TDR AD Helper Urgent Security Improvement

At WatchGuard, we understand that managing security solutions isn't a one-size-fits-all situation. Different partners and customers have different needs, whether it's based on experience, compliance requirements, specific features, or overall capabilities. That’s why we offer a variety of management options for our Fireboxes, designed to help you get the most out of your security investment.

One of our key offerings is WatchGuard Cloud. This platform combines the latest features and capabilities into a centralized management interface for all WatchGuard products. It offers shared configurations and a central hub for threat telemetry through ThreatSync. You can leverage WatchGuard Cloud in two main ways:

1. Full Cloud Management: You can configure and manage your Firebox directly within WatchGuard Cloud.
2. Hybrid Approach: You can continue using local management tools while integrating your Firebox with WatchGuard Cloud for logging, reporting, and streamlined firmware updates.

Our Commitment

We also recognize that not everyone is ready or able to transition to full Cloud management. That's perfectly fine! We're fully committed to supporting the Fireware Web UI and WatchGuard System Manager (WSM). We'll continue to enhance these options with new capabilities, features, security improvements, and necessary vulnerability patches. However, please note that certain features requiring communication between the Firebox and WatchGuard Cloud (or other WatchGuard products) may be exclusively available for cloud-managed Fireboxes and not added to Fireware Web UI or WSM.

Development Priorities

Regarding our development focus, we're moving the WSM Management Server into maintenance mode. This means we'll continue providing security enhancements and vulnerability patches but won't add new features. We know many of you rely on the WSM Management Server daily, and we appreciate that. However, WatchGuard Cloud provides a more robust and feature-rich centralized management experience. Plus, WatchGuard Cloud is a secure management platform with ISO 27001 and PCI certifications, demonstrating our commitment to the highest security standards.

To be clear, while our development efforts for centralized management are now focused on WatchGuard Cloud, we will continue to support existing WSM Management Server deployments and their current functionality. We have no plans to announce an End-of-Sale or End-of-Life for Fireware Web UI, WSM, or the WSM Management Server.

Questions?

We want to ensure you have the management tools that best suit your needs. For additional information on the benefits and capabilities of the management options discussed in this announcement, visit our Help Center or reach out to your WatchGuard representative.

At WatchGuard, security is our top priority. We're committed to providing our customers with the latest protection against evolving cyber threats and are pleased to announce the availability of Fireware v12.11. This release addresses several bugs and enables FIPS 140-3 support (certification pending), SAML single sign-on, and other enhancements and features. 

Which products are affected by this release?

• T Series: T20, T25, T40, T45, T55, T70, T80, and T85
• M Series: M270, M290, M370, M390, M470, M570, M590, M670, M690, M4600, M4800, M5600, and M5800
• Firebox NV5, FireboxV, and Firebox Cloud

New and Improved Features

• SAML Single Sign-On (SSO)
  You can enable SAML SSO to authenticate users with your Firebox, configured as a Service Provider (SP), allowing it to exchange data with an Identity Provider (IdP). 
  Learn more
   
• Threat Telemetry
  Your Firebox can send threat telemetry data to the WatchGuard security team, which uses that data to research and investigate the threats the Firebox detects and analyze the current threat landscape. Turned on by default, you can choose not to send this data. 
   Learn more
   
• Fireware Web UI Device Information
  For a cloud-managed Firebox, you can connect to the local Fireware Web UI on the Firebox. With the Web UI, you can now view the system information for your Firebox, which includes name, model, Fireware version, serial number, system time, system date, and uptime.
  Learn more
   
• FIPS 140-3 Support
  Your Firebox is designed to meet the overall FIPS 140-3 Level 2 security requirements when configured in a FIPS-compliant manner with Fireware v12.11. For more information about FIPS validation status, go to Product Certifications on the WatchGuard Trust Center website. 
  Learn more
  
  Note: FIPS 140-3 is supported in Fireware v12.11 with these hardware models:
  • T series: T20, T20-W, T40, T40-W, T80, NV5, T25, T25-W, T45, T45-PoE, T45-W-PoE, T45-CW, T85-PoE
  • M series: M290, M390, M590, M690, M4800, M5800
     
• Configuration Report Enhancements
  From the Fireware Web UI, you can generate a viewable or printable Firebox Configuration Report. This report includes the Firebox serial number, Fireware version, and geolocation exceptions. 
  Learn more
   
• Internet Watch Foundation (IWF) WebBlocker Category Update
  The IWF WebBlocker category is now included in setup wizards and the default WebBlocker action. 
  Learn more
   

Upgrade Now and Stay Protected

We strongly recommend that all Firebox users upgrade to this update immediately. Upgrading to Fireware v12.11 is simple. Complete upgrade instructions and the firmware can be downloaded from the WatchGuard Software Downloads page. Please refer to the Fireware v12.11 Release Notes for additional information on this update.

Stay Informed

WatchGuard is committed to keeping our customers informed about the latest security threats. For the most up-to-date information on vulnerabilities and how WatchGuard products address them, please visit our Trust Center. Please contact your local WatchGuard representative with any additional questions about this release. For Sales or Support questions, you can find phone numbers for your region online. If you contact WatchGuard Technical Support, please have your registered appliance Serial Number or Partner ID available. 

Today's attackers are always a step ahead, leveraging emerging technologies for malicious gains. Staying secure feels like running on a treadmill - you're always trying to catch up. WatchGuard's Unified Security Platform® is built to evolve with threats. Our commitment to continuous innovation means you'll always have the tools to protect your business and customers. We use quarterly updates to inform you of our latest features and enhancements. With WatchGuard, you're not just buying a security solution but investing in peace of mind.

NETWORK SECURITY RELEASES

WebBlocker Override
WatchGuard now offers WebBlocker Override in Cloud-Managed Fireboxes, empowering MSPs to grant temporary access to blocked websites. Previously available on locally managed devices, this functionality brings more control to Cloud environments. Administrators can now configure overrides within WatchGuard Cloud, eliminating the need to adjust proxy settings. This is particularly valuable for partners and customers transitioning to Cloud management, allowing authorized users to bypass web restrictions without compromising firewall policies. The bypass method can be a shared passphrase or user group authentication, providing options for different security needs. Learn more

FIPS140-3 Certification
WatchGuard is committed to providing the highest level of security for your data. We're excited to announce significant progress towards FIPS 140-3 certification for several WatchGuard Firebox models, including T25, T45, T85, M290, M390, M490, M590, M4800, and M5800. FIPS 140-3 is the gold standard for cryptographic module validation, ensuring our firewalls meet the strictest government encryption requirements. This certification ensures secure data management and transfers on your network, making WatchGuard Fireboxes ideal for government deployments and organizations supporting them. While final award timing rests with government entities, submitting for FIPS allows you to proceed with opportunities requiring this compliance. Visit the NIST website to see the current status of our certification. 

Captive Portals for Fireboxes
Captive portal for a Firebox empowers operators to enforce strict network access control on guest and non-corporate networks. This feature ensures that only authorized users can connect, providing a secure gateway for guests to access the Internet without compromising internal network safety. Beyond access control, Captive Portals offer customizable branding, robust content filtering, and advanced data collection and analytics. These capabilities make them indispensable for service providers and customers, simultaneously enhancing network security and user experience. Learn more

Fireware 12.10.4 U2
Fireware 12.10.4 Update 2 is a regular maintenance update with bug fixes, vulnerability patches, and minor improvements for our Firebox firewalls. We prioritize regular maintenance releases every 6-12 weeks to provide our customers with the latest security patches and ensure system stability. As part of the improvements, administrators can now block the sources of repeated failed login attempts, enhancing security against attackers. This is significant due to the increasing frequency of brute-force attacks, and blocking suspicious IP addresses significantly strengthens your defenses. Enjoy peace of mind knowing that your Firebox has the latest security features to protect sensitive data. Read the release notes. 

WATCHGUARD CLOUD FEATURES

Linked to License Allocations
Linked to License allocations simplifies license management for service providers. This new type directly connects allocations to specific activated licenses, streamlining tracking and preventing over-allocation issues. It eliminates manual updates by automatically adjusting quantities and expiration dates based on the source license, even during renewals. Additionally, it isolates tenants from broader over-allocation events and automatically manages associated Endpoint modules. This enhanced solution addresses key pain points for partners using Term licenses, offering improved traceability, protection against over-allocation, and streamlined renewal processes. This paves the way for future WatchGuard Points enhancements while providing partners with a valuable tool for efficient license management. Learn more

SECURE WI-FI RELEASES

Schedule AP Site Deployments
WatchGuard Cloud empowers operators to schedule automated deployments of new access point configurations. This eliminates the need to manually update each access point, preventing service disruptions due to simultaneous radio restarts. Operators can choose a future deployment time and determine if updates occur concurrently or sequentially across subscribed access points. This functionality is unique in the market, allowing for "set it and forget it" bulk configuration changes, especially valuable for access points often viewed primarily for network access, not just security. Learn more 

Packet Capture for Access Points
Imagine having the power to troubleshoot Wi-Fi connection issues directly from your access point. With packet capture, you can do just that. Capture and download packet data from wireless and wired interfaces, customizing your capture settings. This feature brings the same troubleshooting capabilities you enjoy with Firebox to your WatchGuard Cloud, enhancing your ability to diagnose wireless problems and gather valuable network data. Learn more

THREATSYNC (XDR) RELEASES

MAC Response Actions
Empower your security teams to swiftly and effectively mitigate threats on macOS devices. Our enhanced macOS Response Actions provide a comprehensive solution for incident management, enabling operators to isolate endpoints, terminate malicious processes, and restore deleted files with precision and speed. This cross-platform consistency and real-time incident correlation ensures a unified and proactive security posture for your organization. Learn more

Comments in Incident APIs - GA Sep
ThreatSync's Public APIs for Incidents and Response Actions empower operators and analysts to integrate incident management into their existing workflows seamlessly. By enabling comments on incidents within third-party PSA, RMM, and Ticketing tools, ThreatSync enhances efficiency, collaboration, and accountability. This feature streamlines communication, ensures consistent documentation, and provides a comprehensive audit trail for incident handling, improving overall security posture and operational effectiveness. Learn more

Endpoint-based ThreatSync Scoring
WatchGuard's Endpoint-based ThreatSync Scoring empowers security teams to proactively manage and mitigate risks by providing a comprehensive view of endpoint security. By aggregating incident data, scoring endpoints, and enabling granular response actions, customers can prioritize threats effectively, reduce response time, and strengthen their overall security posture. WatchGuard's innovative approach sets it apart from competitors, offering a more targeted and efficient solution for securing endpoints in today's evolving threat landscape. Learn more

QUESTIONS?
If you have any questions about the new features released in Q3 2024, don't hesitate to contact your local WatchGuard sales representative or visit our online Support page.