WatchGuard DNSWatchGO

We have deployed DNSWatchGo on all our company laptops. The main reason for doing this is to add another protection layer for are remote users, when they are not behind our firewalls, that protect their systems when they are within the company premises. As the protection of our firewalls can only help them when they are local or connected to our network via VPN, we need a replacement for the protections our Watchguard firewalls are providing to our company laptops, when they are online outside the company network.

While DNSWatchgo offers the same categories as Application Control offers on the Watchguard firewalls, the WebBlocker categories are not offered. This is really a disappointment and Watchgurad should really consider adding the extra WebBlocker categories to DMSWatchGo. In my opinion, reporting in DNSWatchGo is minimal to say the least and could use drastic additions. as it is today it does offer very little info to the admins. The identification of registered clients is flawed. It seems that the same clients are registered multiple times on the management platform, thus unnecessarily consuming licenses. In my experience, it is really annoying to have to remove the duplicate clients every time again and again. On the positive side, when one already has Watchguard firewalls seting up DNSWatchGo is really easy, as it shares the same categories with Watchguard firewall Application Control. So easily one can almost the firewall functionality on laptops. And we say almost, because DNSWatchGo is missing the WebBlocker categories / blocking capabilities to be considered a full firewall replacement.

With WatchGuard DNSWatchGO we can have DNS security and content filtering so we can be sure that employee can connect without ransomware or other attacks that can be dangerous.

We have a lot of salesman that everyday have to connect to the office from remote, different places. the problem was that vpn is not safe anymore, with DWatchGuard DNSWatchGO they can connect without vpn and in safe mode, all the traffic is control by dns request so the bad site request are immediately block and the network is safer. Sometimes a category can be faulty, some good website are mark as "bad", so until WatchGuard DNSWatchGO fix the category you cannot use the website. or you have to make a rule to enable the website.