Internet Access protects remote users on the web and in SaaS apps with Firewall as a Service and a Secure Web Gateway. Total Access includes all of that and adds zero trust network access, so users can reach private resources on your network, like file shares, RDP hosts, and printers, without a VPN.

It's licensed per user and sold in tiers that start at 1 to 50 users and go up to 5,000+, with terms from one to five years. The per user price drops as your user count goes up, so pick the tier that matches your headcount. Not sure which tier fits? Our certified WatchGuard reps can size it for you.

No. FireCloud is delivered from the cloud, and protecting internet traffic only takes the agent on each computer. To give users access to private resources, you connect a FireCloud Gateway to your network. That can be a Firebox you already own, a virtual gateway on Hyper-V, VMware ESXi, or Proxmox, or a gateway installed right on Windows Server 2022 or 2025.

Users connect with the WatchGuard Agent and Connection Manager on 64-bit Windows 10 and 11, or on macOS High Sierra (10.13) through Tahoe (26). Macs need Rosetta installed before the agent goes on. The client isn't available today for Windows on ARM, Windows Server endpoints, Linux, Chromebooks, iOS, or Android.

Yes. FireCloud signs users in through WatchGuard Cloud Directory, WatchGuard AuthPoint for MFA and SSO, or a third party SAML 2.0 provider such as Microsoft Entra ID or Okta. Access rules are assigned by user group, so each team only reaches the resources it actually needs.

A traditional VPN gives a user broad access to the network once they log in, and you tune it firewall by firewall. FireCloud Total Access grants access one app at a time based on who the user is, inspects their internet traffic in the cloud, and keeps policies, users, and reports in one place in WatchGuard Cloud.

Yes, with one quick change. FireCloud tunnels traffic over WireGuard, and Firebox Application Control blocks WireGuard by default. Add an Application Control action on that Firebox that allows WireGuard, and users connect normally.

Yes. WatchGuard offers a free 30 day trial for up to 250 users, activated in WatchGuard Cloud or through a partner. Reach out to Firewalls.com and we'll help you get the trial running and move it to a paid license when you're ready.