The pricing of WatchGuard Threat Detection and Response could be improved. It's not the cheapest option available. That said, it often meets our needs effectively. There are areas for improvement in making the product more economical. In the future, I would like to see enhancements in eliminating threats more intuitively, allowing easier identification of issues.
I'm just looking for a few extra features, which are likely included in XDR and the other additional software services. Mainly the FortiEDR system. If I go through the computer status and look at the risk, it's a very basic assessment. Compared to Rapid7, which is a highly rated vulnerability scanner, WatchGuard is more limited. Rapid7 can give me vulnerabilities like autorun being enabled and provide solutions to fix them. It can also reassess vulnerabilities. However, the EDR Core I'm using only gives me basic information, like "File full of fire and execution detection" as a high vulnerability. It doesn't tell me how to fix it, just that it's a risk. It's very minimal in terms of risk assessment. Rapid7 would say, "This software is outdated," or "You're using an older version of SQL." It's much more detailed, whereas EDR Core is more scaled-down and doesn't provide a full assessment. So, I'd like a few extra features, especially around threat severity assessment.
One area of improvement is the deployment process; it is not intuitive. The centralized administration and management, as well as the cloud-based interface, specifically the user interface (UI), menus, and module configurations. The administrative UI/UX could be significantly improved. Compared to other solutions, I would say it's not a complete solution in certain settings. The centralized administration and XDR capabilities need improvement. One aspect that many firewall and network security manufacturers fail to understand or integrate well is the endpoint, XDR, or EDR solutions. For example, Cisco has its own endpoint solution, which is not very good, and other manufacturers like Check Point or Palo Alto have their own EDR solutions. The primary issue is that they haven't effectively integrated these solutions with other manufacturers to create a more comprehensive and cohesive offering. It's important to have a solution that integrates anti-malware and antivirus XDR features. In terms of mobile device management, that's a feature I haven't seen.
Learn what your peers think about WatchGuard Threat Detection and Response. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
Network Security Services at ACE Managed Securty Services
Real User
Top 5
2023-02-17T05:29:00Z
Feb 17, 2023
WatchGuard Threat Detection and Response (TDR) is an excellent tool for keeping your business secure, but there are some areas where it could use improvement. For one, the dashboards can be confusing to navigate through. On top of that, the reporting capabilities of TDR could also use a facelift; current reports don't give users the in-depth data they need to make informed decisions. Finally, Threat Detection and Response could benefit from a better alerting system; it's often difficult for users to quickly identify when an issue has occurred. With some innovative changes, Threat Detection and Response can take your business security to the next level!
It's time to upgrade Threat Detection and Response for better protection of your business! Don't let outdated technology put you at risk - make sure Threat Detection and Response is up to the task. With more intuitive dashboards, detailed reporting options, and an enhanced alerting system, Threat Detection and Response can help keep your data safe. Take the steps today to ensure that Threat Detection and Response are up to the challenge.
This product needs to be fully integrated with the firewall. Currently, it only sends logs to the cloud and asks the firewall to correlate them. If it were fully integrated with WatchGuard Firebox then it would make sense.
Systems Engineer at a tech services company with 1-10 employees
Real User
2021-04-16T09:57:06Z
Apr 16, 2021
It can have a couple of false positives, but after you add them to your allow list, it works fine. It could have better Mac support. I am pretty sure it doesn't have much support for Mac. It can be installed on a Mac, but it is not that good.
Senior Manager IT Security and Infrastructure at a insurance company with 201-500 employees
Real User
2020-09-23T06:09:56Z
Sep 23, 2020
The ease of detecting where an issue is should be improved. It would be helpful if when an issue is detected, the system can send us an SMS message to our phones. This would allow us to immediately respond.
The solution isn't as efficient as a product like Palo Alto. The pricing is expensive. Even compared to Palo Alto, it's quite costly. Palo Alto provides more signature detections than this solution. WatchGuard TDR needs to be able to detect threats a bit better. The reporting isn't so good. If they worked to improve this aspect of the solution, it would be much stronger.
Hackers are designing malware to be more sophisticated than ever. Through packing, encryption, and polymorphism, cyber criminals are able to disguise their attacks to avoid detection. Zero day threats and advanced malware easily slip by antivirus solutions that are simply too slow to respond to the constant stream of emerging threats. Organizations of all sizes need a solution that leverages a holistic approach to security from the network to the endpoint. WatchGuard Threat Detection and...
The pricing of WatchGuard Threat Detection and Response could be improved. It's not the cheapest option available. That said, it often meets our needs effectively. There are areas for improvement in making the product more economical. In the future, I would like to see enhancements in eliminating threats more intuitively, allowing easier identification of issues.
The interface is not the best. I do not like it. The reports must also be improved.
I'm just looking for a few extra features, which are likely included in XDR and the other additional software services. Mainly the FortiEDR system. If I go through the computer status and look at the risk, it's a very basic assessment. Compared to Rapid7, which is a highly rated vulnerability scanner, WatchGuard is more limited. Rapid7 can give me vulnerabilities like autorun being enabled and provide solutions to fix them. It can also reassess vulnerabilities. However, the EDR Core I'm using only gives me basic information, like "File full of fire and execution detection" as a high vulnerability. It doesn't tell me how to fix it, just that it's a risk. It's very minimal in terms of risk assessment. Rapid7 would say, "This software is outdated," or "You're using an older version of SQL." It's much more detailed, whereas EDR Core is more scaled-down and doesn't provide a full assessment. So, I'd like a few extra features, especially around threat severity assessment.
The website must provide more information on the product. The tool must be promoted more.
One area of improvement is the deployment process; it is not intuitive. The centralized administration and management, as well as the cloud-based interface, specifically the user interface (UI), menus, and module configurations. The administrative UI/UX could be significantly improved. Compared to other solutions, I would say it's not a complete solution in certain settings. The centralized administration and XDR capabilities need improvement. One aspect that many firewall and network security manufacturers fail to understand or integrate well is the endpoint, XDR, or EDR solutions. For example, Cisco has its own endpoint solution, which is not very good, and other manufacturers like Check Point or Palo Alto have their own EDR solutions. The primary issue is that they haven't effectively integrated these solutions with other manufacturers to create a more comprehensive and cohesive offering. It's important to have a solution that integrates anti-malware and antivirus XDR features. In terms of mobile device management, that's a feature I haven't seen.
WatchGuard should offer more visibility into user activity. For example, we should have more details when WatchGuard denies a user access to a port.
WatchGuard Threat Detection and Response (TDR) is an excellent tool for keeping your business secure, but there are some areas where it could use improvement. For one, the dashboards can be confusing to navigate through. On top of that, the reporting capabilities of TDR could also use a facelift; current reports don't give users the in-depth data they need to make informed decisions. Finally, Threat Detection and Response could benefit from a better alerting system; it's often difficult for users to quickly identify when an issue has occurred. With some innovative changes, Threat Detection and Response can take your business security to the next level!
It's time to upgrade Threat Detection and Response for better protection of your business! Don't let outdated technology put you at risk - make sure Threat Detection and Response is up to the task. With more intuitive dashboards, detailed reporting options, and an enhanced alerting system, Threat Detection and Response can help keep your data safe. Take the steps today to ensure that Threat Detection and Response are up to the challenge.
The solution is a bit confusing and there are unusual complications with setup.
This product needs to be fully integrated with the firewall. Currently, it only sends logs to the cloud and asks the firewall to correlate them. If it were fully integrated with WatchGuard Firebox then it would make sense.
It can have a couple of false positives, but after you add them to your allow list, it works fine. It could have better Mac support. I am pretty sure it doesn't have much support for Mac. It can be installed on a Mac, but it is not that good.
When it comes to live-monitoring, the user-interface could be improved to make things easier.
The ease of detecting where an issue is should be improved. It would be helpful if when an issue is detected, the system can send us an SMS message to our phones. This would allow us to immediately respond.
The solution isn't as efficient as a product like Palo Alto. The pricing is expensive. Even compared to Palo Alto, it's quite costly. Palo Alto provides more signature detections than this solution. WatchGuard TDR needs to be able to detect threats a bit better. The reporting isn't so good. If they worked to improve this aspect of the solution, it would be much stronger.