What is Threat Detection & Response?
Threat Detection & Response collects and correlates information from your network and cloud services to detect and stop malware.
It provides an extra layer of protection on the employee’s workstation.
The WatchGuard Threat Detection & Response (TDR) service consists of four components that collect, correlate, and analyze information from workstations, servers, and your WatchGuard Firewalls to detect and stop (potential) threats. TDR includes the following components:
ThreatSync
- The cloud-based data correlation engine that assigns threat scores.
TDR Host Sensor
- A small agent installed on workstations or servers. This sensor ensures that laptops, for example, remain “monitored” even when they leave the network (e.g. at home, on holiday, …).
- With this agent you stay informed about what is happening on your workstations, and suspicious or dangerous behavior is automatically reported.
Host Ransomware Prevention Module
- A service that blocks both known and unknown ransomware, based on behavioral rules and data collected via ThreatSync.
WatchGuard Threat Intelligence
- An in-house service that is continuously monitored, updated, and improved based on all collected threats. This service is used by ThreatSync to recognize threats based on behavior and other characteristics.
WatchGuard TDR is the perfect addition to your antivirus protection and ensures that neither you nor your users need to worry about wrong clicks, opening fake invoices, etc.
TDR is also the ideal solution for companies with multiple locations. Workstations, even on smaller sites, are centrally secured without extra investments. TDR is activated on the Firewall of your main location and does not require a separate license per firewall.
This security feature is included in the Total Security Suite from WatchGuard. This suite contains all the services offered in the Basic Security Suite, plus advanced malware protection, data loss prevention, enhanced network visibility, a secure access portal, and the ability to take action against threats directly from WG Cloud and Dimension.
Is your question not listed here?
Not every IT question has a standard answer. Sometimes the right solution depends on your IT environment, the applications you use, or the way your organization operates.
We’d be happy to work with you to determine what’s needed in your situation and help you with your question.
WatchGuard firewalls and their accompanying software provide exceptional insight into network traffic and potential threats!
Lineas
Antwerp