WatchGuard Core MDR for Microsoft
Description
Description
The WatchGuard Core MDR for Microsoft is a managed detection and response (MDR) service that adds 24/7 SOC monitoring, fast threat response and expert guidance to environments already protecting endpoints with Microsoft Defender for Endpoint. It lets the WatchGuard MDR team monitor your Defender-protected endpoints and your cloud-based Microsoft 365 environment, so you get the benefit of a security operations centre without having to build one.
Rather than sending you a flood of unnecessary alerts, MDR filters out the noise, investigates threats and responds on your behalf, with activity visible in one place through WatchGuard's Unified Security Platform. There is no need to migrate away from your existing Microsoft tooling.
Choose the band that matches your number of users and the term, then set the quantity to your number of users.
Key Features
- 24/7 SOC monitoring by the WatchGuard MDR team
- AI/ML-based threat detection backed by human expertise
- Monitors endpoints running Microsoft Defender for Endpoint
- Covers your cloud-based Microsoft 365 environment
- Fast threat response and expert guidance with no in-house SOC required
- Investigation reports summarising closed investigations for Defender-protected endpoints
- Licensed per user, with one endpoint device monitored for each licensed user
- Managed through the WatchGuard Managed Services portal
Requirements
This is a Bring Your Own License (BYOL) service for the Microsoft side: each endpoint you want monitored must have a Microsoft Defender for Endpoint P1 or P2 licence. The integration works only with Microsoft Defender for Endpoint and does not cover other Defender products such as Defender Antivirus, Defender for Office 365, Defender for Identity or Defender for Cloud. You will also need to grant WatchGuard access to your Microsoft 365 environment and complete the onboarding steps in the Managed Services portal.
Ideal for
Organisations and MSPs that have standardised on Microsoft Defender for Endpoint and Microsoft 365 and want round-the-clock managed detection and response without the cost and complexity of running their own SOC.
Compatible Products
Microsoft Defender for Endpoint
Microsoft Defender for Endpoint P1 or P2 licences are required on every monitored endpoint.
Microsoft 365
Cloud-based Microsoft 365 environments are monitored as part of the service.
Related WatchGuard MDR options
For WatchGuard Endpoint Security environments, see WatchGuard Core MDR. For wider coverage across endpoint, identity, network and cloud, consider WatchGuard Total MDR, or WatchGuard Open MDR for mixed third-party environments.
FAQs
Do I need my own Microsoft licence?
Yes. You must have your own Microsoft Defender for Endpoint P1 or P2 licence for each endpoint to be monitored.
What does Core MDR for Microsoft monitor?
It monitors endpoints in your Microsoft Defender for Endpoint environment and your cloud-based Microsoft 365 environment.
How many devices are covered per licence?
The service monitors one endpoint device for each licensed user.
Does it cover identity, network or other cloud platforms?
Core MDR for Microsoft focuses on endpoints and Microsoft 365, so threats moving through identity, cloud or the network may be missed. Total MDR or Open MDR offer broader coverage.
Can I combine it with WatchGuard Core MDR?
In environments with both WatchGuard Endpoint Security and Microsoft Defender for Endpoint, you can allocate both WatchGuard Core MDR and Core MDR for Microsoft. Other MDR licences cannot be combined in the same Subscriber account.
Payment & Security
Payment methods
Your payment information is processed securely. We do not store credit card details nor have access to your credit card information.
-
WatchGuard
Real Security for the Real World
WatchGuard is an American cybersecurity company that provides best-in-class security solutions for MSPs and IT professionals across the globe. In physical, virtual and Cloud environments, networks are being inundated with cyberattacks, which can make securing business assets an overwhelming challenge. As a pioneer in the unified cybersecurity field, WatchGuard has decades of experience developing simple, accessible and easy-to-use products designed to safeguard business-critical assets against evolving malware, network, and endpoint security threats. The company is always working to stay ahead of bad actors operating across the threat landscape. Leveraging emerging technologies including AI and machine learning, WatchGuard arms you with the most powerful and effective tools to protect your business.
Powered by its award-winning, flagship Unified Security Platform, WatchGuard’s comprehensive product portfolio spans network and endpoint security, secure wireless, multi-factor authentication, and network intelligence. WatchGuard’s enterprise-grade Firebox firewalls offer ironclad protection against even the most sophisticated, malicious threats. Widely deployable, Fireboxes are delivered as physical appliances or as virtual/cloud solutions, all at an affordable price point. WatchGuard’s extensive endpoint security solutions offer advanced protection for end users and devices, including endpoint antivirus, security operations, and DNS-level protection and content filtering.
With WatchGuard, you don’t just buy a standalone security device, you receive a holistic security management solution that provides peace of mind. Regular updates on feature enhancements and emerging security threats ensure you get the most out of your WatchGuard security solutions. For smart security, simply done, choose WatchGuard.
-
Why buy from The Tech Geeks?
As a longtime WatchGuard partner, we have seen WatchGuard solutions deliver a vast array of benefits for our customers. WatchGuard is a continuous innovator in the cybersecurity world, designing their products to evolve with increasingly sophisticated cybercrime activity.
If you require advice on any WatchGuard product, please reach out to one of our friendly team members. Choosing the correct firewall, wireless or endpoint security solution for your network is less about physical size and more about security capabilities and operational fit. The right security implementation will depend on many factors: use case, office size, number of devices, hardware or software preferences, remote connectivity and encryption requirements – all of which can be overly technical.
Our capable team knows network security, firewalls, endpoint security and wireless configuration inside out. We can provide you with unbiased, to-the-minute advice tailored for your IT implementation. Your time is precious, so don’t waste it - contact us today at The Tech Geeks for real-time support and best-price quoting.
