WatchGuard
US-based WatchGuard offers Firebox firewalls, AuthPoint MFA and EPDR endpoint protection, all in WatchGuard Cloud. AuthPoint plugs straight into Firebox VPN logins.
- Headquarters
- United States
- Positioning
- EntryMid-market
- Official website
- www.watchguard.com
Who it suits
Businesses whose accounts or sales staff log in from home and need every VPN login confirmed on a phone.
Overview
WatchGuard today
WatchGuard Technologies is a US company headquartered in Seattle, majority-owned by the investment firm Vector Capital. Its customers are mainly small and mid-sized businesses, most of which buy through an IT company that manages their systems. In 2020 WatchGuard bought Panda Security of Spain, which became today's endpoint protection line.
How the product families fit together
- Firebox is the core firewall. In 2025 WatchGuard refreshed both ranges: the desktop T Series (T115-W, T125, T145 and T185, some with Wi-Fi 7 and 10G ports) for branches and small offices, and the rackmount M Series (M295 to M695, all with 10 Gbps ports) for head offices. All run the Fireware operating system.
- AuthPoint is MFA with push approval on a phone. It works with Firebox VPN, Windows logon and Microsoft 365.
- WatchGuard EPDR, built on the Panda technology, protects PCs and servers, and ThreatSync correlates Firebox and endpoint events to respond automatically.
- FireCloud Total Access gives remote staff zero-trust access, and WatchGuard also sells access points.
Everything can be managed from WatchGuard Cloud. A Firebox can still be configured locally through its web interface or the Policy Manager application if you prefer not to use the cloud.
Licensing
A Firebox is sold with an annual bundle. Basic Security Suite covers IPS, antivirus and web filtering. Total Security Suite adds sandboxing (APT Blocker), DNSWatch, EDR Core, ThreatSync and Gold support. AuthPoint and EPDR are priced per user or device.
WatchGuard fits businesses of 10 to 200 people that want a firewall and MFA that are not hard to set up.
Strengths
- AuthPoint plugs straight into Firebox VPN, so every remote login has to be approved on a phone. That stops most attacks that rely on stolen passwords.
- The new T Series includes fanless models (T115-W and T145) that can sit in an office or shop without noise and without pulling dust inside.
- It is simpler to configure than enterprise-class firewalls, and many branches can be managed from WatchGuard Cloud without a management server.
Things to know before choosing
- Bundles must be renewed every year. Without renewal the Firebox still passes traffic, but IPS, antivirus and support stop.
- Like every firewall brand, Fireware has had serious VPN vulnerabilities, including an IKEv2 flaw in 2025, that were exploited in real attacks. Firmware must be kept current.
- It is not aimed at large data centers or networks that need advanced SD-WAN. Other brands offer more options for that kind of work.
- Fewer people in Laos know WatchGuard than Fortinet, and there are fewer configuration examples to be found online.
Using it in Laos
WatchGuard suits Lao businesses whose accounts or sales staff log in from home or from the provinces. Forcing every VPN login to be approved on a phone is one of the best-value protections an organization of this size can buy.
Things worth knowing:
- Purchasing: Firebox hardware and licences are ordered through distributors in Thailand. Popular models are usually in stock; newly launched ones may need to be ordered.
- Power and dust: fanless models suit shops and provincial offices with no server room. They still need a UPS, and they should not sit under a hot tin roof.
- Phones: AuthPoint push needs a mobile signal or internet. For staff in weak-signal areas, use the app's one-time codes, which work offline.
- Housekeeping: set the Firebox to send alerts before licences expire. A licence that lapses without anyone noticing is a common finding.
Good fits: accounting firms, logistics companies, distributors, private schools and clinics.
Compared with alternatives
Fortinet offers more SD-WAN capability, manages switches and Wi-Fi from the firewall, and is easier to staff. Sophos is the better pick if you want an MDR team watching 24/7. SonicWall is a comparable choice for branches and shops. Pick WatchGuard when MFA on VPN and an uncomplicated setup matter most.
Product lines
- Firebox
- AuthPoint
- WatchGuard EPDR
- WatchGuard Cloud
- WatchGuard Wi-Fi
Solutions that use this brand
Next-Generation Firewall (NGFW)A firewall that knows which app and which user, with IPS, web filtering, HTTPS inspection and VPN, sized on real all-features-on…
Secure Remote Access (VPN/ZTNA)Staff and contractors reach internal systems from anywhere through VPN or ZTNA with MFA, seeing only what they need.
Endpoint Protection & EDREDR that watches behaviour, not just virus lists. It stops ransomware mid-run and cuts an infected PC off the network at once.FAQ
Should we buy Basic Security Suite or Total Security Suite?
Basic is enough for small branches that mostly browse and connect back to head office over VPN. Total adds sandboxing, DNSWatch and automated response, which suits head offices and places where staff open a lot of email attachments. On a tight budget, put Total at head office and Basic at the branches.
Does AuthPoint work with anything besides the VPN?
Yes. AuthPoint works with Windows logon, Microsoft 365 and many cloud applications that support SAML or RADIUS. The same licence can protect both VPN and email, the two doors attackers try most.
Can we keep using an older Firebox, such as a T40 or M370?
It depends on the end-of-life date WatchGuard has published for that model. Once support ends there are no more security fixes, which is risky for a device facing the internet. Check the date before renewing, and if it is close, move to the new T Series or M Series.
All brand names and trademarks belong to their respective owners. Mention does not imply official partnership unless explicitly stated. Products are sourced through legitimate distribution channels.
Send us a floor plan or a few photos of the site
We’ll come back with a few questions, then a first design. The first consultation is free, in Lao, Thai or English, on WhatsApp or our Facebook page.