Certified WatchGuard partner

WatchGuard: firewall, security services and multi-factor authentication

From the Firebox appliance and the Total Security Suite to AuthPoint MFA for VPN and Windows sign-ins: we plan, deliver and operate your WatchGuard environment – keeping attackers out and your business running.

Security from a single source

WatchGuard Technologies is one of the world’s leading network security vendors. The platform combines firewall, security services, endpoint protection and multi-factor authentication under one central management – comprehensive protection with minimal administration effort.

Next-generation firewall

Firebox appliances combine firewall, VPN gateway and all security services in one device – from the compact T Series to the M Series for the data centre. See the model families →

Total Security Suite

The complete protection package: intrusion prevention, sandboxing, DNS filtering, AI-based antivirus and XDR – fully integrated and centrally managed. View all services →

AuthPoint MFA

Cloud-based multi-factor authentication: secures VPN access, the Windows logon and cloud applications with a second factor. AuthPoint in detail →

WatchGuard Cloud

Central management of all WatchGuard devices and services: clear dashboards, reporting and easy administration – even across multiple sites.

Endpoint security (EPDR)

WatchGuard Endpoint Protection, Detection & Response protects all endpoints with behaviour-based detection and the Zero-Trust Application Service.

Consulting & operation

As a certified WatchGuard partner we size the right solution, handle implementation and rule sets – and run the environment as part of our managed services if you wish.

Firebox appliances: the right size for every network

All Firebox models run the same operating system and the same security services – the difference lies in throughput, ports and form factor. That means even the smallest site gets the same protection as headquarters.

Compact · tabletop

Firebox T Series

Compact appliances (e.g. T25, T45, T85) for small offices, branches, practices and the home office – quiet, quickly installed and, depending on the model, with integrated Wi-Fi and PoE ports.

  • Small sites and branch offices
  • Centrally pre-configurable (RapidDeploy)
  • Full feature set of the larger models
Powerful · 19" rack

Firebox M Series

Rack appliances (M290 to M5800) for mid-sized companies up to the data centre: high throughput even with all security services enabled, with modular network ports on the larger models.

  • Mid-market, campus and data centre
  • High availability in a cluster (active/passive)
  • Many VPN tunnels and VLANs
Virtual · cloud

FireboxV & Firebox Cloud

The same firewall as a virtual appliance for VMware and Hyper-V – or as Firebox Cloud directly in AWS and Microsoft Azure. Ideal for virtualised environments and hybrid infrastructures.

  • Runs in your existing virtualisation
  • Protects workloads in AWS and Azure
  • Same management as hardware Fireboxes
Not sure which Firebox fits? We size the appliance based on user count, internet connection, VPN needs and enabled security services – and deliver it fully configured and ready to go.

Security services: what the Total Security Suite includes

A Firebox is only as good as its enabled services. The Basic Security Suite covers classic protection – the Total Security Suite adds advanced defence against ransomware, zero-day malware and phishing. For most companies we recommend Total Security.

Intrusion Prevention (IPS)

Detects and blocks exploits, port scans and network attacks in real time.

Gateway AntiVirus

Scans traffic at the gateway for malware before it reaches your network.

WebBlocker

URL and content filtering by category – protects users and enforces your policies.

spamBlocker

Fends off spam and phishing waves right at the gateway.

Application Control

Controls which applications may access the internet – block file sharing or remote-access tools selectively.

Reputation Enabled Defence

Cloud-based reputation check of web addresses before the connection is established.

Network Discovery

Inventories all devices on the network and exposes shadow IT.

TOTAL

APT Blocker

Cloud sandbox against zero-day malware and ransomware: suspicious files are detonated and analysed in a safe environment.

TOTAL

DNSWatch

Blocks connections to phishing and command-and-control domains at DNS level – before any payload is downloaded.

TOTAL

IntelligentAV

AI-powered malware detection that identifies previously unknown threats without signatures.

TOTAL

ThreatSync & EDR Core

Correlates events from firewall and endpoints (XDR) and responds to threats automatically.

WatchGuard Cloud

Central management, dashboards and reports for all Fireboxes and services – across multiple sites.

Services without a label are part of the Basic Security Suite (and also included in Total) · TOTAL = additionally included in the Total Security Suite.

In focus: AuthPoint MFA

Multi-factor authentication for VPN, Windows logon and cloud

Stolen credentials are the number-one attack vector – a password alone no longer protects anyone. WatchGuard AuthPoint adds a second factor to every sign-in via your employees’ smartphones. No server of your own required – fully managed through the WatchGuard Cloud.

Secure VPN access

Home-office and field-staff VPN only with a second factor: AuthPoint integrates directly with the Firebox mobile VPN (SSL and IKEv2) and, via RADIUS, with virtually any other VPN gateway. Stolen or guessed VPN passwords become worthless.

2FA at the Windows logon

The AuthPoint Logon App protects sign-ins to Windows PCs, notebooks and servers (macOS too) with a second factor – including RDP sessions if desired. And if a notebook is offline on the road, approval works via one-time password from the app.

Push, one-time password, QR code or token

Approval is as easy as tapping the push notification in the AuthPoint app – alternatively via time-based one-time password or QR code. Hardware tokens are available for employees without a smartphone.

Web SSO for cloud applications

Via the SAML portal your employees sign in securely once and then reach Microsoft 365 and other cloud services without re-entering passwords – centrally controlled, centrally logged.

VPN / home office Windows logon AuthPoint Approve sign-in? AuthPoint app
1Sign in as usual – to the VPN, to Windows or in the browser
2A push notification appears on the smartphone
3Tap to approve – without the second factor, access stays closed

Frequently asked questions about WatchGuard

Which WatchGuard Firebox suits my company?
The compact T Series is ideal for small offices, branches and practices; the rack-mounted M Series serves medium and large networks; and FireboxV and Firebox Cloud cover virtualisation and cloud. We size the right appliance based on user count, internet connection, VPN needs and enabled security services – and deliver it fully configured.
What is the difference between the Basic and Total Security Suite?
The Basic Security Suite contains the classic protection services such as Intrusion Prevention, Gateway AntiVirus, WebBlocker, spamBlocker, Application Control and Reputation Enabled Defence. The Total Security Suite adds advanced defence: APT Blocker (cloud sandbox), DNSWatch, AI-based IntelligentAV and ThreatSync with EDR Core. For most companies we recommend the Total Security Suite.
What is WatchGuard AuthPoint?
AuthPoint is WatchGuard’s cloud-based multi-factor authentication. In addition to the password, the user confirms the sign-in via a push notification on the smartphone, a one-time password, a QR code or a hardware token. Everything is managed centrally in the WatchGuard Cloud – no server of your own is required.
Can I secure the Windows logon with two-factor authentication?
Yes. The AuthPoint Logon App protects sign-ins to Windows PCs and servers (macOS too) with a second factor – including RDP sessions if desired. If a notebook has no internet connection while travelling, approval works offline via a one-time password from the AuthPoint app.
Does AuthPoint work with our VPN?
With a Firebox, AuthPoint integrates directly with Mobile VPN with SSL and IKEv2. VPN gateways from other vendors are connected via RADIUS, cloud services via SAML. This way virtually every VPN and web access gets a second factor.
Does PROXYTEC also handle setup and operation?
Yes. We plan, deliver and configure your WatchGuard environment, maintain rule sets and updates and monitor the systems as part of our managed services. In case of a fault, we are your direct point of contact.

Request a WatchGuard consultation

Whether a new Firebox, a migration from another vendor or AuthPoint MFA for VPN and Windows logon: we find the right solution, implement it and make sure your network stays secure and fast.