Product and Support News

High VPN Authentication Performance

The new AuthPoint Gateway now has a redesigned RADIUS component to support instances when a higher number of employees are using multi-factor authentication at the same time.

As businesses shifted to a remote environment, the volume of VPN connections increased dramatically, and which could cause some delays especially during peak hours where a larger-than-usual number of users try to connect into their networks (between 8:00-9:00 AM local time).

This improvement should provide a faster VPN authentication experience to all AuthPoint users at any...

Summary: 
WatchGuard Wi-Fi Cloud Analyze, Engage, and the Customer Provisioning Portal (CPP) will be updated starting on Friday, April 24, 2020.

When: 

Analyze
EMEA region: Friday, April  24, 2020 (12:00AM – 6:00AM GMT)
AMER region: Friday, April 24, 2020 (12:00AM – 6:00AM PDT)
APAC region: Saturday, April 25, 2020 (12:00AM – 6:00AM HKT)

Engage
All regions: Friday, April 24, 2020 (12:00AM – 6:00AM PDT)

CPP
All regions: Saturday, April 25, 2020 (1:00AM – 2:30AM PDT)

Maintenance Window: 
6 hours

Duration: 
4 hours for Analyze and Engage
1 hour for CPP

Impact: 

• An...

Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in March:

Articles

• How can I help my users work remotely during the COVID-19 crisis?
• WatchGuard AP does not appear in Wi-Fi Cloud after activation
• WatchGuard Response to COVID-19
• Use AuthPoint MFA to protect remote worker connections and credentials
• How to connect to a wireless Firebox to use the Setup Wizard in Fireware v12.5.3 and higher
• Can Azure AD AuthPoint Users Use Office 365?
• Run Reports in Dimension That Show Authenticated Users

Known

...

Hello everyone!

This is going to be a short entry, but we wanted to make everyone that is using DNSWatch alerts to create tickets in their own PSA, RMM, or other ticketing systems aware of an upcoming change. Currently, communication for alerts and other account related communication comes from the email address [email protected]. We are replacing this address with the WatchGuard Cloud standard product notification email of [email protected].

This roll-over is slated for Wednesday April 15, 2020. We ask that between now and then you update any impacted...

WatchGuard has posted Fireware 12.5.3 and WSM 12.5.3 in the Software Download Center. These new releases introduce several key bug fixes and some new enhancements. Full details are provided in the Release Notes and the What’s New presentation. We’ve seen a huge increase in the number of people using Mobile VPN for remote access over the past few weeks, so please note that this release also includes an updated version of the SSL VPN client for Mac and Windows. 

Key Updates of This Release:

• Mobile VPN with SSL improvements, including the elimination of an upgrade prompt that did not apply...

We are excited to announce the general availability of Machine Learning Enhanced Host Ransomware Prevention!

Ransomware authors are getting smarter and bolder. Every day they find new ways to avoid detection and steal data. TDR already protects your endpoints from devastating ransomware attacks. As ransomware attacks evolve, we must improve our ability to stop them with faster detection through machine learning.

Machine Learning for Host Ransomware Prevention

In 2018, we enhanced TDR's Detection and Response (D&R) engine with machine learning. This significantly increased our general...

As the world confronts the COVID-19 pandemic, we want to extend our heartfelt wishes that all remain in health and safety during this difficult time. Our hearts go out to the families of those afflicted by the virus. We also want to thank the members of the community on the front lines of this crisis for their tireless and selfless dedication.

Addressing Implications of a Remote Workforce with WatchGuard

While the response to coronavirus has been unprecedented, for many businesses this “work-from-home” experiment launches them into decidedly unfamiliar territory. Home networks are...

We are happy to announce that AuthPoint Gateway v5.3.1 was just launched, adding support for RADIUS MSCHAPv2 authentications to Active Directory. This means that you can now create IKEv2 VPNs, authenticating users to Active Directory, using AuthPoint as your MFA solution.

Why IKEv2?

• IKEv2 is the most secure VPN option available today
• It is natively available on Windows, macOS, and iOS, and it is easily used among Android users with apps such as StrongSwan
• For Firebox customers, being IPSec-based, IKEv2 can take advantage of crypto acceleration available on Firebox appliances...

Good morning TDR Users, 

On 11 March 2020, a pen testing company, RedTeam PenTesting GMBH, disclosed a credential disclosure vulnerability in the AD Helper to exploit-db.com (link below). The disclosure states that by accessing the AD Helper web interface, a call to an API endpoint is made which responds with plaintext credentials to all configured domain controllers.

On 9 March 2020, WatchGuard released a fix for this vulnerability in AD Helper 5.8.5.10317. In this version, the offending REST endpoint no longer returns plaintext passwords. In addition, the service running the...

Good morning TDR Users,

WatchGuard has released an AD Helper update, to be deployed immediately. This update resolves an issue found by RedTeam Pentesting GmbH and improves the security of the AD Helper. WatchGuard thanks RedTeam Pentesting GmbH for reporting this issue so that we could resolve it quickly. 

In AD Helper version 5.8.5.10317 and higher, the service that runs the AD Helper Configuration UI will only be available locally through the loopback IP address (localhost/127.0.0.1). This means that users must now log in to the computer locally to access the AD Helper Configuration...