WatchGuard Passport is a per-user security bundle that combines three WatchGuard services in a single license: AuthPoint for multi-factor authentication, DNSWatchGO for DNS-layer filtering and content control, and WatchGuard EPDR for endpoint protection, detection, and response. It's built to protect users wherever they work, on or off the corporate network, and it's all managed from WatchGuard Cloud.

Yes. All three services in Passport work independently of the corporate network. DNSWatchGO routes DNS queries through WatchGuard's cloud filtering, AuthPoint validates logins through a cloud-based MFA flow, and WatchGuard EPDR protects the endpoint through its installed agent. Remote and mobile workers get the same protection as in-office users, with no requirement to be connected to a VPN or corporate gateway.

Passport includes three services. AuthPoint provides multi-factor authentication for VPNs, cloud applications, and Windows and Mac logins, with mobile device DNA matching to block cloned authenticators. DNSWatchGO provides cloud DNS filtering that blocks malicious domains and phishing sites before a connection is made. WatchGuard EPDR combines endpoint protection with endpoint detection and response, and includes WatchGuard's Zero-Trust Application Service and Threat Hunting Service.

WatchGuard Passport is managed from WatchGuard Cloud, the same console used for WatchGuard firewalls and other security services. Admins configure policies, deploy endpoint clients, manage authentication tokens, and review reports and alerts for all three Passport services from one interface. There's no management server or appliance to deploy.

Passport is licensed per user, with pricing tiers based on user count, from 1 to 50 users up to 1,001 to 5,000 users. Each license covers one user and includes AuthPoint, DNSWatchGO, and WatchGuard EPDR for the full term. Both 1 and 3 year terms are available, and multiyear terms can lower the per-user cost. Contact our team for pricing on larger deployments.