New SIEMFeeder Version Improves Windows and Linux SIEM Compatibility

We’re excited to announce the release of Custom Operator Roles (COR), a new feature that introduces granular role-based access control (RBAC) for Endpoint Security in WatchGuard Cloud. It is now available at both the Subscriber and Service Provider levels.

This version allows partners and MSPs to precisely define which operators can access, view, or manage specific areas of the endpoint security environment. Operators can now create custom roles from built-in operator roles that include granular access control over Endpoint Security products.

In other words, with COR, partners can now control who can access what and what actions they can take within the Endpoint Security with precision.

Key Highlights:

• Granular Endpoint permissions are now part of WatchGuard Cloud’s role model.
• Available at both Subscriber and Service Provider levels.
• Endpoint permissions added to prebuilt roles for immediate usability.
• Enhances Security Posture: apply the principle of least privilege by limiting access to only what each operator needs.
• Simplifies Management: manage multiple products and services from one console with consistent permission models.

We keep working on adding new features to provide a more comprehensive approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -

This new version of our endpoint security brings features that help clients improve their system security where our protection solutions are used. With powerful updates, this release strengthens security, makes management easier, and increases control. Let’s look at all the new capabilities included.:

• Zero-Trust Application Service Improvements:
  • Instant notification on devices when a blocked application has been classified as goodware and can be executed.
  • Shows history of classified programs, reclassification status, technique, and date.
  • New AI-driven goodware detection to minimize blocking of unknowns.
  • Programs that were blocked due to lack of connectivity are now listed in the history of blocked programs.
• Extended Inheritance for Authorized Software:
  • Broader library authorization
  • Child process authorization
  • Installer-based process authorization
• Advanced Security Policies - Grouping: Reduces noise notification by optimizing policy management and improving efficiency within Advanced EPDR environments.
• Disable autoplay and autorun for external devices: Protection against malware threats from USB drives and removable devices.
• Anti-tampering for Linux: Prevents unauthorized modifications to the endpoint agent.
• Communication status with knowledge servers on Linux/macOS: Improved visibility into endpoint connectivity with threat intelligence databases.

We keep working on adding new features to provide a more comprehensive approach to our customers. Please reach out to the WatchGuard team if you have any questions or want to get started on delivering simplified security solutions.

- The WatchGuard Team -

This release of Endpoint Security introduces new features for WatchGuard Patch Management. With these enhancements, our partners can manage multiple clients more easily and efficiently than ever before. Through WatchGuard Cloud, partners can take advantage of a centralized and streamlined approach to patch management. Let’s take a closer look at all the new capabilities included in this release:

• Task Management Made Easy: Launch and monitor tasks like checking for missing patches or scanning across all your customers and service providers from a single screen.
• Advanced Patch Filtering: Search, filter, and select specific patches when patching at the Service Provider level for precise control.
• Device-Level Flexibility: Decide which devices get patched and which don’t for tailored deployments.
• Test Groups for Patching: Select specific groups of devices to test patches before full deployment, ensuring a smooth rollout.
• Task Duplication: Save time with the ability to copy or duplicate existing patching tasks for similar use cases.
• Detailed Insights: Access a more comprehensive installation history for better visibility into patch statuses and performance.

We continue to add new features to provide a more comprehensive approach to our customers. Please contact the WatchGuard team if you have any questions or want to start delivering simplified security solutions.

- The WatchGuard Team -