In short
The WatchGuard Zero Trust Bundle combines AuthPoint MFA with Dark Web Credential Monitoring, Endpoint Security 360 and FireCloud Total Access. It is licensed per user: each bundle licence covers AuthPoint and FireCloud for that user and Endpoint Security 360 for one endpoint. Forever Systems can quote it as a term licence or build it from monthly codes.
Get a quote for WatchGuard Zero Trust Bundle licensing
Tell us roughly how many users or sites you have and we will come back to you with options and a quote.
What the Zero Trust Bundle is
The WatchGuard Zero Trust Bundle puts three WatchGuard products that check users, devices and connections into one licence. WatchGuard builds it on its Zero Trust Identity Framework: confirm who the user is, validate that the device is healthy, then grant session-based access to the applications that user needs, with no remote access VPN.
All the components are managed centrally in WatchGuard Cloud, so the policies for identity, endpoint and access sit in one console. WatchGuard aims the bundle at organisations with hybrid workforces, growing cloud use and remote access needs, and at those replacing legacy VPNs.
What is in the bundle
| Component | Its role in zero trust | Counted as |
|---|---|---|
| AuthPoint MFA with Dark Web Credential Monitoring | Confirms identity with adaptive multi-factor authentication and risk-based access policies, and flags staff credentials found in breach data | One user |
| Endpoint Security 360 | Validates device health and blocks ransomware and unknown programs with the Zero-Trust Application Service | One endpoint per bundle user |
| FireCloud Total Access | Session-based zero trust network access to private and cloud applications, verifying identity, device and context without exposing the network | One user |
FireCloud Total Access is what replaces the remote user VPN: users reach the applications their policy allows rather than the whole network.
Not sure which bundle fits? Ask us
Tell us what you need and we will recommend the right bundle for your organisation, with a quote.
Managed Zero-Trust with WatchGuard MDR
WatchGuard also offers Managed Zero-Trust, which adds Total MDR to the same bundle. WatchGuard says that, paired with its MDR service, the bundle can be fully managed with 24/7 security monitoring, threat detection and response by WatchGuard's own security operations centre. See WatchGuard MDR for how Total MDR is licensed and what it monitors.
How WatchGuard Zero Trust Bundle licensing works
The Zero Trust Bundle is licensed per user. Activating one bundle licence switches on the individual product licences inside it: WatchGuard's own example is a one-year Zero-Trust licence for 100 users, which gives AuthPoint for 100 users, FireCloud for 100 users and Endpoint Security 360 for 100 endpoints.
If you already have one of the products, you can choose at activation to add users to the existing licence or extend it, and WatchGuard calculates a new expiry date for the combined licence. A subscriber account can hold only one AuthPoint product (Multi-Factor Authentication or Total Identity Security), which we take into account when we plan the activation.
The bundle itself is sold as a term licence. The same three products can also be taken separately on the monthly MSP route, billed monthly on what you allocate, with terms confirmed at quote; Dark Web Credential Monitoring then comes with AuthPoint Total Identity Security. Ask us for a quote for your user count and we will compare the two.
Vendor documentation: WatchGuard: Zero Trust Bundle (opens in a new tab); WatchGuard: about license bundles (opens in a new tab).
Is WatchGuard Zero Trust Bundle licensing the right fit for you?
We will check it against your systems and requirements and recommend the right option.
Building the bundle from monthly WatchGuard part numbers
The Zero Trust Bundle is quoted as a term licence per user. On the monthly MSP route these codes cover AuthPoint MFA, Endpoint Security 360 and FireCloud Total Access: AuthPoint and FireCloud are billed on the users allocated, and Endpoint Security on the endpoints, with the 360 edition chosen in WatchGuard Cloud and terms confirmed at quote. The bundle's Dark Web Credential Monitoring comes with AuthPoint Total Identity Security, which is quoted separately as a term licence.
| Part number | Description | Unit | Term | Route | Basket |
|---|---|---|---|---|---|
| WTG-ZDS-MFA-C100 | AuthPoint Multi-Factor Authentication | Per user | Monthly, on usage | Monthly MSP | |
| WTG-ZDS-EPS-C100 | Endpoint Security subscription (360 edition) | Per endpoint | Monthly, on usage | Monthly MSP | |
| WTG-FIR-TOT-C100 | FireCloud Total Access | Per user | Monthly, on usage | Monthly MSP |
Part numbers from WatchGuard: about license bundles (opens in a new tab), checked 2026-11-08. Add the licences you need to your basket and request a quote: we confirm the right part numbers, quantities and terms when we quote.
Who it suits
The bundle suits organisations that want MFA, endpoint protection and VPN-free remote access from one vendor and one console, rather than three separate tools. It is a straightforward way to move from a remote access VPN to zero trust access, and to show insurers and auditors that sign-in, device health and access are all checked. Organisations that already run WatchGuard Endpoint Security or AuthPoint can fold their existing licences into it.
How we help
Forever Systems can quote the bundle or its monthly equivalent, set up AuthPoint, roll out the WatchGuard agent with Endpoint Security 360, configure FireCloud Total Access and the gateway for your private applications, and handle user changes and renewals on one account. See also SASE and ZTNA.
How Forever Systems supplies your software licences
Forever Systems supplies business software subscriptions to UK organisations from one account, with one invoice and a team who know the products.
- Help choosing the right edition: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from our engineers, not just a reseller account
- Consolidated billing and renewal reminders to help stop subscriptions lapsing unexpectedly
We can supply businesses, schools, charities and public sector organisations of all sizes.
Frequently asked questions
What is included in the WatchGuard Zero Trust Bundle?
AuthPoint MFA with Dark Web Credential Monitoring, Endpoint Security 360 and FireCloud Total Access. Managed Zero-Trust adds WatchGuard Total MDR.
Is the WatchGuard Zero Trust Bundle licensed per user?
Yes. Each bundle licence covers AuthPoint and FireCloud for one user and Endpoint Security 360 for one endpoint, so a 100-user bundle gives 100 users and 100 endpoints.
Can the Zero Trust Bundle replace my VPN?
Yes. FireCloud Total Access gives application-specific, session-based zero trust network access, so remote users no longer need a VPN to reach internal applications.
Can I add the bundle if I already have AuthPoint or Endpoint Security?
Yes. At activation you can add users to your existing licence or extend it, and WatchGuard recalculates the expiry date of the combined licence.
Still have a question about WatchGuard Zero Trust Bundle licensing?
Ask us and a member of our team will get back to you.
More software and licensing guides
AuthPointPer-user MFA with push, QR code, OTP and passkeys for VPN, RDP and cloud apps.Endpoint SecurityEndpoint protection and EDR per endpoint: Basic, Prime, 360 and Elite.FireCloudCloud firewall and secure web gateway for remote users, with ZTNA in Total Access.MDR24/7 managed detection and response: Core, Core for Microsoft, Total and Open MDR.