Call a Specialist Today! (02) 9388 1741
Free Delivery! Free Delivery!

WatchGuard EDR
Endpoint Detection and Response (EDR)

EDR

WatchGuard EDR Products
WatchGuard EDR - 1 Year
WatchGuard EDR - 1 Year - 1 to 50 licenses
#WGEDR30101
List Price: $80.00
Our Price: $64.00
WatchGuard EDR - 1 Year - 51 to 100 licenses
Minimum 51 quantity
#WGEDR30201
List Price: $70.00
Our Price: $56.00
WatchGuard EDR - 1 Year - 101 to 250 licenses
Minimum 101 quantity
#WGEDR30301
List Price: $62.00
Our Price: $50.00
WatchGuard EDR - 1 Year - 251 to 500 licenses
Minimum 251 quantity
#WGEDR30401
List Price: $56.00
Our Price: $45.00
WatchGuard EDR - 1 Year - 501 to 1000 licenses
Minimum 501 quantity
#WGEDR30501
List Price: $48.00
Our Price: $38.00
WatchGuard EDR - 1 Year - 1001 to 5000 licenses
Minimum 1001 quantity
#WGEDR30601
List Price: $41.00
Our Price: $33.00
WatchGuard EDR - 1 Year - 5001+ licenses
Minimum 5001 quantity
#WGEDR30701
List Price: $36.00
Our Price: $29.00
WatchGuard EDR - 3 Year
WatchGuard EDR - 3 Year - 1 to 50 licenses
#WGEDR30103
List Price: $191.00
Our Price: $153.00
WatchGuard EDR - 3 Year - 51 to 100 licenses
Minimum 51 quantity
#WGEDR30203
List Price: $168.00
Our Price: $134.00
WatchGuard EDR - 3 Year - 101 to 250 licenses
Minimum 101 quantity
#WGEDR30303
List Price: $149.00
Our Price: $119.00
WatchGuard EDR - 3 Year - 251 to 500 licenses
Minimum 251 quantity
#WGEDR30403
List Price: $134.00
Our Price: $107.00
WatchGuard EDR - 3 Year - 501 to 1000 licenses
Minimum 501 quantity
#WGEDR30503
List Price: $115.00
Our Price: $92.00
WatchGuard EDR - 3 Year - 1001 to 5000 licenses
Minimum 1001 quantity
#WGEDR30603
List Price: $100.00
Our Price: $80.00
WatchGuard EDR - 3 Year - 5001+ licenses
Minimum 5001 quantity
#WGEDR30703
List Price: $86.00
Our Price: $69.00

Click here to jump to more pricing!

Please Note: All Prices are Inclusive of GST

Overview:

ORGANIZATIONAL CYBERSECURITY

Mobility, processing, and remote work have all revolutionized the business environment. Endpoints are the primary target for most cyber attacks. This is why endpoint security solutions need to be advanced, adaptive, and automatic, with the highest possible levels of prevention and detection and response.

Organizations receive thousands of weekly malware alerts, of which only 19 percent are considered trustworthy, and only 4 percent of which are ever investigated. Two-thirds of cybersecurity administrators' time is dedicated to managing malware alerts.


SOPHISTICATION OF CYBER ATTACKS

Cyber Defense Against Advanced Threats

State-of-the-art cyber attacks are designed to get around the protection provided by traditional security solutions. These attacks are becoming more frequent and more sophisticated as hackers become more professionalized. It is also a result of a lack of focus on correcting security vulnerabilities in systems.

In light of this scenario, traditional protection platforms (EPPs) are insufficient. This is because they do not provide detailed enough visibility into the processes and applications running on corporate networks. What's more, some EDR solutions, far from solving anything, create greater stress and increase security administrators' workloads by delegating the responsibility for managing alerts and forcing them to manually classify threats.


WATCHGUARD EPDR

Proactive Detection and Threat Hunting

WatchGuard EPDR is an innovative cybersecurity solution for computers, laptops and servers, delivered from the Cloud. It automates the prevention, detection, containment and response to any advanced threat, zero day malware, ransomware, phishing, in-memory exploits, and malwareless attacks, both present and future, inside and outside the corporate network.

Unlike other solutions, it combines the widest range of protection technologies (EPP) with automated detection and response capabilities. It also has two services, managed by WatchGuard experts, that are delivered as a feature of the solution:

  • Zero-Trust Application Service: 100% classification of the applications
  • Threat Hunting Service: detecting hackers and insiders

Thanks to its Cloud-based architecture, its agent is lightweight and has minimum impact on endpoints, which are managed via WatchGuard Cloud. WatchGuard Cloud allows you to manage the whole portfolio from a single pane of glass, reduces infrastructure costs and minimizes time spent on reporting and operational tasks.


ADVANCED AND AUTOMATED ENDPOINT SECURITY

Traditional protection technologies (EPPs) focused on prevention are low-cost measures, valid for known threats and malicious behaviors, but they are not enough. Successfully defending an organization and putting an end to cyber threats forces a shift away from traditional prevention to continuous prevention, detection and response, assuming at all times that the organization has been compromised, and that all endpoints are continually being threatened by attackers.

WatchGuard EPDR integrates traditional preventive technologies with innovative, adaptive prevention, detection and response technologies in a single solution, to deal with advanced cyber threats, both present and future:

Traditional Preventive Technologies

  • Personal or managed firewall (IDS)
  • Device Control
  • Permanent multi-vector anti-malware & on-demand scan
  • Managed denylist/allowlist• Collective Intelligence
  • Pre-execution heuristics
  • URL filtering - web browsing
  • Anti-phishing
  • Anti-tampering
  • Remediation and rollback

Advanced Security Technologies

  • Continuous endpoint monitoring with EDR
  • Prevention of execution of unknown processes
  • Cloud-based machine that learns to classify 100% of processes (APTs, ransomware, rootkits, etc.)
  • Sandboxing in real environments
  • Behavioral analysis and detection of IoAs (indicators of attack) such as scripts, macros, etc.
  • Threat hunting
  • Computer isolation
  • Program blocking by hash or name
  • Attack activity graph view

ZERO-TRUST MODEL

The Zero-Trust Application Service classifies 100% of processes, monitors endpoint activity, and blocks the execution of applications and malicious processes. For each execution, it sends out a real-time classification verdict, malicious or legitimate, with no uncertainty and without delegating decision to the client, avoiding manual processes. All of this is possible thanks to the capacity, speed, adaptability and scalability of AI and Cloud processing

The service unifies big data technologies and multi-level machine-learning techniques, including deep learning, the results of continuous supervision and the automation of the experience and knowledge accumulated by WatchGuard's threat team.

The managed Threat Hunting ServiceThe managed Threat Hunting Service is operated by a team of experts who use profiling analysis and event correlation tools to proactively discover new hacking and evasion techniques. The hunters at WatchGuard work on the premise that organizations are constantly being compromised.

Zero Trust Model

Key Features:


  • Continuously monitor endpoints
  • Automatically detect and respond to targeted attacks and in-memory exploits
  • Classify 100% of processes (pre-execution, running and post-execution) using the Zero-Trust Application Service
  • Prevent unknown processes from executing
  • Sandbox in real environments
  • Find malicious actors, attack attempts and use tools to mitigate its effects with the Threat Hunting Service

Complete Your Endpoint Security Solution with EDR

WatchGuard EDR responds to known and unknown threats by providing visibility and controlling applications running on the network. While antivirus and endpoint protection platform products are important for scanning endpoints to look for known threats, their benefits are limited without continuous monitoring to spot advanced attacks such as APTs, exploits and fileless attacks. Adding WatchGuard EDR on top of an endpoint antivirus solution fills the gaps for comprehensive, effective endpoint security. Or deploy the full set of capabilities with WatchGuard EPDR, including our EPP and EDR solutions, for complete coverage in one centralized solution.


Stay Ahead of Cyber Attacks

WatchGuard EDR provides powerful endpoint detection and response (EDR) protection from zero day attacks, ransomware, cryptojacking and other advanced targeted attacks using new and emerging machine-learning and deep-learning AI models. With complete visibility to endpoints and servers, it monitors and spots malicious activity that can bypass most traditional antivirus solutions.


Easily Add to Antivirus-Only Deployments

WatchGuard EDR installs on top of existing endpoint AV solutions to add a full stack of EDR capabilities to automate the detection, containment, and response to any advanced threat and includes our unique Zero-Trust Application Service and Threat Hunting Service.


Enable a Zero-Trust Architecture With 100% Classification

The Zero Trust Application Service that comes with WatchGuard EDR classifies processes as either malware or as trusted, prior to letting only the trusted execute on each endpoint. It enables a continuous endpoint monitoring, detection and classification of all activity to reveal and block anomalous behaviors of users, machines and processes.

Our AI system automatically classifies 99.98% of all running processes. The remaining percentage is manually classified by our malware experts. This approach allows us to classify 100% of all binaries without creating false positives or false negatives.


Increase Staff Utilization and Efficiency

The Threat Hunting Service in WatchGuard EDR delivers insights directly from our team of cybersecurity experts to help our customers reduce the time to detect and respond to the latest attacks. Our analysts study suspicious activity and investigate the indicators of attack to find evasion and compromise techniques, and then create new rules that can be delivered to endpoints to rapidly protect them against new attacks. Our hunters also proactively search for patterns of anomalous behavior not previously identified on the network, and provide recommendations on how to mitigate an ongoing attack and reduce the attack service of potential future attacks.

Protection

Benefits:

Simplifies & Minimizes Security Costs

  • Its managed services reduce the costs of expert personnel. There are no false alerts to manage and no responsibility is delegated.
  • The managed services automatically learn from threats. No time wasted on manual settings
  • No management infrastructure to install, configure or maintain.
  • Endpoint performance is not impacted, since it is based on a lightweight agent and Cloud-native architecture.

Automates & Reduces Detection Time

  • Applications that pose a security risk can be blocked (by hash or process name).
  • Blocks the execution of threats, zero day malware, fileless/malwareless attacks, ransomware and phishing
  • Detects and blocks malicious in-memory activity (exploits) before it can cause damage.
  • Detects and blocks hacking techniques, tactics and procedures.

Automates & Reduces Response & Investigation Time

  • Resolution and response: forensic information to thoroughly investigate each attack attempt, and tools to mitigate its effects (disinfection).
  • Traceability of each action: actionable visibility into the attacker and their activity, facilitating forensic investigation.
  • Improvements and adjustments to security policies thanks to forensic analysis conclusions

Supported platforms and systems requirements of Watchguard EPDR

  • Supported operating systems: Windows (Intel & ARM), macOS (Intel & ARM), Linux and Android.
  • EDR capabilities are available on Windows, macOS, and Linux, with Windows being the platform that provides all the capabilities in their entirety.
  • List of compatible browsers: Google Chrome, Mozilla Firefox, Internet Explorer, Microsoft Edge and Opera.

Documentation:

Download the WatchGuard EDR (.PDF)

It appears you don't have a PDF plugin for this browser. No biggie... you can click here to download the PDF file.

Pricing Notes:

WatchGuard EDR Products
WatchGuard EDR - 1 Year
WatchGuard EDR - 1 Year - 1 to 50 licenses
#WGEDR30101
List Price: $80.00
Our Price: $64.00
WatchGuard EDR - 1 Year - 51 to 100 licenses
Minimum 51 quantity
#WGEDR30201
List Price: $70.00
Our Price: $56.00
WatchGuard EDR - 1 Year - 101 to 250 licenses
Minimum 101 quantity
#WGEDR30301
List Price: $62.00
Our Price: $50.00
WatchGuard EDR - 1 Year - 251 to 500 licenses
Minimum 251 quantity
#WGEDR30401
List Price: $56.00
Our Price: $45.00
WatchGuard EDR - 1 Year - 501 to 1000 licenses
Minimum 501 quantity
#WGEDR30501
List Price: $48.00
Our Price: $38.00
WatchGuard EDR - 1 Year - 1001 to 5000 licenses
Minimum 1001 quantity
#WGEDR30601
List Price: $41.00
Our Price: $33.00
WatchGuard EDR - 1 Year - 5001+ licenses
Minimum 5001 quantity
#WGEDR30701
List Price: $36.00
Our Price: $29.00
WatchGuard EDR - 3 Year
WatchGuard EDR - 3 Year - 1 to 50 licenses
#WGEDR30103
List Price: $191.00
Our Price: $153.00
WatchGuard EDR - 3 Year - 51 to 100 licenses
Minimum 51 quantity
#WGEDR30203
List Price: $168.00
Our Price: $134.00
WatchGuard EDR - 3 Year - 101 to 250 licenses
Minimum 101 quantity
#WGEDR30303
List Price: $149.00
Our Price: $119.00
WatchGuard EDR - 3 Year - 251 to 500 licenses
Minimum 251 quantity
#WGEDR30403
List Price: $134.00
Our Price: $107.00
WatchGuard EDR - 3 Year - 501 to 1000 licenses
Minimum 501 quantity
#WGEDR30503
List Price: $115.00
Our Price: $92.00
WatchGuard EDR - 3 Year - 1001 to 5000 licenses
Minimum 1001 quantity
#WGEDR30603
List Price: $100.00
Our Price: $80.00
WatchGuard EDR - 3 Year - 5001+ licenses
Minimum 5001 quantity
#WGEDR30703
List Price: $86.00
Our Price: $69.00