In short: WatchGuard licensing through Forever Systems covers Firebox security suites, FireboxV and Firebox Cloud, Wi-Fi access points, Endpoint Security, MDR, AuthPoint MFA, FireCloud, NDR and CloudDR. Each product has its own licence metric (appliance, endpoint, user or identity), and we quote, activate and renew them on one account.
What WatchGuard does
WatchGuard Technologies is a network and endpoint security vendor headquartered in Seattle. It is best known for the Firebox firewall range, but its line-up now spans endpoint protection, multi-factor authentication, cloud-delivered secure access, network detection and response, SaaS security and a 24/7 managed detection and response service.
WatchGuard calls this its Unified Security Platform. In practice most products are run from one web console, WatchGuard Cloud, and share detections through ThreatSync, WatchGuard's XDR layer. A detection on a laptop can be matched with what the firewall saw, and a response such as isolating the device or blocking an address can be taken from the same place.
The endpoint products came from WatchGuard's acquisition of Panda Security. In May 2026 WatchGuard bought the cloud application security company Perimeters.io, whose technology became WatchGuard CloudDR.
The WatchGuard product line-up
Everything below is managed from WatchGuard Cloud, so you can start with one product and add others to the same account later.
| Product | What it does | Licensed by |
|---|---|---|
| Firebox | Hardware firewall with Standard Support or the Basic, Prime or Total Security Suite | Appliance |
| FireboxV | Virtual firewall for your own VMware, Hyper-V or KVM hosts | Instance, by size |
| Firebox Cloud | Firewall for Amazon Web Services and Microsoft Azure | Instance, by size |
| Wi-Fi | Cloud-managed Wi-Fi 6 and Wi-Fi 7 access points | Access point |
| Endpoint Security | Basic, Prime, 360 and Elite endpoint protection and EDR | Endpoint |
| MDR | 24/7 managed detection and response from WatchGuard's SOC | Endpoint or user, by package |
| AuthPoint | Multi-factor authentication, with optional dark web credential monitoring | User |
| FireCloud | Firewall as a service, secure web gateway and ZTNA for remote staff | User |
| NDR | Network detection and response, NDR for Firebox and Total NDR | User, or per Firebox |
| CloudDR | Identity threats, misconfigurations and shadow IT in SaaS apps | Identity |
How WatchGuard licensing works
WatchGuard sells subscriptions rather than perpetual licences. What you count depends on the product:
- Appliances (Firebox and access points) carry a subscription per device, and the level you choose decides which security services run on it.
- Virtual and cloud firewalls are licensed per instance, in sizes that cap the number of virtual CPUs the firewall will use.
- Endpoint Security and its modules are licensed per endpoint. Core MDR is added as an endpoint module.
- AuthPoint, FireCloud, WatchGuard NDR and the user-based MDR packages are licensed per user; NDR for Firebox is licensed per Firebox.
- CloudDR is licensed per identity, one for each person or account it protects in your cloud applications.
WatchGuard offers both term licences for a set quantity and period and, for many cloud-managed products, subscription licences billed monthly on what you have allocated. We confirm which options apply to each product when we quote, then activate and allocate the licences in WatchGuard Cloud for you.
Recent WatchGuard name changes
WatchGuard has renamed several products, so older quotes and renewal notices may use the old names:
| Old name | Current name |
|---|---|
| WatchGuard EPP | Endpoint Security Basic |
| WatchGuard EPDR | Endpoint Security 360 |
| WatchGuard Advanced EPDR | Endpoint Security Elite |
| ThreatSync+ NDR | WatchGuard NDR |
| ThreatSync+ SaaS | WatchGuard SaaS DR |
| Perimeters | WatchGuard CloudDR |
Two genuinely new options sit alongside the renames: Endpoint Security Prime, between Basic and 360, and the Prime Security Suite for newer Firebox appliances, between the Basic and Total suites. Existing agents and appliances keep working through a rename; the new name shows up in WatchGuard Cloud and on your next renewal.
Buying WatchGuard through Forever Systems
We set WatchGuard up in your organisation's own WatchGuard Cloud account and look after it from there.
- Scope: we count your sites, endpoints and users and check what you already own, including Fireboxes coming up for renewal.
- Quote: we recommend the suite, endpoint edition and add-ons that fit. Ask us for a quote, because the right mix depends on your network and term.
- Deploy: we add devices to WatchGuard Cloud, roll out agents and build firewall and endpoint policies.
- Run: you get one invoice, and adding users, moving up a suite or renewing a Firebox is a change rather than a new contract.
If Microsoft licences are part of the same project, Forever Group covers Microsoft licensing separately. Compare WatchGuard with other vendors on our vendors A to Z or browse firewalls and network security.
Explore WatchGuard
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Can I renew my WatchGuard Firebox subscription through you?
Yes. We can renew Standard Support or a security suite on an existing Firebox, or move it to a higher suite at renewal. Send us the serial number or your current renewal notice and ask us for a quote.
Is WatchGuard EPDR still available?
Yes, under a new name. WatchGuard EPDR is now Endpoint Security 360, Advanced EPDR is now Endpoint Security Elite and EPP is now Endpoint Security Basic. Agents and policies carry on; the name changes in WatchGuard Cloud and on renewals.
Do I have to buy WatchGuard on an annual contract?
Not always. WatchGuard sells term licences, and many of its cloud-managed products can also be taken as subscription licences billed monthly on what you use. We confirm the options for each product when we quote.
Do I need a WatchGuard firewall to use the other products?
No. Endpoint Security, AuthPoint, FireCloud Internet Access and CloudDR all work without a Firebox. A Firebox is needed for NDR for Firebox and is one of the gateway options for FireCloud Total Access, and Total MDR can monitor one if you have it.
Do you sell Microsoft licences on this site?
No. Some WatchGuard services protect Microsoft 365 or monitor Microsoft Defender, but the Microsoft subscriptions themselves are handled by Forever Group's Microsoft licensing team.