WatchGuard EPDR Reviews

I'm talking about WatchGuard EPDR, which is endpoint protection. I try to remember if we have them in our system, and I don't think so now. We have the basic security systems. We are going to be using authenticating, but we haven't had time to get them working yet.

I check them out, but in Finland, we are small companies and small businesses, so we usually don't use the cloud versions. WatchGuard EPDR authentication will be a cloud thing. I have worked in a company where we had cloud guys, but I haven't been using those cloud services so much.

I think there's quite a good balance in everything with WatchGuard EPDR. There are tools to do things and watch what's happening. Everything is in the same tools and quite well designed or thought about how to do things. That's the reason I've been enjoying them.

In every security tool, the benefits of using WatchGuard EPDR, particularly forensic analysis, is how much inside view you get of what's happening. It gives you a better picture of the threats and how to deal with them. The speed at which you can get to the problems is always the important thing.

I think there's always something that needs to be improved about WatchGuard EPDR, but I don't have something specific to say that you should do this or that. They are listening to the users, so they are fixing things as they've been found. I don't have any example to give.

The pricing is always a thing where you need to be in the line that the balance to get it right is a challenging thing with WatchGuard EPDR. If you have good features, then you can have a little bigger price, but if you just get the balance right, that's important.

I haven't used automated incident response in WatchGuard EPDR.

I have been actually working with WatchGuard EPDR for more than five years.

I am satisfied with the work of WatchGuard EPDR support. They have always been very responsive so that you can get the support and they are really getting your case straightaway.

I think there was a little complexity in deployment when I actually deployed WatchGuard EPDR. In some early days, you needed the Windows software to do it. That was a thing which was always told to the support guys whether they could do other ways to do that so that you don't need to always have the Windows machines with it. Now there are web interfaces also.

In my case for WatchGuard EPDR, you can get it running quite fast, but getting all the things configured does take time. Every installation is a little bit different. Usually, it will work straightaway when you put it on, but it will need some configuration for every case. There's always something to do. You can do it in a couple of days if you just do that. Usually, there are bigger things when you're putting a whole system up and there are much more things to do. So usually, you do something in the first phase and then in the later time, you put the rest running.

For the smaller installations, I usually do it myself, but in bigger things, we usually have other guys to help. I also participated in deployment.

I don't work with WatchGuard EPDR Secure Wi-Fi for wireless LAN.

I usually assess the effectiveness of WatchGuard EPDR's machine learning in detecting unknown threats case by case. You get some feedback from the customer that there's something, problems with this, and then you fix and see why it doesn't work. Then you fix your rules and settings.

I only just checked out the threat hunting feature, but I haven't used that so much.

I'm so used to WatchGuard EPDR's way to do things that for me, the interface is fine. I think there's always some learning needed when you start to use it. I would rate this review an 8 out of 10.

We have several use cases for WatchGuard EPDR for the different packages that we have included in the basic WatchGuard bundle. We use several of its products, such as the software deployment software, the management features, the remote management features, the encryption feature, and that is all besides the normal patch management and AV protection.

The best features of WatchGuard EPDR are the remote management features. We currently use it to set a default admin account on all machines through the console, which was a good feature that I was not even aware of until a colleague used it over the last two weeks to implement that change.

The software deployment is also a key aspect of the solution. There are additional licenses we can purchase for additional features, but for our use, these are the main features we currently utilize.

I would not be able to say what areas of WatchGuard EPDR have improved, as I do not work with the product myself so much anymore. I just used to assist with installation and deployment, especially for BitLocker encryption. 

An area for improvement would be the software deployment to seamlessly deploy software packages across multiple machines simultaneously, and to enhance the remote monitoring capabilities.

WatchGuard EPDR is a very stable solution and is not resource intensive.

WatchGuard EPDR is very competitive regarding its scalability. It performs its intended functions effectively, and when compared feature by feature, it performs quite competitively.

The technical support from WatchGuard would rate at about an eight on a scale of 1 to 10, where one is the worst technical support and 10 is the best technical support.

Positive

Regarding the pricing of WatchGuard EPDR, the pricing is competitive because we receive it at a partner price, and when compared with others, it is more or less either the same or slightly cheaper. This is particularly beneficial considering the features included.

Based on current experience, WatchGuard EPDR receives an overall rating of eight out of ten, where one is the worst solution and 10 is the best solution.

WatchGuard EPDR is for endpoint computers and devices, and a Firebox is a firewall.

What I appreciate the most about WatchGuard EPDR is that with the managed detection and response system, when there is an alert about the product running, the turnaround time for enabling it is less than two hours.

Real-time insights powered by advanced machine learning are helpful to me.

Being a managed detection and response system, the distinctive telemetry feature works effectively. The threat assessment operates 24/7, with people working in the background on any alerts from our endpoints. They might be using AI because their turnaround time is impressive. For example, we recently updated a piece of CAD software on one of our CAD machines. During the process of running it after the update, the computer, which was a couple of versions behind the hotfix update, sparked concerns for the WatchGuard endpoint which blocked programs. Over the space of 25 minutes, as I sat there, I watched those blocked components become allowable by a pop-up window in the bottom right of the computer I was working on. All I had to do was open it and close it until I saw that it was functioning correctly and I was getting no more alerts. That process took less than 25 minutes.

I think there are some areas for improvement, as usually everybody's platform has some areas of improvement. At the moment, we're waiting for them to roll out a product that can be used by the distributor or supplier related to DNS filtering, and that hasn't come through to the end user yet. They need to get finished working on that.

Only the DNS filtering part could be improved, and nothing else apart from this needs correction.

I currently work with WatchGuard EPDR.

I think WatchGuard EPDR is stable enough, as I do not see any glitches or performance issues.

I think WatchGuard EPDR is easy to scale, and I have not faced any limitations. If you've got the money, it scales well.

I would rate scalability a 10 out of 10.

I would rate technical support as excellent.

I have seen some positive impact from using WatchGuard EPDR because it's less painful than the previous product we were using, has more functionality, and is easier to manage.

In comparison with Sophos on functionalities, Sophos didn't allow me to individually reset a computer, reboot a computer, do patch management, or get access to command line through a web interface. WatchGuard EPDR offers more remote management capabilities.

The initial setup was straightforward for most products, but it only becomes more complicated once I start to administer them and get down into the detail.

I can say that knowing you have a product like WatchGuard EPDR that's working 24/7 to help protect students in a school is good for ROI.

I think the solution is affordable in comparison to Sophos or other competitors, and that's why we went with it because it was cheaper.

The initial outlay was going to be cheaper than replacing and renewing Sophos, and that included hardware as well, although everybody has maintenance costs.

I cannot connect next week. I would rate WatchGuard EPDR a 9 out of 10.

We are using endpoint solutions such as Panda Adaptive Defense 360, but currently we are using Panda. We are using it to protect the computer. I am a customer for Panda, just a user, not a reseller.

What is really great about Panda Adaptive Defense 360 is its console in the cloud, and it can keep the inventory of software in the PC. We collect the inventory, software inventory, and collect what we install in the computer. It can track what software is in the computer.

I use this function the same as with other antivirus. This function helps to detect what software is installed in the computer.

Monitoring in Panda Adaptive Defense 360 is good; if anything suspicious occurs, they will send an email to the administrator.

Automation is present in Panda Adaptive Defense 360.

I have no idea if I use some automation functions.

I can't find any disadvantages; maybe that is because many companies haven't used it.

I would prefer to see some features such as AI in antivirus solutions.

I appreciate reporting, but it could be better with monthly reporting or auto-generated monthly reports.

We have been using it for more than five years.

It's not too difficult because it's easy to install, and it can also detect all the PCs which are connected to the internet. The console also summarizes all the viruses that are detected, so I am quite happy with Panda Adaptive Defense 360 currently.

I find Panda Adaptive Defense 360 stable.

It is also scalable. I would rate scalability for Panda Adaptive Defense 360 about seven out of ten.

Technical support for Panda Adaptive Defense 360 is provided by the reseller, and they also do preventive maintenance yearly.

I appreciate the support from them; it's quite satisfactory.

I would give seven points for support. I give seven and not ten because currently there's not much problem; there is no problem from Panda Adaptive Defense 360, so the support is not really tested.

Positive

I am not sure how much the other antivirus solutions cost. I think they are quite pricey. If we need to install another antivirus, we need to reinstall everything on all the PCs. The location of my computer is at various places.

When discussing the need to change to another antivirus, we need to uninstall and reinstall new antivirus. That applies to each of the computers, and currently at my branch there are too many devices.

That's the one, correct. I appreciate this feature.

I do not want to speak more about some other products.

I think the pricing is normal because we subscribe for three years. Regarding pricing, I am not sure because I did not compare it with other antivirus; maybe it is pricey.

I would rate Panda Adaptive Defense 360 overall eight points because I still try to find another solution that is easier for me, which can provide what I currently have in Panda Adaptive Defense 360. The issue is that if I want to install another antivirus, I need to reinstall on all the computers in all the branches, which is quite tough actually.

There is nothing difficult in Panda Adaptive Defense 360. No software is perfect. I just don't want to give it a 10. Let me think of one example or one thing which is not perfect in Panda Adaptive Defense 360. On a scale of one to ten, I rate this solution an eight.

My use cases primarily focus on security. I utilize endpoint protection when I am traveling, as I seek security. I find that WatchGuard is one of the best in these terms.

First of all, the product itself is very hardy. I can put tons of load on it. Whether it is a small box or a high-end box, the small box will not give up in any case. It will function until its RAM or CPU are fully utilized. In terms of hardware, I would say WatchGuard is one of the best compared to Sophos and FortiGate, among all the firewalls. 

I have not used much of Palo Alto and Check Point, so I can't say much about them. However, leaving out Palo Alto and Check Point, compared to all other devices, WatchGuard is the leader from my perspective. Ransomware is one of its handled threats. 

Application-based configurations work excellently. The cloud of WatchGuard lets me see all my devices, updating me to minute levels with detailed information, such as patch status and vulnerabilities. This functionality is among my favorites in endpoint protection and Doctor.

I have not found anything requiring improvement. However, overall, the category level should be enhanced. The categories in the web filtering should be more comprehensive. When a URL is not categorized, I face issues. Although it's not a major problem, it could be improved. 

Other firewalls allow adding categories and in-app controls which WatchGuard currently lacks. Furthermore, while I can create groups for VPN, SSL, IPSec, and others, I can't make groups for IPs. I have to add them manually in rules. These are the two areas where I would suggest improvement in WatchGuard.

As a partner, I have been working for the last four years. I have been working with WatchGuard since 2016.

There are no stability issues. It is very stable with no hanging problems. Unlike other endpoint protection competitors that cause machine slowness, WatchGuard is very lightweight. Installing and uninstalling is not an issue.

Scalability is good for me since it has two or three features which help with this process.

The support team is very knowledgeable. When I call support, they send articles that can be referenced. Usually, issues are resolved via email. They create a case, tell me to refer to articles, and if not resolved, they take a remote session to solve the issue. I find WatchGuard support to be very good.

Neutral

I have worked with Sophos, SonicWall endpoint protection, Quick Heal, K7, and E Scan. However, the results I have obtained from WatchGuard are unmatched, with no comparisons.

We handle implementations ourselves for every client and do it on the cloud. For a single user, only a few clicks are needed. For multiple users with Active Directory, the system makes it easy to push updates. Without Active Directory, the IT team needs to manage installations individually or via email links. Active Directory is preferred as it simplifies the process.

The pricing is slightly high, but the product quality justifies it. The price is fair, neither too high nor too low. Considering all its features, an increase in price would be justifiable.

WatchGuard is commendable for its work on threats. EPDR offers a one or two-month trial period. It is relatively straightforward to use compared to competitors. 

Overall rating: nine out of ten.

I work with Panda from Panda Endpoint Security by WatchGuard. I use Panda Adaptive Defense 360.

The EDR has a high accuracy rate with only a few false positives. I have never had an incident since using the product. 

Additionally, I can book events, use data control and full encryption, and access advanced reporting tools. It effectively monitors everything, reducing the need for extensive security staff. It prevents issues with Trojans and encryption Trojans, providing efficiency in network oversight.

The software has performance issues due to its requirements on the processor, however, these issues are common with other vendors, not just WatchGuard.

I have been using it for a long time, not just a couple of months.

I am very satisfied with the stability. I haven't faced any major issues.

When I contacted them, I was satisfied with the customer support. Normally, I have no incidents, so I don’t need much help.

Positive

The initial setup was really easy. It took only minutes since it involves just one installation on a server, allowing for deployment over the network if the firewall is compatible.

I find it very useful as it reduces the typical problems associated with Trojans and encryption Trojans and minimizes the need for a dedicated security team.

Although it is not a cheap solution, it is satisfying and functional. It is worth the money and provides good return on investment.

I would give the overall solution a rating of ten out of ten. I am very satisfied with its work and functionality. 

We centrally control all our end-user devices, maintaining patches.

The detection capabilities for malicious activities are effective.

Panda Adaptive Defense 360 is not compatible with certain network devices like access points, switches, or routers, which would be an area for improvement. We also face false positives, which are a risk for legitimate applications, causing some inconvenience until they are whitelisted. 

Additionally, the solution's data control capacities need better visualization to avoid downloading and analyzing files manually.

I have been using it for more than eight years.

The stability is approximately a seven to eight out of ten. It's stable, yet there are some exceptions.

I would rate the scalability as eight out of ten; it seems to scale well.

I would rate the technical support at a seven ut of ten.

Neutral

I used different solutions in different organizations, such as Sophos, however, there was no particular switch from Sophos to Panda.

I did not have much experience with the initial setup. As per documentation, it seems easy.

I would rate the pricing as six out of ten, and its costs appear to be moderately priced.

We compared it with WatchGuard EPDR, which has acquired Panda.

I'd rate the solution seven out of ten.

My organization's IT team deploys the product for our clients' servers. Our company's different customers use the whole tool, which is Panda Adaptive Defense 360 since we sell it as a full tool that offers EDR services.

The most valuable features of the solution stem from the fact that I like the tool's UI, ease of management, ease of making reports, and the ability to export information easily.

The frequency of the restarts required during the deployment phase is one area that I don't like about the product. For some urgent updates, I don't like the need for the tool to be frequently restarted. The aforementioned area can be improved.

In my company, I have disabled Panda Adaptive Defense 360 for our test servers. It is important to improve the resilience of the product sensitive to difficulties in disabling or removing Panda Adaptive Defense 360 from our company's infrastructure.

I have been using Panda Adaptive Defense 360 for five years. My company is a reseller of the product.

I have contacted the solution's technical support. The solution's technical support team is not good. I don't like the solution's support team since they take a long time to respond and fail to provide proper resolutions. In general, it is difficult to get a solution or a proper response from the solution's support team. My company even plans to meet a representative from Panda Adaptive Defense 360 in the upcoming week to discuss the problems with the support offered for the product.

I rate the technical support a two out of ten.

Negative

I don't know why my company uses SentinelOne internally.

In my company, we work with SentinelOne. The fact that it is difficult for the people in my company to understand SentinelOne pushed me to check the difference between SentinelOne and Panda Adaptive Defense 360 on the internet.

My company helps our customers implement the product in their environment by helping them with the deployment process by making a login account on the solution, after which we configure the rule and profile. My company uses Panda Adaptive Defense 360 with ART to ensure that we get the capabilities of EDR and advanced reporting tools.

The product's deployment phase was easy.

I rate the ease of use and management of Panda Adaptive Defense 360 an eight on a scale of one to ten.

The tool's ability to provide information about the vulnerability is the most impactful feature of the product that has an impact on our company's security posture.

Speaking about scenarios where the solution effectively prevented the security breach, I would say that our company sees how the tool blocks when our customers accidentally click on some malware, after which it quarantines that file. My company makes a playbook with the SOAR tool that Panda Adaptive Defense 360 uses to block and isolate attacks. In our company's system, if there is a big event that occurs, then to block the endpoint, we use SOAR with Panda Adaptive Defense 360 to block and isolate attacks or threats.

The solution's real-time monitoring has improved our company's ability to detect threats if we use it in our company with Panda SIEMFeeder. Only if in my company there is a need to do some research, prepare a report, or if we want to change the policy, so it is not very often that we use the visualization part of the tool in our company.

The reporting and analytics part of the tool has helped with the decision-making in our company since we combine different kinds of logs and situations from different ingestion logs, and we can configure a specific alert. In my company, we use the tool's data search functionality if required to check the information we need. Presently, our company uses the configuration alert and SIEMFeeder in our system.

I rate the tool a nine out of ten.

The solution uses AI to monitor behavioral analysis on the endpoints. It gives a baseline of normal behavior and alerts me about strange things happening on the endpoint. It also works with my other subscription services, like DNSWatch and IPS.

The AI monitors what is normal behavior for a person while they're using an endpoint. I get an alert if an application does something other than what is considered ordinary. For instance, if someone hasn’t been using their computer for the last two months and hasn't uploaded anything to OneDrive and suddenly uploads 5 GB of data to OneDrive, I get an alert. The reporting feature is valuable. The integration with the firewall is useful.

The AV and scanning features could be a little bit better. The product does not find some things when we initialize a scan compared to our secondary product, Palo Alto XDR.

I have been using the solution for over 20 years. I am using the latest version.

The scalability is good so far. We have about 800 users. We are a medium-sized organization.

The support is fantastic. In the 20 years I've had the product, I've only raised three support tickets, which says quite a bit about the product. They have their own user forms. I tend to look for a solution before raising a ticket. The forms are much easier to deal with because several moderators from the company review them. So, when we post a question, we get an answer almost immediately.

Positive

The setup is very easy. We have deployed the solution on-premise but can also do it on the cloud. It has a cloud functionality. I can push it from the cloud directly to the endpoint, or I can do it via a group policy. The enterprise-wide deployment takes a day.

It is very simple. Once the agent is deployed in any subnet, it monitors the network traffic and informs me about endpoints that don't have the agent. I get alerted via a report. If I have a problem, I can manually deploy on those endpoints. The product is set to auto-update. It updates on its own.

We have received a fantastic return on investment. The tool has reduced the amount of time technicians spend on endpoints for malware and spyware. It stops the attack before it infects the endpoints.

The price is excellent. The tool is bundled with my firewall subscription. On the other hand, Palo Alto XDR is a totally separate product and is a little pricey, but it's definitely worth it.

VPNs are the only thing we don't currently offer to users. If someone has a laptop that is not corporate, we can forward it to an MPS server and get the agent installed. We haven't gotten that route purely because of licensing. I will recommend the product to others. I prefer WatchGuard’s firewall. The integration of the solution with the firewall pricing is beneficial for me.

Due to all the integrations, we have one single pane of glass for logging and auditing. It brings everything together and makes it a little simpler to see what's going on in our network. The price is excellent. The features are excellent compared to anything on the market. Overall, I rate the solution a ten out of ten.

This is one of the best solutions for servers for advanced users. Advanced users, such as those working with banks and who have to make payments, are exposed to more attacks. The people whose job is to write, create invoices, register products, or do quotes. They don't need the EPR. They can use a cheaper solution.

Panda Adaptive Defense 360 is designed to provide comprehensive security for endpoints. Rather than focusing solely on the protection brand, it emphasizes the importance of delivering a service that ensures the safety of users' endpoints. The goal is to enable users to work without interruptions, confident that their information is secure and protected from misuse. 

The solution provides protection, including ransomware and mail protection. It can recognize and mitigate a wide array of spam and phishing attempts. The software is adept at distinguishing legitimate emails from malicious ones, ensuring that users receive genuine communications while being protected. Additionally, it is lightweight and unobtrusive to users, providing adequate protection without impacting system performance. While advancements such as cheaper data processors may enhance its capabilities, maintaining its agility and transparency remains paramount.

The software can improve the number of messages we are receiving in case of an attack.

I have been using Panda Adaptive Defense 360 for two to three years. We are using the latest version of the solution.

I rate the solution’s stability a nine out of ten.

The solution’s scalability is good.

The technical support is not good because they must receive many emails and information. Also, the response is not good.

Positive

The setup is really easy. Now, you only have to download the agent, but you can also push the agent to the computer. All the policies are managed in the cloud console, making handling easier. 

People don't manage the software because they use computers for daily tasks and jobs. The individuals responsible for setting up the software are from 360. They need a user-friendly, better console to receive emails informing them about attacks.

Combined with other brands, the solution is not the cheapest.

Overall, I rate the solution a nine out of ten.