Events

The WatchGuard Agent brings endpoint operations under one roof with a single, lightweight installer that unifies Endpoint Security, MDR, FireCloud, and NDR collectors, all managed from WatchGuard Cloud for streamlined control and automated updates.

In this sales engineer–led session, we’ll highlight:

• the current and future products that will be covered by this universal installer
• its ability to provide granular control over which machines have what software installed on them
• cover the options to distribute this software to client devices

The WatchGuard Zero Trust Bundle brings identity confidence, device integrity, and secure access together in a single, cloud-delivered architecture that can be deployed with minimal overhead. A single purchase delivers the complete zero trust solution, and a single agent deploys it seamlessly across your environment. Key components include: Total Identity Security,  EPDR (Endpoint Protection, Detection & Response) & FireCloud Total Access. 

AI is everywhere in cybersecurity. For partners, the real question is not about the technology. It is about your people.

Is AI replacing analysts, or making them more effective?

In this session, we break down the differences between automation and augmentation and why they matter for MSPs delivering security services. Automation removes repetitive SOC work such as triage, enrichment, and basic containment. Augmentation strengthens human experts with faster investigation, clearer attack mapping, and smarter response decisions.

Together, they change the economics of your security practice.

You will learn:

• How AI reduces manual workload across your team
• How automation handles initial investigations in seconds
• Why human oversight improves quality and consistency
• How an AI-augmented SOC helps you scale without adding headcount

The future SOC is not human or machine. It is human amplified by machine.

The 2025 MITRE ATT&CK Evaluations (Enterprise Round 7) introduced a fundamental shift in how endpoint security effectiveness is measured. Beyond detection coverage, MITRE now exposes operational friction—alert noise, false positives, and business disruption caused by overly aggressive controls.

In this session, we analyze Scenario 1, “Hermes”, a real-world inspired cyber-espionage campaign modeled after Mustang Panda. This low-and-slow adversary leverages living-off-the-land techniques, legitimate administrative tools, and stealthy lateral movement to evade traditional defenses. For the first time, MITRE explicitly injected legitimate administrator activity to test whether security platforms could differentiate real attacks from normal IT operations.

WatchGuard’s results demonstrate that high-fidelity detection and early-stage prevention do not require sacrificing operational efficiency. Attendees will learn how WatchGuard achieved full attack visibility, zero legitimate activity disruption, and early blocking of malicious actions—proving that precision, not noise, is the future of endpoint security.