Applies To: WatchGuard Advanced EPDR, WatchGuard EPDR, WatchGuard EDR
WatchGuard Orion is a threat hunting and incident detection, investigation, and response solution for approved security operation centers (SOC). It uses security analytics, machine learning, and automation to detect and respond to unknown, sophisticated threats. WatchGuard Orion is available as an endpoint security module with WatchGuard EDR, EPDR, and Advanced EPDR.
Tier-1 Accounts
Only WatchGuard approved tier-1 Subscriber and Service Provider accounts can manage Orion threat hunting services. To become an approved partner, contact your WatchGuard Representative.
When WatchGuard approves your account, you can then activate Orion licenses. Tier-1 Service Provider accounts can allocate Orion endpoints to their managed accounts in WatchGuard Cloud. After they allocate endpoints from an Orion license to managed accounts, they must request access to the account in order to manage Orion services for the account.
For more information, go to Manage WatchGuard Orion.
Managed Accounts
When the Orion module is allocated to your managed account, you must enable management access to an approved Service Provider to manage the Orion threat hunting service for you. From the Managed Access page, you use a verification code to enable management access for Orion to your Service Provider.
For more information, go to Enable WatchGuard Orion Management.
About Endpoint Security Licenses