Security has improved and SD-WAN now delivers reliable VPN performance across all branches
What is our primary use case?
My main use case for WatchGuard Firebox is especially strengthening Firebox configurations. I am proficient in IPsec VPN, assessment of configurations, and SD-WAN with client branches. I believe that I have great experience with WatchGuard Firebox.
I worked with a client with more than 70 branches connected to the hub for SD-WAN. The principal connection was with MPLS, but there was an IPsec VPN through this MPLS and another connection with an ISP connection.
This scenario with SD-WAN, branches, hub, IPsec VPN is one that repeats constantly, and I have worked many times with this configuration.
In these scenarios I mentioned, SD-WAN helped the clients achieve better performance on branches and provide security for these branches and the hub.
What is most valuable?
I believe the best features WatchGuard Firebox offers are the Gateway Antivirus, APT Blocker, Reputation Enabled Defense, and Intrusion Prevention Service.
WatchGuard Cloud is a good feature.
With WatchGuard Firebox, the main outcomes were improved network security, better visibility of traffic, and more stable VPN connections. We also reduced incident response times thanks to better logging and reporting.
Using faster ports on WatchGuard Firebox helps avoid congestion, especially during busy periods. For example, high-bandwidth applications and VPN traffic run more smoothly, which helps maintain user productivity.
The features of WatchGuard Firebox that I find most valuable for maintaining network security are SD-WAN, VPN capabilities, and threat prevention. They provide solid perimeter security and protect the network from common attacks. Intrusion Prevention and APT Blocker are particularly notable.
What needs improvement?
I believe WatchGuard Firebox can be improved by incorporating more features such as those offered by Fortinet. WatchGuard should delete VPN SSL and replace it with IPsec VPN dial-up.
The graphical interface needs to be modernized.
My impression of the spam blocking capabilities of WatchGuard is not very positive. I do not believe that it is good. I have experience with other vendors and I believe that they offer better spam blocking capabilities.
For how long have I used the solution?
I have been using WatchGuard Firebox for more than three years, throughout all my experience at Blokka.
What do I think about the stability of the solution?
WatchGuard Firebox is very stable. I worked in cluster environments and this worked very well.
What do I think about the scalability of the solution?
WatchGuard Firebox is scalable. You can choose different models based on throughput and features, which makes it easy to support growing environments. Scalability is one of the strong points, especially for distributed environments. For example, branches and distribution centers are well-supported.
How are customer service and support?
Customer support for WatchGuard Firebox is very good and very fast. In my experience with WatchGuard support, I believe that it is excellent. I would rate customer support at an eight out of ten.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I previously used different firewall solutions, such as Fortinet, Palo Alto, and pfSense. I switched to WatchGuard mainly for easier management, better visibility, and a more balanced cost-to-feature ratio. Overall, the switch simplified operations without compromising security.
What was our ROI?
I have seen a positive return on investment with WatchGuard Firebox. Reduced incidents and easier management helped lower operational cost.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for WatchGuard Firebox is good. WatchGuard has competitive pricing. For example, Fortinet is more expensive than WatchGuard. When I compare both services, they offer good value.
Which other solutions did I evaluate?
I worked with WatchGuard and FortiGate before choosing WatchGuard Firebox. I compared features, ease of management, and overall cost, and WatchGuard offered the best balance for my needs.
What other advice do I have?
My advice for others looking into using WatchGuard Firebox would be to focus on proper sizing, use best practices for policy design, and take advantage of the built-in security features. When it is properly planned and deployed, it delivers real value, both technically and operationally.
In my experience, WatchGuard Firebox offers a good balance between security, performance, and operational simplicity. When properly sized and configured, it delivers consistent results. I would confidently consider it again for similar use cases. I have given this review a rating of 9 out of 10.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Positive experience with seamless communication and strong security features
What is our primary use case?
The main use cases for the
WatchGuard Firebox are to protect our customers' network, VPN connection or IPsec, or
SSL VPN, as by default, it's a protection of the network and the users, and servers.
What is most valuable?
WatchGuard Firebox technical support is very easy for us to contact, and we also have presales engineers such as Jeremy Schramm, who is French and provides excellent technical help; he visits our office one day a month to assist us in trying some solutions.I utilize AI within the WatchGuard Firebox, as we use the interconnection with threat syncs, and AI is implemented; we try to sell our customers
XDR or IDR, so there is AI in the product.I have a good impression of the efficiency for threat detection provided by the WatchGuard Firebox, as we have cybersecurity teams and sell security about the product, so we think it is a good product to protect our clients.
What needs improvement?
I would like to see the WatchGuard Firebox improved because I work with an experimental presales engineer directly, and we have some presentations regarding the
SASE project under the
XDR solution, so we know the good projects now.The WatchGuard Firebox has certain features, but the challenge is that we have some clients who don't have a network or are only mobile users, which leads us to think the future is in
SASE products, not in the WatchGuard Firebox.The mobile coverage should be included with the WatchGuard Firebox, but in some cases, there is no WatchGuard Firebox because the client has no network or all users are in different locations.
For how long have I used the solution?
I have been working with the WatchGuard Firebox for probably 10 or 11 years, as we are IT resellers and sell all customers these firewalls, so it's the product by default, and all customers we have have by default, Stormshield WatchGuard Firebox.
What do I think about the stability of the solution?
I find the WatchGuard Firebox stable with no problems; it's performing well.
What do I think about the scalability of the solution?
I find the WatchGuard Firebox scalable, as it's easy to change configurations from this product to another one, although it's always complicated to buy another product and there are no upgrade solutions at a lower price.
How are customer service and support?
WatchGuard Firebox technical support is very easy for us to contact, and we also have presales engineers such as Jeremy Schramm, who is French and provides excellent technical help; he visits our office one day a month to assist us in trying some solutions.On a scale of one to 10, I would rate the technical support of the WatchGuard Firebox a 10.I would recommend the WatchGuard Firebox to other businesses, as it is very easy to communicate with them for support and the presales engineers, who are very easy to work with.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
The only problem we have with the WatchGuard Firebox is about the price or the options that are very expensive for customers, as other firewalls such as
FortiGate offer free MFA authentication, so the main trouble is the price of the product.
How was the initial setup?
I find that we have no trouble with the WatchGuard Firebox, as it is very simple to install because we have certified engineer installation, so it's very easy for us.
What's my experience with pricing, setup cost, and licensing?
I have faced challenges with the WatchGuard Firebox regarding price since we work with customers who use the Stormshield product, which is less expensive and French-made, while some products from the USA have left a bad impression, and some customers ask us to find another French or European product.
Which other solutions did I evaluate?
The main differences between WatchGuard Firebox and other solutions such as
FortiGate or Sophos are that I find the product heartbeat in the Sophos product very good; however, in WatchGuard Firebox, there is a similar set of products as firewalls, showing no major difference.
What other advice do I have?
My advice for users looking to start working with the WatchGuard Firebox is that the easiest solution is to realize a POC to test the product, so we can watch and review reports with customers. On a scale of one to 10, I would overall rate the WatchGuard Firebox as a solution a nine.