Security has improved and SD-WAN now delivers reliable VPN performance across all branches
What is our primary use case?
My main use case for WatchGuard Firebox is especially strengthening Firebox configurations. I am proficient in IPsec VPN, assessment of configurations, and SD-WAN with client branches. I believe that I have great experience with WatchGuard Firebox.
I worked with a client with more than 70 branches connected to the hub for SD-WAN. The principal connection was with MPLS, but there was an IPsec VPN through this MPLS and another connection with an ISP connection.
This scenario with SD-WAN, branches, hub, IPsec VPN is one that repeats constantly, and I have worked many times with this configuration.
In these scenarios I mentioned, SD-WAN helped the clients achieve better performance on branches and provide security for these branches and the hub.
What is most valuable?
I believe the best features WatchGuard Firebox offers are the Gateway Antivirus, APT Blocker, Reputation Enabled Defense, and Intrusion Prevention Service.
WatchGuard Cloud is a good feature.
With WatchGuard Firebox, the main outcomes were improved network security, better visibility of traffic, and more stable VPN connections. We also reduced incident response times thanks to better logging and reporting.
Using faster ports on WatchGuard Firebox helps avoid congestion, especially during busy periods. For example, high-bandwidth applications and VPN traffic run more smoothly, which helps maintain user productivity.
The features of WatchGuard Firebox that I find most valuable for maintaining network security are SD-WAN, VPN capabilities, and threat prevention. They provide solid perimeter security and protect the network from common attacks. Intrusion Prevention and APT Blocker are particularly notable.
What needs improvement?
I believe WatchGuard Firebox can be improved by incorporating more features such as those offered by Fortinet. WatchGuard should delete VPN SSL and replace it with IPsec VPN dial-up.
The graphical interface needs to be modernized.
My impression of the spam blocking capabilities of WatchGuard is not very positive. I do not believe that it is good. I have experience with other vendors and I believe that they offer better spam blocking capabilities.
For how long have I used the solution?
I have been using WatchGuard Firebox for more than three years, throughout all my experience at Blokka.
What do I think about the stability of the solution?
WatchGuard Firebox is very stable. I worked in cluster environments and this worked very well.
What do I think about the scalability of the solution?
WatchGuard Firebox is scalable. You can choose different models based on throughput and features, which makes it easy to support growing environments. Scalability is one of the strong points, especially for distributed environments. For example, branches and distribution centers are well-supported.
How are customer service and support?
Customer support for WatchGuard Firebox is very good and very fast. In my experience with WatchGuard support, I believe that it is excellent. I would rate customer support at an eight out of ten.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I previously used different firewall solutions, such as Fortinet, Palo Alto, and pfSense. I switched to WatchGuard mainly for easier management, better visibility, and a more balanced cost-to-feature ratio. Overall, the switch simplified operations without compromising security.
What was our ROI?
I have seen a positive return on investment with WatchGuard Firebox. Reduced incidents and easier management helped lower operational cost.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for WatchGuard Firebox is good. WatchGuard has competitive pricing. For example, Fortinet is more expensive than WatchGuard. When I compare both services, they offer good value.
Which other solutions did I evaluate?
I worked with WatchGuard and FortiGate before choosing WatchGuard Firebox. I compared features, ease of management, and overall cost, and WatchGuard offered the best balance for my needs.
What other advice do I have?
My advice for others looking into using WatchGuard Firebox would be to focus on proper sizing, use best practices for policy design, and take advantage of the built-in security features. When it is properly planned and deployed, it delivers real value, both technically and operationally.
In my experience, WatchGuard Firebox offers a good balance between security, performance, and operational simplicity. When properly sized and configured, it delivers consistent results. I would confidently consider it again for similar use cases. I have given this review a rating of 9 out of 10.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?