchGuard Endpoint Security solutions can be automated for deployment to ensure that our endpoint security product is installed on all devices.

What is NinjaOne?

NinjaOne is a remote monitoring and management (RMM) tool that provides intuitive endpoint management software to managed service providers (MSPs) and IT professionals with an exceptional user experience and all the support they need to deliver fast and effective IT management.

This NinjaOne script development lets admins create scripts to automate some deployment functions. This release will help to streamline deployment and boost efficiency with automated deployment scripting or on‑demand deployment remotely.

At WatchGuard, we have been working hard for partners and large enterprises to reduce operational costs and simplify service delivery. In the last few years, we have improved our value proposition by implementing tight integrations of the main RMM market tools with WatchGuard Endpoint Security, such as:

ConnectWise Automate
Kaseya VSA
N-able N-central
N-able N-sight RMM

We will continue developing new products and features, and adding tight integrations with WatchGuard Endpoint Security solutions to meet client needs and to automate deployments and monitor the software used for multiple customers for a more simplified management process.

New Features Added to the WatchGuard Endpoint Security API

Carlos Arnal — Wed, 09 Aug 2023 15:24:11 -0700

We are happy to announce that we just added new features to the WatchGuard Endpoint Security API!

Digital transformation has been accelerating over the last few years, and IT teams require modern API tooling to build digital applications and services to meet their business needs. Partners and large enterprises, require a security path towards useful plugins integration into their API platform that let them create dashboards, connect to ticketing systems, and include access controls or threat response, among others, helping operations secure the most critical functions.

WatchGuard Endpoint Security API is designed to fit with their systems through advanced API sets and can be easily integrated into third-party IT system management tools, creating a powerful security services platform. WatchGuard Endpoint Security API simplifies access to additional information, actions, and configurations of the Endpoint Security offering using specific methods to retrieve individual data sets whenever admins need them.

WatchGuard Endpoint Security API NEW features:

A comprehensive list of all available patches
Retrieval of detailed software inventory of their machines
Extended information on each machine's BIOS listing: version, manufacture date, serial number, name, and manufacturer
Insights into tasks such as:
- Task list
- Task status list on machines
- Task execution list
- A list for results and detections

Need more info?

WatchGuard provides public RESTful APIs that customers can use for integration with WatchGuard products and services. For more information about WatchGuard APIs, go to Get Started with WatchGuard APIs or check the Endpoint Security Management API.

NEW WatchGuard Endpoint Security Integration with N-sight

Carlos Arnal — Thu, 15 Jun 2023 08:00:00 -0700

We are happy to announce the WatchGuard Endpoint Security integration with N-able N-sight! N-sight RMM is a Remote Monitoring and Management (RMM) solution that streamlines and automates management and expands the user technology ecosystem across integrations that significantly reduce operational overhead.

Now, with the N-able N-sight release, we continue adding tight integrations with Endpoint Security to help our partners automate deployments and monitor the software used for multiple customers for a more simplified management process.

This integration with N‑sight syncs data between both solutions and allows you to deliver strong endpoint security and achieve greater IT efficiency by providing the following benefits and features:

Streamline deployment: Boost efficiency with automated agent deployments or on‑demand deployment remotely
Simplify management: Initiate on‑demand endpoint scans, quickly identify devices with security events that require your attention
Monitoring: Increase visibility and control with critical information such as malware, indicators of attack (IoAs), and protection status

WatchGuard's integration with N-able N-sight streamlines daily partner workflows and tasks, reducing the time spent managing client security. It makes it easier to manage a large number of accounts efficiently by automating agent deployment, initiating on-demand endpoint scans, and much more.

Aether 15 and WG Cloud - New Endpoint Security Release

Carlos Arnal — Thu, 01 Jun 2023 07:00:00 -0700

We are excited to announce a new WatchGuard Endpoint Security release. As you know, ever-evolving cyber threats continue to pose a serious risk to businesses, and cybercriminals are becoming increasingly skilled at identifying security gaps and vulnerabilities in enterprise systems. We are committed to prioritizing the addition of new technologies to help our customers enhance and reinforce their security.

With this release, we are adding the following key functionalities to WatchGuard Endpoint Security products:

Vulnerability Assessment is a critical process in cybersecurity that involves identifying, evaluating, and prioritizing security weaknesses and vulnerabilities in an organization's infrastructure, applications, and systems.
Patch Management: adding automated vulnerability scanning, patch and update planning and installation tasks, and centralized control over updates, patches, and software While Patch Management features such as automated vulnerability scanning, patch and update planning and installation tasks, and centralized control over updates, patches, and software remain the same, we are
Network Attack Protection detects and stops threats by scanning network traffic in real time, preventing attacks exploiting vulnerabilities in Internet-exposed services and attacks in the internal network.
Global Audit Mode evaluates an organization’s cybersecurity state through a simple security audit with WatchGuard Endpoint Security products.
Network Access Enforcement allows network administrators to enable device checking for appropriate endpoint security service before allowing a connection to a corporate wireless network.

We keep working on adding new features to provide a more robust endpoint security approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

We're here to help.

The WatchGuard Team

New Product Release: Panda Email Protection

Carlos Arnal — Tue, 16 May 2023 09:00:00 -0700

Email continues to be a significant attack vector for malware and credential theft through phishing. Accounting for over 50% of all email traffic, spam is the most intrusive way that cybercriminals try to introduce malware and viruses into corporate systems. In fact, it's estimated that as many as 40% of ransomware attacks begin with an email. To protect against spam and other harmful email threats, Panda Email Protection offers a comprehensive set of features and thorough filtering mechanisms to keep customer mailboxes free of annoying and harmful spam, among other challenges.

What is Panda Email Protection?

Panda Email Protection is a Cloud-based, multi-layer security solution designed to prevent unwanted emails that deliver immediate protection and effective filtering technologies against phishing attacks, malware, and spam. Panda Email Protection offers a wide range of measures against phishing and malware attacks, including ransomware. This release expands prevention and response technologies in our portfolio offering.

What is new with this release?

Simple Management

Security from the Cloud: Email Protection requires no client infrastructure. All operations are performed in the Cloud
Easy to access: security can be managed anytime, anywhere from the web console
One-click release: emails in quarantine (spam or info emails) can be delivered from the quarantine report with a click of the mouse.

Maximum Protection

Phishing filter: Anti-phishing mechanisms such as link tracking and detection of reloadable malicious script commands.
Automatic virus signature update: the specialized email malware filters are constantly updated
Bounce management and Outbound filtering: outgoing emails are checked for spam and viruses

Real-time Monitoring

Email Live Tracking: real-time log monitoring, including relevant information such as SMTP trace and headers.
Reporting: Statistics and reports of emails filtered by different criteria such as email type, user, and time

Business Continuity Service

High availability of email service
Automatic email data synchronization
Storage of email traffic
Display of already delivered emails
Continuous access to emails with Webmailer
Selective service provision

Need more info?

For more details on Panda Email Protection, please visit the Panda Security Operations page.

Automatic TDR Host Sensor Upgrade to Endpoint Security Process Temporarily Suspended

Ricardo Arroyo — Fri, 21 Apr 2023 16:36:21 -0700

Earlier today, we became aware of a potential issue with the process that automatically upgrades the TDR Host Sensor to WatchGuard Endpoint Security that may have impacted a small number of migrated endpoints.

Out of an abundance of caution, at 3:30pm ET on 21 April 2023, we temporarily disabled the automatic upgrade process for TDR Host Sensors while we continue to investigate the issue. As a result, the WatchGuard Cloud user interface to start the upgrade process and check on the upgrade status has been removed. Additionally, if you started the upgrade, but it is not yet complete for all your Host Sensors, your upgrade process has been temporarily paused and will restart automatically when we resolve the issue.

WatchGuard is in the process of proactively contacting potentially impacted accounts.

When the issue is resolved, we will post an update here to let you know. Thank you for your patience and understanding while we work to resolve the issue.

The WatchGuard Product Team

Aether 14 and WG Cloud - New Endpoint Security Release

Carlos Arnal — Wed, 02 Nov 2022 05:19:11 -0700

We are pleased to announce the availability of a new Endpoint Security release. With this release, we are adding some significant capabilities, among which one stands out in particular - Endpoint Risk Monitoring.

Why Risk Monitoring?

Cybersecurity incidents can have operational, financial, reputational, and strategic consequences for partners and customers. Security misconfigurations and software vulnerabilities often cause these risk incidents, leaving the door open for cybercriminals to exploit client protection weaknesses.

Partners/MSPs

As many customers don’t have the time, enough skills, or sufficient resources to do it, it is essential for MSPs to provide health risk assessment as a service to add real value by providing risk monitoring in real time, decreasing the number of security risks and therefore reducing your customer attack surface.

Enabling MSPs with risk monitoring strengthens their managed security service delivery. With it, MSPs will discover vulnerabilities and security configuration weaknesses across endpoints in the customer infrastructure where WatchGuard Endpoint Security solutions are implemented. See what else Risk Monitoring can do for managed services by reading the feature brief.

End Users

Security admins need to understand their cyber threat risk posture and reinforce security solution controls so they can prevent and minimize the chances of getting infected and disrupting their business.

With Endpoint Risk Monitoring, IT teams will manage and monitor unprotected endpoints, indicators of attack, security misconfigurations, OS and third-party software vulnerabilities, and missing patches to proactively safeguard their systems before a breach occurs. All our WatchGuard Endpoint Security solutions include risk monitoring capabilities to improve their security posture with actions that can be deployed in real time in a quick and easy way.

What else is new with this release?

Tighter integration in WatchGuard Cloud

iFrame technology implementation, so the Aether web console is now fully integrated into the WatchGuard Cloud platform
No longer necessary to open a new tab to manage Endpoint Security products
Online help is now integrated into WatchGuard Cloud

Strengthening anti-tampering feature

Does not allow the removal of our files in the restart modifying registry entries
Does not allow a change to the permissions for our processes and services

Support for new operating systems

Improved integration in Windows 11
Support to macOS Ventura
Support to new Linux distributions
- CentOS Stream 8 and 9
- AlmaLinux 8.3-8.6 / 9.0
- Rocky Linux 8.3-8.6

And many other improvements

VPN enforcement supported in macOS devices
Discovery of unmanaged devices through Active Directory
Ability to change the recipients in task
Ability to export tasks information
Improved performance on overloaded Linux servers

All these new features are included in our WatchGuard Endpoint Security products (EPP/EDR/EPDR) and also in the Panda portfolio (EP/EPP/AD/AD360).

We're here to help.

- The WatchGuard Team -

WatchGuard EPDR earns OPSWAT Gold Anti-malware certification

Iratxe Vazquez — Sun, 17 Jul 2022 23:24:04 -0700

WatchGuard EPDR received gold certification from our technology partner OPSWAT.

Why is OPSWAT gold certification important?

Earning Gold certification required that our products meet OPSWAT’s specific anti-malware criteria and compatibility standards. Through its Certified Security Application Program, OPSWAT compiles compatibility requirements from over fifty OPSWAT technology partners, including WatchGuard, to help IT administrators find compatible and effective applications for their security stack.

WatchGuard EPDR identifies and stops the most persistent and emerging threats. Still, our gold certification from OPSWAT shows we are also making it easier for MSPs to add and integrate our flagship endpoint solution into their product and service offerings for their business customers.

You can check out all of our product certifications.

NEW WatchGuard Endpoint Security & N-central Integration

Carlos Arnal — Thu, 26 May 2022 09:00:00 -0700

We are happy to announce the WatchGuard Endpoint Security integration with N-able N-central!

N-central is a Remote Monitoring and Management (RMM) solution that streamlines and automates management and expands the user technology ecosystem across integrations that significantly reduce operational overhead.

In 2021, we announced the availability of the WatchGuard Endpoint Security API for partners and customers. A few months later, we kept working on integrating the main RMM market tools ConnectWise Automate and Kaseya VSA plugins with WatchGuard Endpoint Security. Now, with the N-able N-central release, we continue adding tight integrations with Endpoint Security to help our partners automate deployments and monitor the software used for multiple customers for a more simplified management process.

This integration with N‑central syncs data between both solutions and allows you to deliver strong endpoint security and achieve greater IT efficiency by providing the following benefits and features:

Streamline deployment: Boost efficiency with automated agent deployments or on‑demand deployment remotely
Simplify management: Initiate on‑demand endpoint scans, quickly identify devices with security events that require your attention, and isolate & deisolate devices
Monitoring: Increase visibility and control with critical information such as agent and agentless inventory, any kind of malware, indicators of attack (IoAs), and protection status

WatchGuard's integration with N-able N-central streamlines daily partner workflows and tasks, reducing the time spent managing client security. It makes it easier to manage a large number of accounts efficiently by automating agent deployment, initiating on-demand endpoint scans, isolating and deisolating devices, and much more.

Aether 13 and WG Cloud - New Endpoint Security Release

Carlos Arnal — Tue, 10 May 2022 13:14:18 -0700

Ransomware was assessed as the prime threat in 2020-2021. Unfortunately, attacks are dramatically increasing in scope and frequency year over year, with high-impact, headline-making incidents continuously growing.

With this release, we expand our prevention and response technologies in our Endpoint Security offering, where we had some anti-ransomware capabilities already in place, but you can never be too careful against ransomware. That's why we have incorporated more specific protection and recovery features such as Deep Learning and Early Launch Anti-Malware (ELAM) technologies, Shadow Copies, and Decoy Files. Last but not least, besides support for iOS devices, we have also included VPN access that will enable enforcement for VPN connections on our endpoints.

Greater Protection

The Decoy Files technology (honeypot technology) used in our TDR product has been incorporated into this recent version of WatchGuard Endpoint Security
We’ve added deep learning technology & improved anti-tampering leveraging ELAM

Greater Recovery

The ability to recover files encrypted by ransomware using the Shadow Copies included in Windows OS and managed from WatchGuard Cloud.

iOS Support

It includes the following features: anti-theft (geolocation, remote lock, remote wipe, etc.), URL filtering, malware URL detection, and phishing protection.

VPN Enforcement

It enables users to use VPN access to corporate resources only when endpoint protection is active and running. It is supported in Windows (soon in macOS) and works alongside a Firebox

We're here to help.

- The WatchGuard Team

Endpoint Security Modules Join WatchGuard Cloud

Carlos Arnal — Tue, 16 Nov 2021 09:00:00 -0800

Endpoint Security Modules Join WatchGuard Cloud

Just a few months after integrating our Endpoint Security baseline solutions WatchGuard EPDR, WatchGuard EDR, and WatchGuard EPP into the WatchGuard platform, we are happy to announce the integration of Panda Endpoint Modules in WatchGuard Cloud!

This tremendous achievement completes one of the main goals we had for 2021. What’s more, WatchGuard partners selling our endpoint portfolio will enhance their security services offering and maximize their cross-sell activities, and our customers will be able to extend their security and IT operation capabilities.

Starting today, our customers and partners can try the latest innovations of our endpoint security modules in WatchGuard Cloud for:

WatchGuard Patch Management: manages operating system and third-party application vulnerabilities on your workstations and servers
WatchGuard Full Encryption: encrypts and decrypts disks and USB drives centrally without impact to end users
WatchGuard Advanced Reporting Tool: generates security intelligence and IT insights to pinpoint attacks, unusual behavior, and internal misuse
WatchGuard Data Control*: discovers and monitors personal and sensitive data across endpoints and servers to comply with data protection regulations

*Available in these countries: Spain, Germany, UK, Sweden, France, Italy, Portugal, Holland, Finland, Denmark, Switzerland, Norway, Austria, Belgium, Hungary, and Ireland.

For more details on WatchGuard Endpoint Security Modules, please visit the Endpoint Modules page.

WatchGuard Endpoint Security and Kaseya VSA Integration

Carlos Arnal — Thu, 21 Oct 2021 08:00:00 -0700

We are happy to announce that the WatchGuard Endpoint Security integration with Kaseya VSA is now available!

Early this year, we released the WatchGuard Endpoint Security API. A few months later was the integration with ConnectWise Automate. And now, we are happy to share the WatchGuard Endpoint Security integration with Kaseya VSA software.

Both partners and customers using ConnectWise Automation or Kaseya VSA will benefit from these integrations. Our partners will be able to offer better service delivery and reduce their costs. Our customers will be able to monitor and manage computers that run WatchGuard Endpoint Security software with greater automation.

The following are some of the main benefits provided:

Streamline deployment: automated agent deployments or on-demand deployment, installing agents remotely
Simplify management: discover every asset on any network, initiate on-demand endpoint scans, set endpoint security configuration, create tickets and alerts for security events that require your attention, and isolate & deisolate devices
Monitoring: agent and agentless inventory, any kind of malware, indicators of attack (IoAs), and protection status

WatchGuard's integration with Kaseya streamlines partners' and customers' daily workflows and tasks, reducing the time spent managing users' security. It makes it easier to manage a large number of accounts efficiently by automating agent deployment, allowing asset discovery on any network, initiating on-demand endpoint scans, providing set endpoint security configuration, isolating and deisolating devices, and much more.

WatchGuard Endpoint Security Modules Beta

Ricardo Arroyo — Thu, 07 Oct 2021 12:12:46 -0700

A few months after integrating WatchGuard EPDR, WatchGuard EDR and WatchGuard EPP into WatchGuard Cloud, we are happy to announce that the integration of Endpoint Security modules in WatchGuard Cloud is now in beta!

This milestone means WatchGuard partners selling the Endpoint Security portfolio will be able to trial and sell our complete Endpoint Security offering.

Starting from today, our customers and partners are able to take advantage of the beta program and test our new WatchGuard Endpoint Security modules. With this beta, they can start, extend, upgrade, and cancel trials for these Endpoint Security modules in WatchGuard Cloud.

WatchGuard Patch Management (available in WatchGuard EPDR, WatchGuard EDR and WatchGuard EPP): Manages operating system and third-party application vulnerabilities on your workstations and servers
WatchGuard Full Encryption (available in WatchGuard EPDR, WatchGuard EDR and WatchGuard EPP): Encrypts and decrypts disks and USB drives centrally without impact to end users
WatchGuard Advanced Reporting Tool (ART) (available in WatchGuard EPDR and WatchGuard EDR): Generates security intelligence and IT insights to pinpoint attacks, unusual behavior, and internal misuse
WatchGuard Data Control (available in WatchGuard EPDR and WatchGuard EDR): Discovers and monitors personal and sensitive data across endpoints and servers to comply with data protection regulations. WatchGuard Data Control is available in these countries: Spain, Germany, UK, Sweden, France, Italy, Portugal, Holland, Finland, Denmark, Switzerland, Norway, Austria, Belgium, Hungary and Ireland.

For more details on WatchGuard Endpoint Security, please visit the beta site:

https://watchguard.centercode.com/key/WatchGuardEndpointSecurityPlatformBeta

Thank you for beta testing these new products. We appreciate your help in making our products better!

New WatchGuard Endpoint Security Release

Carlos Arnal — Tue, 20 Jul 2021 13:38:11 -0700

As you may know, last month we announced that WatchGuard Endpoint Security was available in WatchGuard Cloud for partners and customers. Now, one month later, we have added new features to those endpoint solutions, as well as to Panda Endpoint Security products.

With these new capabilities, we are bringing more visibility and control to our endpoint security solutions, giving partners the ability to provide greater protection and better service to their clients and more protection and enhanced visibility to our customers.

Automated Threat Hunting Services

Indicators of attack (IoAs) mapped to MITRE ATT&CK Framework
Detailed information about the IoAs detected
Detection and prevention of RDP attacks
Interactive graph view and advanced investigation of an attack
Response recommendations

More control, more granularity

Ability to not only evaluate the risk on your client’s network at a glance, but also individually per computer or server. You will see malware, PUPs, exploits detected, vulnerabilities and IoAs.
More control and granularity in tasks so patches can be installed at a specific day/time of the week or month.

Greater Protection

Integration with the Windows 10 AMSI (AntiMalware Scan Interface). The use of AMSI provides telemetry and additional information about script and macro execution to improve your customers’ protection.
Ability to set web console notifications about scheduled maintenances, new versions available, etc.

We continue to work on adding new features to provide a stronger endpoint security approach for users. Stay tuned as we prepare to release modules into WatchGuard Cloud next!

Save time with Endpoint Trials in WatchGuard Cloud!

Chloe Sabo — Fri, 11 Jun 2021 10:49:05 -0700

WatchGuard is pleased to announce that trials for WatchGuard Endpoint Security products can now be activated in WatchGuard Cloud!

If you are a Service Provider or a Tier 1 Subscriber, trials are a fantastic way to evaluate WatchGuard EPP, WatchGuard EDR, or WatchGuard EPDR for yourself or your customers. With the new Trials page in WatchGuard Cloud, starting a trial of an endpoint security product is as easy as enabling a toggle!

For Service Providers, trials for all managed accounts can be started, upgraded, and cancelled quickly from one page. The Trials page also provides insights into the trial activity and history of your managed accounts.

Endpoint security trials in WatchGuard Cloud are for free for 30 days but can be extended one time during the trial period. If you want to try another endpoint security product during your trial period, upgrades are available. Converting a trial to a commercial license is also easy in WatchGuard Cloud. For subscribers, visit the activation portal. Service Providers can convert licenses for their managed accounts on the Inventory page in WatchGuard Cloud.

To get started with WatchGuard Endpoint Security trials, navigate to Administration > Trials in WatchGuard Cloud. After you start a trial, navigate to Monitor > Endpoints.

Keep Up with What’s New in WatchGuard Cloud

WatchGuard regularly updates and improves on the WatchGuard Cloud platform. To learn more about the developments to WatchGuard Cloud, please refer to the “What’s New In WatchGuard Cloud” presentation, and most recent Release Notes.

Endpoint Security API and ConnectWise Automate Integration

Carlos Arnal — Wed, 21 Apr 2021 12:14:02 -0700

We are happy to announce that the WatchGuard Endpoint Security API and ConnectWise integration is now available!

Early this year we released the WatchGuard Endpoint Security API, allowing our partners and customers to monitor and manage computers that run WatchGuard Endpoint Security software with greater automation.

The features available in the API will allow you to:

Auto deploy our endpoint protection
Build customized dashboards and reports tailored to your specific needs
Create tickets in your ticketing system if, for example, protection is down on a computer or a server

All these automated operations will allow you to offer better service delivery, reducing your costs.

Also, the Endpoint Security API will allow us to implement tight integrations with Remote Monitoring and Management (RMM) tools such as ConnectWise, Kaseya, or SolarWinds N-Central.

In fact, we are about to release the WatchGuard Endpoint Security integration with ConnectWise Automate to help MSPs deploy, manage, and monitor the endpoint security of their clients from a single pane of glass.

With this integration, our partners and customers using ConnectWise Automate and WatchGuard Endpoint Security will benefit from:

Automated agent deployments or on-demand deployment, installing agents remotely
Simplified management being able to initiate on-demand endpoint scans, set endpoint security configuration, and isolate and de-isolate devices from ConnectWise
Monitor malware counters, protection status and much more

The integration with ConnectWise Automate will be released at the end of April. This is the first integration with RMM tools of many others coming soon.

New WatchGuard Endpoint Security Beta

Carlos Arnal — Mon, 05 Apr 2021 15:41:41 -0700

We are excited to announce that the WatchGuard Endpoint Security Solutions Beta is now available to beta test!

Customers and partners can try out the latest innovations in WatchGuard Endpoint Security in WatchGuard Cloud. Our Endpoint Security platform lets you deploy, manage, and monitor your endpoint security from a single pane of glass.

This integration simplifies the operation of the security products allowing partners to be more efficient, helping them to scale and expand their services, and allowing our end users to focus more time on their businesses. Single pane of glass management is only one of the direct benefits they will have, and more importantly, they only need to learn one model and then apply it to different use cases.

Join the beta to try these features and let us know what you think!

NEW in Prepaid Points: Panda Products + Single User Assignment

Sharon Li — Tue, 01 Dec 2020 09:41:14 -0800

We are excited to announce that WatchGuard partners can now use Prepaid Points to assign licenses to Panda endpoint products through MSSP Command!

Pay-as-you-go Prepaid Points is a part of WatchGuard’s FlexPay program, enabling partners to pre-purchase points that can be used later on WatchGuard’s portfolio including Firebox and SaaS products. Points never expire and can be flexibly applied month to month based on evolving business needs.

Starting December 2nd, 2020, MSSP Command will contain options to use points for:

Panda Adaptive Defense
Panda Adaptive Defense 360
Panda Advanced Reporting Tool
Panda Adaptive Defense 360 + Advanced Reporting Tool
Panda Data Control (EMEA Only)
Panda EndPoint Protection
Panda EndPoint Protection Plus
Panda Full Encryption
Panda Patch Management

Additionally, Panda Adaptive Defense 360 is now a part of Passport, and the minimum license assignment for all SaaS products has been updated to 1 instead of packs of 10.

Please note that a Panda Partner Center account must be mapped before assignment of Prepaid Points to Panda products, once this is done, assigned licenses will appear as pooled licenses in Partner Center ready for use.

For WatchGuard partners:

Visit MSSP Command on the WatchGuard Partner Portal (right side of the homepage under “Find It Fast” links section or in the “Tools” section of the menu) to see the updates.

For detailed instructions on activating Panda products: click here

To map your Panda Partner Center account: click here

WatchGuard Releases a Full Endpoint Security Platform

Ben Oster — Thu, 01 Oct 2020 09:24:18 -0700

We are happy to announce the availability of the WatchGuard Endpoint Security portfolio of services. With this announcement, we are ending the Early Access Program that we have been running since June.

Starting October 1st all our partners and their customers will be able to evaluate and purchase the entire suite of products available through the WatchGuard Endpoint Security portfolio! Starting with our flagship solution, Panda Adaptive Defense 360, WatchGuard will provide a complete prevention, detection, and response story through the combination of Endpoint Protection Platform (EPP) and Endpoint Detection & Response (EDR) capabilities.

Panda Adaptive Defense 360 provides two additional differentiators in the Zero-Trust Application Service through 100% classification of all applications, programs, and executables, as well as the Threat Hunting Service which detects the anomalous usage of trusted applications on endpoints. In both third-party testing and the years of experience gained through customer deployments, the effectiveness of the Adaptive Defense solution in combating all types of known, unknown, and zero-day threats, in-memory attacks, and even fileless attacks has been proven repeatedly.

On top of the power of the core security solution, the Endpoint Security portfolio has a wide range of complementary products. These include:

Panda Patch Management: reduce the attack surface and patch Windows systems and hundreds of 3rd party applications
Panda Advanced Reporting Tool: gain IT insight and view deep telemetry in detailed and customizable dashboards
Panda Full Encryption: allows management of endpoint encryption through cloud-based console
Panda Data Control (Europe only): monitor sensitive data to ensure compliance across data at rest or in motion
Panda Systems Management: an easy to administer solution that allows inventory, management, monitoring, and support for many kinds of devices

You can find out more and request a trial here.

DNSWatchGO Now Supports Multiple Client Policies and Client Grouping

Stephen Helm — Thu, 20 Aug 2020 08:43:24 -0700

WatchGuard is excited to announce two new features that enable IT teams to apply and manage unique content filtering policies in DNSWatchGO more easily. This means you can tailor your policies to the specific needs of your users. Historically, users could only apply a Default Client Policy to all of their active DNSWatchGO Clients. Now it is it possible to create Client Groups and apply a unique set of policies for those groups, rather than requiring users to apply a policy to each and every Client.

We’ve added the Client Groups feature to the main navigation of DNSWatchGO, as well as the updated Content Filtering Policy Management page to alert users that they can now manage Client Policies via Client Groups.

Before any new groups are created, all Clients will be placed into the Default Group, which is assigned the Default Policy.
Users can create and name new Groups, as well as assign the desire policies by Group.
Clients can easily be added to the Group.

See the Feature in Action

Contact

For Sales or Support questions, you can find phone numbers for your region online. If you contact WatchGuard Technical Support, please have your registered appliance Serial Number or Partner ID available.

DNSWatch and DNSWatchGO Feature Updates

Ben Oster — Fri, 08 Nov 2019 14:33:45 -0800

Hello everyone and happy November!

We wanted to get a couple of updates out to you around DNSWatch and DNSWatchGO. Having launched on October 1, 2019, we have been hard at work to add new functionality and continue to drive these products based on the feedback we receive from you all. Here are several quick updates for you. Expect more detail to come in our marketing material in quarter four.

Domain Level Content Filtering

We are happy to announce that DNSWatch now allows for the enforcement of domain level content filtering on the Firebox. This allows users of DNSWatch and DNSWatchGO to create a single policy that they can apply both on the network and for their users. It is important to remember that domain level filtering does not allow for the granularity provided by WebBlocker, but several partners have requested this functionality and we know they have been using it effectively!

From an enforcement standpoint, the most restrictive policy is always going to win. This means that if WebBlocker is enforcing stronger policy than DNSWatch, that policy will continue to be enforced regardless of the DNSWatch policy that is set. The opposite is also true. For example, if you block Facebook.com with DNSWatch but allow Facebook.com/WatchGuard in WebBlocker, DNSWatch will block Facebook.com and you will not be able to access the site.

Applying policy is a simple experience! Open the content filtering policy you'd like to apply to the Firebox and select that Firebox from the Networks tab as shown in the screenshot below!

Enforce Safe Search

This was a regular ask from our partners and has been something we have wanted to do for them. We are now able to enforce Safe Search across Google, YouTube, Bing, and DuckDuckGo. Each of these allow for us to hook into their systems to enforce these actions. We've made this a simple option in all our content filtering policies. Create or edit a policy and select "Enforce Safe Search" and you're done! Here is a screenshot of that setting to show the implementation.

Translated Security Awareness Content

We are happy to announce that we have been able to replace the existing security awareness content with a new training company. MediaPro has been a leader in the Gartner Magic Quadrant for Security Awareness training over the last four years. We are excited about the opportunities that this new partnership affords us. The first thing this has allowed us to do is to offer our training content in multiple languages. The Security Block Page in DNSWatch now allows the user to select their language prior to working through the training exercise. These languages are below along with a screenshot showing the experience!

English
Simplified Chinese
Dutch
German
French
Italian
Japanese
Korean
Polish
Brazilian Portuguese
Portuguese
Spanish

Manage Clients

Finally, we have added tools to allow for management of active and inactive clients to the DNSWatchGO product. You now can manually deactivate any clients that you no longer want included in your license count. We have also designed this in such a way as to never break the protection provided by DNSWatchGO for any installed client. If you deactivate a client that is still installed it will be added back to the list the next time it reaches out to DNSWatch. We will continue to improve this capability and our next step is to automatically remove the client when an uninstall is completed.

If you have any questions on any of these items, please reach out to Ben Oster. We're excited to continue to bring new functionality to you and our partners!

Ben, Stephen, and the DNSWatch team!

Now Available: DNSWatchGO and Passport

Stephen Helm — Mon, 30 Sep 2019 15:44:58 -0700

We are excited to announce the availability of our newest user-focused security service, DNSWatchGO. WatchGuard DNSWatchGO provides DNS-level protection and content filtering that keeps your business safe from phishing, ransomware, and other attacks even when your user is outside of the network, without requiring a VPN.

Key Features

DNS-level detection, providing an additional layer of security to block connections to the bad guys
Automatically protects end users from phishing attacks and C2 connections
Enables content filtering by user or group with 120 pre-defined blocking categories to limit access to risky areas of the web
Provides immediate security awareness to heighten end user awareness after an attack
WatchGuard Security Experts deliver tailored analysis of the attacker, type of attack and attacker goals directly to your inbox
Consolidated visibility of all on- and off-network devices protected, including the content that is filtered and any malicious websites visited

How It Works

WatchGuard DNSWatchGO monitors outbound DNS requests, correlating them against an aggregated list of malicious sites. Requests that are determined to be malicious are blocked, redirecting the user to a safe site to reinforce their phishing training.

Download the DNSWatchGO datasheet for more details.

Bundle and Save with WatchGuard Passport

Passport is a bundled offering of WatchGuard’s user-focused security services that includes DNSWatchGO and AuthPoint. Sold as a single per-user license, each service provides persistent, always-on protection that travels with the user and delivers the same level of security on- and off-network.

Passport is chock full of security goodness, but there’s even more to come! As WatchGuard continues to evaluate the best way to provide your users complete protection, additional services, including host ransomware prevention, endpoint detection and response, and anti-malware sandboxing, will be added to Passport. Any new services added to the existing Passport bundle will be automatically included with your purchase!

Now with Passport from WatchGuard you can offer your customers comprehensive, persistent protection against top security threats no matter their user’s location, all in one easy-to-buy SKU.

Download the Passport Partner Brief to Learn More.

Threat Detection and Response is Now Available!

Julian Matossian — Wed, 18 Jan 2017 21:58:09 -0800

WatchGuard’s newest security service, Threat Detection and Response (TDR), is now Generally Available (GA)! TDR is WatchGuard’s first security service that correlates network and endpoint security events with threat intelligence to detect, prioritize and enable immediate action against threats. This is significant, because it is also the first service from ANY UTM vendor to provide these capabilities to the SMB market!

Threat Detection and Response is comprised of four different components:

ThreatSync – enables real-time threat detection and policy-based automated response through cloud-based correlation and scoring. It consumes event data from Firebox appliances on the network, Host Sensors on endpoints, and cloud threat intelligence feeds, correlates the data to generate comprehensive threat scores, and initiates automatic malware response actions. This intelligent prioritization of each individual threat based on its overall level of risk ultimately allows organizations to decrease time to detection and remediation.
Lightweight Host Sensors – extend organizations’ visibility and management to the endpoint by continuously scanning and monitoring security events on devices back to ThreatSync for analysis, scoring and remediation. Previously a frustrating security blind spot for most organizations, this constant flow of data from devices beyond the traditional network perimeter allows users to visualize and address endpoint threats.
Enterprise-Grade Threat Intelligence – TDR enables SMBs to leverage the advanced security benefits of enterprise-grade threat intelligence without the complexity or cost.
Host Ransomware Prevention (HRP) – enables industry-leading prevention against ransomware attacks. Host Ransomware Prevention, working in tandem with the advanced malware protection provided through APT Blocker, blocks the execution of ransomware before any file encryption on the endpoint takes place, mitigating the ransomware attack before any damage is done.

ThreatSync is able to leverage the full power of the Host Sensor and T-series, M-series, and XTMv Fireboxes, not only correlating heuristic and behavioral events occurring on the host, but also correlating security events from other Total Security Suite enterprise-grade UTM services, including APT Blocker, WebBlocker, Reputation Enabled Defense, and Gateway Antivirus.

TDR was designed to provide an additional layer of security that would be complementary to existing preventative technologies, such as anti-virus. TDR works in tandem with existing AV, bringing an additional, powerful layer of threat detection and event correlation to catch anything that AV might miss or be unable to remediate. This means that users or MSSPs don’t need to replace existing AV solutions already deployed.

WatchGuard Blog: Endpoint Security

Endpoint Security: NEW Automated Deployment Scripting for NinjaOne

New Features Added to the WatchGuard Endpoint Security API

NEW WatchGuard Endpoint Security Integration with N-sight

Aether 15 and WG Cloud - New Endpoint Security Release

New Product Release: Panda Email Protection

What is Panda Email Protection?

What is new with this release?

Automatic TDR Host Sensor Upgrade to Endpoint Security Process Temporarily Suspended

Aether 14 and WG Cloud - New Endpoint Security Release

WatchGuard EPDR earns OPSWAT Gold Anti-malware certification

NEW WatchGuard Endpoint Security & N-central Integration

Aether 13 and WG Cloud - New Endpoint Security Release

Greater Protection

Greater Recovery

iOS Support

VPN Enforcement

Endpoint Security Modules Join WatchGuard Cloud

Endpoint Security Modules Join WatchGuard Cloud

WatchGuard Endpoint Security and Kaseya VSA Integration

WatchGuard Endpoint Security Modules Beta

New WatchGuard Endpoint Security Release

Save time with Endpoint Trials in WatchGuard Cloud!

Keep Up with What’s New in WatchGuard Cloud

Endpoint Security API and ConnectWise Automate Integration

New WatchGuard Endpoint Security Beta

NEW in Prepaid Points: Panda Products + Single User Assignment

WatchGuard Releases a Full Endpoint Security Platform

DNSWatchGO Now Supports Multiple Client Policies and Client Grouping

See the Feature in Action

DNSWatch and DNSWatchGO Feature Updates

Domain Level Content Filtering

Enforce Safe Search

Translated Security Awareness Content

Manage Clients

Now Available: DNSWatchGO and Passport

Threat Detection and Response is Now Available!

Contact Information