WatchGuard EPDR Reviews

My use cases primarily focus on security. I utilize endpoint protection when I am traveling, as I seek security. I find that WatchGuard is one of the best in these terms.

First of all, the product itself is very hardy. I can put tons of load on it. Whether it is a small box or a high-end box, the small box will not give up in any case. It will function until its RAM or CPU are fully utilized. In terms of hardware, I would say WatchGuard is one of the best compared to Sophos and FortiGate, among all the firewalls. 

I have not used much of Palo Alto and Check Point, so I can't say much about them. However, leaving out Palo Alto and Check Point, compared to all other devices, WatchGuard is the leader from my perspective. Ransomware is one of its handled threats. 

Application-based configurations work excellently. The cloud of WatchGuard lets me see all my devices, updating me to minute levels with detailed information, such as patch status and vulnerabilities. This functionality is among my favorites in endpoint protection and Doctor.

The solution uses AI to monitor behavioral analysis on the endpoints. It gives a baseline of normal behavior and alerts me about strange things happening on the endpoint. It also works with my other subscription services, like DNSWatch and IPS.

The AI monitors what is normal behavior for a person while they're using an endpoint. I get an alert if an application does something other than what is considered ordinary. For instance, if someone hasn’t been using their computer for the last two months and hasn't uploaded anything to OneDrive and suddenly uploads 5 GB of data to OneDrive, I get an alert. The reporting feature is valuable. The integration with the firewall is useful.

We have around 350 endpoints protected with EPDR, and it's been working well so far. We run EPDR with patch management. We can check for vulnerabilities in their applications, patch their OS, and patch all of their applications remotely from our WatchGuard cloud dashboard.

The way it quickly applies configurations to our endpoints is genuinely amazing. For example, if we have a web filter configured and need access to a site that the filter is blocking, a customer calls us, and we can add it. Within five seconds, everybody has a connection to it. Also, the intrusion information, such as the Mitra Tech database, helps us measure the attack surface, pinpoint where the attack is happening, or identify the stage of intrusion within the network or device. It's beneficial. For instance, we could monitor lateral movements of intrusions inside a customer's network. Just about a month ago, we had a case where a customer with 80 devices detected that a kiosk had malware installed. They were using it as a satellite device within the network. We were able to identify and neutralize the threat promptly.

WatchGuard EPDR is useful in large organizations with over 200 endpoints because the starting prices of the other tools in the market are higher for solutions like Trend Micro Worry-Free Business Security Services. WatchGuard EPDR offers a friendly user interface, which is very good for doing a lot of analysis and as a part of threat detection and response.

The zero-trust application service that WatchGuard EPDR runs is good. If there aren't any matches for a signature or a file, the solution will initially run them on a sandbox and determine if it is secure to run it in the environment. Ninety-nine percent of the time, it is done with AI, while only one percent of the time, it takes less than twenty-four hours for human intervention. You get a good experience with the tool, but sometimes it can be a bit stressful because the tool doesn't have the signatures to run it, making the product take twenty minutes instead of five minutes, but it is good.

We use the tool for endpoint protection. 

WatchGuard EPDR improves organization primarily by supporting the IT team rather than the end users directly. It helps IT teams accomplish more with fewer people. One of its standout features is the patch management solution, which allows companies without up-to-date services like WSUS to manage patches for Windows and Linux systems. Additionally, it provides the usual endpoint protection features such as virus and malware protection, application control, and website control.

The tool's most valuable feature is patch management. Patch management is particularly valuable because few other companies, like Trend Micro and Kaspersky, offer integrated patch management solutions within their endpoint protection products.