Accountable layer
Kenmie Managed Security Services
Design, deployment, monitoring, updates, reporting, and responsive support. Kenmie Computer turns the technology into an operating security program and remains your accountable point of contact.
The WatchGuard security ecosystem
Every signal connected.Every layer working together.
Kenmie Computer brings WatchGuard’s network, access, endpoint, identity, and cloud technologies into one Kenmie-managed security service.
Connected across every location
One ecosystem. Every site, user, and connection.
WatchGuard Cloud brings policy, visibility, and security intelligence together while NDR analyzes traffic across Fireboxes, switches, VPNs, servers, and connected devices to reveal activity moving through and within the network.
How the ecosystem operates
Response layer
Total MDR
WatchGuard Total MDR connects 24/7 SOC monitoring, expert investigation, proactive threat hunting, and rapid containment across endpoint, identity, network, and cloud signals.
Intelligence layer
WatchGuard Cloud + NDR
WatchGuard Cloud provides the unified command center while NDR analyzes network behavior, identifies hidden risks, and supplies actionable intelligence to ThreatSync response workflows.
The connected protection layers
Connected technologies. One security posture.
Each technology protects a different part of the business. Together, they provide the shared visibility and context that make coordinated detection and response possible.
Protect the network
Firebox Network Security
The foundation of the protected network.WatchGuard Firebox combines firewalling with layered security services for threat detection, content filtering, secure connectivity, and network segmentation. The T175 expands compact-appliance performance, while Prime Security Suite adds a flexible middle tier with advanced protection, Shadow AI visibility, cloud management, and enhanced reporting.
- T175 performance and connectivity
- Prime Security Suite protection
- Segmentation and secure connectivity
See inside the network
Network Detection & Response
AI-powered visibility into traffic and hidden network risk.WatchGuard NDR analyzes network-flow behavior across Fireboxes, switches, routers, VPNs, cloud workloads, and devices that cannot run an endpoint agent. Supported Active Directory event collection adds user and group context to lateral movement, access anomalies, and other suspicious activity.
- East-west and north-south traffic analysis
- Asset discovery and Active Directory context
- ThreatSync-connected response workflows
Connect detection and response
Total NDR
Network, SaaS, and compliance intelligence in one coordinated package.Total NDR combines WatchGuard NDR, WatchGuard SaaS, and Compliance Reporting to extend AI-driven detection and response across networks, cloud services, SaaS applications, identity activity, and compliance evidence.
- Network and SaaS threat detection
- Prioritized response workflows
- Compliance-ready reporting
Correlate every signal
ThreatSync XDR
Unified visibility, correlation, and coordinated response.ThreatSync XDR correlates activity across supported WatchGuard security layers, reduces isolated alert noise, and helps Kenmie prioritize investigation and orchestrate response from WatchGuard Cloud.
- Cross-domain signal correlation
- Prioritized incidents and context
- Orchestrated remediation workflows
Protect every connection
WatchGuard Access Points
Secure, scalable Wi-Fi managed from the cloud.WatchGuard Wi-Fi 6 and Wi-Fi 7 access points provide enterprise-grade wireless security, WPA3 encryption, and centralized monitoring through WatchGuard Cloud. The AP340 adds tri-band Wi-Fi 7, 6 GHz support, 10GbE connectivity, and a dedicated scanning radio.
- Wi-Fi 6 and Wi-Fi 7 performance
- WPA3 security
- Cloud-based visibility and control
Protect internet access anywhere
FireCloud Internet Access
Cloud-delivered web security and firewall policy for hybrid users.FireCloud Internet Access extends a secure web gateway and Firewall-as-a-Service to users working beyond the office, applying identity-aware policy without backhauling ordinary internet traffic.
- Secure web gateway
- Firewall as a Service
- Consistent hybrid-work policy
Protect users anywhere
FireCloud Total Access
Zero Trust access without legacy VPN exposure.FireCloud Total Access combines Firewall-as-a-Service, Secure Web Gateway, and Zero Trust Network Access. It verifies identity and device posture, grants access only to approved applications, hides private applications from the Internet, and applies cloud-delivered web protection.
- Identity-based ZTNA
- VPN-free private app access
- Cloud-delivered web protection
Verify every connection
Zero Trust Bundle
Identity, device, and application context working together.WatchGuard Zero Trust Bundle connects endpoint posture, strong identity verification, secure internet access, and application-level access so policy can evaluate more than a password or network location.
- Verified identity and device posture
- Least-privilege application access
- Unified cloud policy
Protect every device
Endpoint Security
AI-powered protection beyond traditional antivirus.WatchGuard Endpoint Security is designed to block ransomware, zero-day, and fileless attacks while reducing alert noise. Policies, endpoint visibility, threat monitoring, and response are managed through a cloud-based console, with options for deeper investigation and additional protection.
- Behavior-based detection
- Endpoint isolation and response
- Centralized cloud management
Extend endpoint protection
Endpoint Security Add-ons
Encryption, reporting, SIEM integration, data visibility, and server coverage.Purpose-built endpoint modules add Full Encryption, Advanced Reporting Tool, SIEMFeeder, Data Control, server protection, longer data retention, and controlled patching where the environment requires them.
- Full-disk encryption and recovery
- Advanced reporting and SIEM integration
- Sensitive-data and server coverage
Protect every sign-in
AuthPoint MFA
Flexible multifactor authentication for supported business resources.AuthPoint MFA protects supported cloud applications, computers, VPNs, and RADIUS workflows with push approval, passkeys, one-time codes, hardware tokens, and centralized policy.
- Cloud, computer, VPN, and RADIUS protection
- Passkeys, push, codes, and hardware tokens
- Central identity administration
Protect every identity
Total Identity Security
MFA plus credential exposure monitoring.AuthPoint Total Identity Security protects the identity lifecycle by combining multi-factor authentication with dark web credential monitoring. It supports push approvals, passkeys, TOTP, hardware tokens, and Zero Trust policies while alerting when workforce credentials appear in breach databases.
- Complete multi-factor authentication
- Dark web credential monitoring
- Zero Trust access policies
Protect cloud applications
Cloud Detection & Response
Find and respond to cloud risk where it starts.WatchGuard CloudDR extends protection into Microsoft 365, Google Workspace, and more than 40 supported SaaS environments. FireCloud telemetry broadens Shadow IT and Shadow AI discovery beyond OAuth-connected applications, with guided and automated remediation.
- Cloud identity threat detection
- Misconfiguration monitoring
- Expanded Shadow IT and Shadow AI discovery
Choose the right managed response
WatchGuard MDR Services
24/7 monitoring and response aligned with the customer’s technology stack.WatchGuard’s MDR portfolio includes Core MDR, Core MDR for Microsoft, Open MDR, Managed Zero Trust, and Total MDR, with an updated client dashboard, expanded monthly reporting, and optional Vulnerability Management.
- WatchGuard and Microsoft endpoint options
- Open MDR for mixed technology environments
- Full-stack Total MDR coverage
Find exposure before an incident
Vulnerability Management
Scheduled internal and external scanning integrated with WatchGuard MDR.WatchGuard Vulnerability Management identifies exposed services, missing patches, end-of-life software, weak credentials, and unsafe configurations, then gives Kenmie centralized findings for prioritized remediation and ongoing reporting.
- Internal and external vulnerability scanning
- Risk-based remediation priorities
- Security, audit, and insurance evidence
Manage Microsoft endpoint response
Core MDR for Microsoft
24/7 expert monitoring and response around Microsoft Defender for Endpoint.WatchGuard Core MDR for Microsoft adds continuous SOC monitoring, investigation, threat hunting, and authorized response to supported endpoints protected by Microsoft Defender for Endpoint.
- Continuous analyst monitoring
- Investigation and threat hunting
- Authorized containment and reporting
Additional security & management services
Extend protection. Strengthen operations.
These services add dedicated email security, controlled patching, and proactive systems operations without confusing RMM with patch deployment.
Secure the inbox
Explore Email Protection Email Protection
Cloud-delivered filtering for spam, malware, impersonation, and email policy risks.
Close known gaps
Explore Patch Management Patch Management
Identify missing updates, prioritize exposure, and deploy approved patches through controlled workflows.
Operate every device
Explore Remote Monitoring & Management Remote Monitoring & Management
Device health, alerts, inventory, automation, maintenance, and remote technical support—separate from patch deployment.
Protect · Detect · Respond
The value is in the connection.
A firewall protects the network edge. NDR analyzes traffic moving through and within the network. Endpoint protection sees device behavior. Identity security sees who is signing in. CloudDR sees SaaS risk. When those signals feed WatchGuard Cloud and coordinated response workflows—and Kenmie manages the environment—isolated tools become a connected defense.