Following on from the introduction to firewalls, find out how Threat Detection and Response (TDR) works. TDR is a cloud-based subscription service that works with any endpoint device to minimize the consequences of data breaches. TDR works through early detection and automated remediation. It continually collects and analyses forensic data from your firewall and from endpoints on your network to proactively detect and respond to security threats. purdi.com

1. WatchGuard - Protecting
Endpoints with Threat Detection
Response (TDR)
Alex Claro: Head of Technical
David Coneley: Sales Manager

2. Agenda
• What is WatchGuard’s Threat Detection & Response (TDR)?
• How does it work in protecting endpoints?
• Demonstration
• Q&A
2

3. WatchGuard TDR
3

4. Network and Endpoint Threat Correlation
Zero-day threats and advanced malware easily slip by antivirus
solutions that are simply too slow to respond to the constant
stream of emerging threats.
WHAT’S THE ANSWER?
WatchGuard Threat Detection and Response (TDR) is a powerful
collection of advanced malware defence tools that correlate threat
indicators from Firebox appliances and Host Sensors to stop
known, unknown and evasive malware threats.
4

5. Key Features
• Improves security against advanced malware attacks, including
ransomware
• Correlates network and endpoint insight for enterprise-grade
threat visibility
• Scores threat indicators and incidents based on severity to guide
response
• Tight integration with APT Blocker for advanced threat triage
• Works alongside existing antivirus solutions with no impact on
endpoint performance
• Decreases time to detection and remediation through policy-
based automation
5

6. Threat Correlation and Prioritization
ThreatSync is a Cloud-based correlation engine that analyses event
data from Host Sensors and Firebox appliances to identify malicious
behaviour. Threats are scored based on severity, for guided
remediation.
6

7. Threat Visibility on the Endpoint
The lightweight WatchGuard Host Sensor extends threat visibility
and management to the endpoint. The WatchGuard Host Sensor
continuously sends heuristic and behavioural data from the
endpoint up to ThreatSync for correlation and scoring.
7

8. Host Containment and Automated Responce
Control infections automatically when a threat is identified.
ThreatSync quickly contains any host machine from the network,
preventing further infection of your business. Once contained,
ThreatSync eliminates the malware by automatically killing processes,
quarantining malicious files, and deleting associated registry keys.
8

9. Ransomware Prevention with HRP
Host Ransomware Prevention (HRP) is a ransomware-specific
module within TDR that uses behavioural analysis and honeypots
to look for signs of ransomware. If malware is detected, HRP
automatically intervenes to stop the ransomware before files are
lost.
9

10. Advanced Threat Triage with APT Blocker
Want to take a deeper look at a suspicious file? Our integrated
approach to threat triage uses an innovative artificial intelligence
engine in conjunction with our APT Blocker security service, to
detect and automatically send suspicious files for deep analysis in a
next-generation Cloud sandbox.
10

11. Email Alerts & Notifications
ThreatSync includes email alerts and notifications to let you know
when a threat indicator or incident has been detected, as well as if
the threat has been remediated from the network or endpoint.
Notifications are configurable to ensure that you receive the alerts
you want when you want them.
11

12. Enterprise-grade Threat Intelligence
Threat Intelligence was previously only a benefit available to
enterprise organizations with big budgets and even bigger security
teams. With Threat Detection and Response, WatchGuard aggregates
and analyses threat intelligence feeds - delivering the security benefits
without passing on the associated complexities or cost.
12

13. Additional Security Layer to Existing Antivirus
Solutions
Threat Detection and Response doesn’t require users or Managed
Security Service Providers (MSSPs) to replace existing AV solutions
already deployed. TDR works in tandem with existing AV, bringing an
additional, powerful layer of threat detection and event correlation to
catch anything that AV might miss.
13

14. How it works
14

15. How it Works
• Threats detected on the Firebox or via
the Host Sensor are sent to ThreatSync
• They are continuously correlated and
analysed
• Scored and ranked by severity
• Threats are quickly remediated through
one-click response options, or by
leveraging policies to enable an
automated response including
quarantine the file, kill the process, and
delete the registry key persistence.
15

16. Award-Winning Security and Visibility Platform
16
All of WatchGuard’s Security Services are delivered as an integrated solution within an easy-to-
manage and cost-effective Firebox appliance.
Enterprise-grade technologies, easy to deploy and easy to manage.
You face the same threats as enterprise organisations, you need the same level of security.

17. Demonstration
17

18. Over to you! Q&A
18

19. Current Promotions &
WatchGuardONE
19

20. ‘Red for Red’ Loyalty Promotion
• WatchGuard’s ‘Get the Box For Free’ promotion is back!
• Trade up your firebox to a new Firebox T or M series and
purchase a 3-year Total Security Suite solution to get the box
completely free.
• ENDS 30TH JUNE 2020
• purdi.com/watchguard-distributor-offers/
20

21. 15% Discount on FireboxV & Firebox Cloud
• Get 15% off all new sizes, trade-ups or trade-ins on the FireboxV or
Firebox Cloud.
• These Fireboxes are perfect for securing your virtual network
environments and expanding your security perimeter with
security as good as a physical box.
• ENDS 30TH JUNE 2020
• purdi.com/watchguard-distributor-offers/
21

22. 120 Days Free Passport
• Test out WatchGuard’s latest solution, Passport for 120 days free.
• Don’t Let Employees On the Go Bring Your Business to a Halt
• Passport includes AuthPoint and DNSWatchGO. Activate
AuthPoint and DNSWatchGO separately for up to 250 users for
120 days (until July 31).
• ENDS 31ST JULY 2020
• purdi.com/watchguard-distributor-offers/
22

23. 120 Days FREE FireboxV
• Test out WatchGuard’s FireboxV for 120 days in this free trial.
• FireboxV is WatchGuard’s virtual firewall, hosted on the Cloud.
With more networks becoming online, this firewall helps to load-
balance all VPN traffic and can scale to meet your company
connection requirements.
• ENDS 31ST JULY 2020
• purdi.com/watchguard-distributor-offers/
23

24. 20% Discount on Passport
• With every purchase of WatchGuard’s Passport, you’ll receive 20%
off, including one- and three-year terms.
• Offering a highly competitive price for securing your network.
From five to over a thousand users can have EndPoint Security
including AuthPoint and DNSWatchGO.
• ENDS 30TH JUNE 2020
• purdi.com/watchguard-distributor-offers/
24

25. Three Years for the Cost of One
• Buy any three-year Total Security Access Point and pay just for
one year.
• When you buy any competitive trade in your Access Point,
purchase the three-year Total Security Suite solution and it will
only cost you for one year. Giving you Total Security for a fraction
of the price.
• ENDS 30TH JUNE 2020
• purdi.com/watchguard-distributor-offers/
25

26. 20% Discount on Bulk Access Points
• WatchGuard is currently offering an exclusive 20% off on any deal
registration for bulk Wi-Fi Access Points.
• Only available on deal registration of 5 or more Access Points.
Meaning you can get any new product Secure or Total Security
Access Points highly discounted.
• ENDS 30TH JUNE 2020
• purdi.com/watchguard-distributor-offers/
26

27. WatchGuard PartnerONE Programme
Your revenue NEVER determines your status in WatchGuard
PartnerONE.
• 10K IT Solutions providers worldwide
• 1K UK partners (10% WatchGuardONE)
• Significant opportunity to leverage a differentiator and
competitive edge for your business within the channel
27

28. WatchGuard PartnerONE Benefits
• Profitability to the Core
• WatchGuardONE is all about your profitability. Gain front-end discounts, back-end rebates,
deal registration, co-op funds, MDF, SPIFF programmes, and much more.
• 100 Percent Channel, 100 Percent of the Time
• Customise your partner experience to the products and services you focus on as a business,
including specialisations in Network Security, Secure Wi-Fi, and Multi-Factor Authentication.
• Award winning support at every angle
• 24/7 Technical support, Channel account mangament team, field marketing
team, Assigned sales engineer, Corporate WatchGuard support, Access to Threat Research
Team, 3rd Party industry insights & resources
28

29. Just Three Simple Steps
1. Fill out the 'Become a Partner' form at
www.watchguard.com/join
2. Meet your account management team
3. Earn your Sales certificates, Technical certificates and NFR
requirements
Reap all the benefits on day one with Quick Start or Status Match
promotions while you work towards earning programme status
29

30. What's Coming Up Next?
The 2020 Cybersecurity Landscape & the Opportunity for
WatchGuardONE Channel Partners
Join the webinar to learn much more about the
WatchGuardONE Partner Programme and the
opportunity for your business.
Register on our home page purdi.com
We will send the link in our follow up to this webinar along
with the recording and this slide deck, or just drop us a
quick message to watchguard@purdi.com
30
WEBINAR: 24th June Presented by Jon-Marc Wilkinson, Sales Director for UK&I, WatchGuard

31. Thank you
Get in touch: +44 (0)1488 647 647
watchguard@purdi.com
www.purdi.com