Microsoft Intune Integration with WatchGuard Agent

Microsoft Intune is a cloud-based endpoint management tool that organizations can use to manage users and devices. The Intune Company Portal app enables members of an organization to download and install organization-approved apps.

This document describes how to configure Microsoft Intune to make the WatchGuard Agent available to devices in your organization through Company Portal. Once you install the WatchGuard Agent on a device, you can use it to install WatchGuard endpoint security software on the device, according to the settings you select.

Contents

• Microsoft Intune Integration with WatchGuard Agent
• • Contents
  • Integration Summary
  • Before You Begin
  • Configure Microsoft Intune
  • • Create an .intunewin File
    • Add a Group in Microsoft Intune
    • Add the App in Microsoft Intune
  • Test the Integration

Before You Begin

Before you begin these procedures, make sure that you:

• Download the WatchGuard Agent installer. For more information, go to Download the WatchGuard Agent Installer.
• Have a global administrator or user management administrator account to log in to Microsoft Intune.
• Create a user in Microsoft Intune or synchronize an on-premises Active Directory user to Microsoft Entra ID and assign the user an Intune Plan 1 license.
• Download the Microsoft Win32 Content Prep Tool from GitHub as a .ZIP file and extract the contents to your computer.
• Enroll your Windows devices in Microsoft Intune.

Configure Microsoft Intune

To configure Microsoft Intune, you must:

1. Create an .intunewin File.
2. Add a Group in Microsoft Intune.
3. Add the App in Microsoft Intune.

Create an .intunewin File

To add the WatchGuard Agent as an app in Microsoft Intune, you must first use the Microsoft Win32 Content Prep Tool to convert the WatchGuard Agent installer to the .intunewin format.

To create an .intunewin file:

1. On your computer, create a new folder and copy the WatchGuard Agent installer to the folder. In our example, we name the folder WatchGuard Agent.
2. Create a new folder for the output. This is the folder where the .intunewin file is created when the process completes. In our example, we name the folder WatchGuard Agent Output.
3. From a Command Prompt window, go to the folder you extracted the contents of the Microsoft Win32 Content Prep Tool .ZIP file to.
4. Run the IntuneWinAppUtil.exe file with no parameters.
   
5. Type the path of the source folder you created in Step 1. In our example, we type:
   C:\Users\<username>\Documents\WatchGuard Agent
6. Press Enter.
7. Type the file name of the WatchGuard Agent installer. In our example, we type:
   WatchGuard Agent.msi
8. Press Enter.
9. Type the path of the output folder you created in Step 2. In our example, we type:
   C:\Users\<username>\Documents\WatchGuard Agent Output
10. Press Enter.
11. Type N.
12. Press Enter.
    The .intunewin file is created in the output folder.

Add a Group in Microsoft Intune

When you add the WatchGuard Agent as an app in Microsoft Intune in the next section, you can assign the app to user groups. Create a group of users that you want to assign the WatchGuard Agent to.

To add a group in Microsoft Intune:

1. Log in to Microsoft Intune as an administrator.
2. Select Groups > All Groups > New Group.
   The New Group page opens.
3. In the Group Name text box, type a group name.
4. Click No Members Selected.
5. Select the users you want to assign the WatchGuard Agent to, then click Select.
6. Keep the default values for all other settings.

7. Click Create.
   The group is created in Microsoft Intune.

Add the App in Microsoft Intune

When you add an app to Intune, you define the details shown for the app in Company Portal and configure settings such as device requirements, detection rules, and user assignments.

To add the WatchGuard Agent app in Microsoft Intune:

1. Log in to Microsoft Intune as an administrator.
2. Select Apps > All Apps > Add.
   The Select App Type page opens.
3. From the App Type drop-down list, select Windows App (Win32).

4. Click Select.
   The Add App page opens.
5. Click Select App Package File.
   The App Package File page opens.
6. From the App Package File drop-down list, select the .intunewin file you created in Create an .intunewin File.

7. Click OK.
   The Add App page opens with additional tabs.
8. On the App Information page, in the Publisher text box, type a name. In our example, we type WatchGuard Agent.

8. Click Next.
   The Program page opens.
9. Keep the default values for all settings on the Program page.

10. Click Next.
    The Requirements page opens.
11. From the Operating System Architecture drop-down list, select one or more operating system architectures, depending on the devices used at your organization. In our example, we select 64-bit.
12. From the Minimum Operating System drop-down list, select the minimum operating system used at your organization. In our example, we select Windows 10 1607.

13. Click Next.
    The Detection Rules page opens.
14. From the Rules Format drop-down list, select Manually Configure Detection Rules.
15. Click Add.
    The Detection Rule page opens.
16. From the Rule Type drop-down list, select File.
17. In the Path text box, type:
    C:\Program Files (x86)\Panda Security\Panda Aether Agent
18. In the File or Folder text box, type:
    AgentSvc.exe
19. From the Detection Method drop-down list, select File or Folder Exists.

20. Click OK.
21. To open the Assignments page, click Next three times.
22. On the Assignments page, select an assignment type. In our example, we select Add Group from the Available For Enrolled Devices section.
23. Select the group you created in Add a Group in Microsoft Intune, then click Select.

24. Click Next.
25. Click Create.
    The Intune package uploads.

Test the Integration

To test the integration:

1. On your Windows device, install the Company Portal from the Microsoft Store.
2. Open the Company Portal and log in with the Microsoft Entra ID user.

3. Select the published app, then click Install.
   Wait a few moments. After the installation completes, the computer might restart.
4. In WatchGuard Cloud, verify that the computer you installed the agent on shows as an endpoint that you can manage. For more information, go to Manage Computers and Devices.