Overview

WatchGuard Cloud manages your clients’ Firebox firewalls, access points and WatchGuard endpoint security. Connect WatchGuard to Neo once, at the MSP level, with the API credential of your own WatchGuard Cloud account. As a WatchGuard Service Provider, your credential reaches every account you manage in WatchGuard Cloud. A Subscriber account’s credential reaches that account only. Fireboxes you manage locally show in WatchGuard Cloud once they are registered there, with their status. Their configuration stays on the Firebox.

​

What Neo can do with WatchGuard

• Check a Firebox or access point after a WatchGuard Cloud offline alert: whether it is online now, since when it was down, and its uptime
• Read Firebox reports, VPN tunnels, firewall policies and exceptions for a firewall, VPN or blocked-site ticket
• Unblock or block a site and deploy the change to the named Firebox
• Find a computer in WatchGuard Endpoint Security, read its protection and security events, and isolate or scan it
• Read a ThreatSync incident and act on it
• Read licences and contracts, and send an AuthPoint test push

Every deployment to a Firebox, FireCloud allow exceptions, policy and VPN changes and protection uninstalls always ask a technician. AuthPoint token and user changes stay in the AuthPoint console. See WatchGuard API for the permission groups and access profiles.

​

Your WatchGuard accounts are mapped to clients

Neo matches each WatchGuard Cloud account you manage to a client in your PSA and keeps the mapping on the WatchGuard card’s Organization Mapping tab, refreshed on each PSA metadata sync. With the mapping, an agent works in the right client’s WatchGuard account by its account ID. Neo lists the accounts you manage, delegated accounts included. A tier-n Service Provider’s own clients are listed too, at every tier. A Subscriber credential maps its own account. An account that does not give you access stays unmapped. Leave it unmapped until WatchGuard Cloud gives you access to it: Neo cannot work in an account your credential cannot reach. Matching starts with the name: exact, then after stripping a legal-form suffix (Ltd, Inc, LLC). Last comes an AI match for the long tail. A name match, or one you confirm, is handed straight to your agents. An AI match is not handed to your agents automatically. It shows on the Organization Mapping tab, where you can confirm or correct it. Anything Neo could not match stays unmapped and visible on the same tab, where you can set the right client by hand. A mapping you set by hand survives every later sync.

​

Next steps