WatchGuard FireCloud Total Access.
Secure remote access without the VPN.
Protect remote and hybrid users wherever they log in, and give them access to the servers, file shares, and printers back at the office without opening up your whole network. FireCloud Total Access swaps your remote user VPN for identity based with one lightweight agent on each computer.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
WatchGuard FireCloud Total Access at a Glance
Security Services
Firewall as a Service: Cloud inspection at WatchGuard PoPs Secure Web Gateway: URL category & application control Threat Protection: Gateway AV, APT Blocker, IPS, botnet detection Geolocation: Block traffic by country Tunnel Bypass: Exclude trusted IPs & networks
Private Access (ZTNA)
Access model: Per app, identity based Resources: Servers, RDP, SQL, SMB shares, printers Kerberos: Supported via Gateway resource Access rules: Assigned by user group Network exposure: No inbound VPN ports
Clients & Gateways
Windows client: Windows 10 / 11 (64-bit) macOS client: High Sierra (10.13) / Tahoe (26), Rosetta required Firebox Gateway: Built into Firebox, no install Virtual Gateway: Hyper-V, VMware ESXi 7.0 / 8.0, Proxmox 8.4 / 9.0 Server Gateway: Windows Server 2022 / 2025
Licensing & Management
Licensing: Per user User tiers: 1 to 50 / 51 to 100 / 101 to 250 / 251 to 500 / 501 to 1,000 / 1,001 to 5,000 / 5,000+ Terms: 1 to 5 years Management: WatchGuard Cloud, multi-tenant Identity: WatchGuard Cloud Directory, AuthPoint, SAML 2.0 (Entra ID, Okta) Integrations: AuthPoint, ThreatSync, WatchGuard Endpoint Security
Only need internet protection?
FireCloud Internet Access protects remote users on the web and in SaaS apps. Total Access adds zero trust access to the private apps and resources on your network. See how the FireCloud editions line up before you pick one.
Internet Access protects remote users on the web and in SaaS apps with Firewall as a Service and a Secure Web Gateway. Total Access includes all of that and adds zero trust network access, so users can reach private resources on your network, like file shares, RDP hosts, and printers, without a VPN.
It's licensed per user and sold in tiers that start at 1 to 50 users and go up to 5,000+, with terms from one to five years. The per user price drops as your user count goes up, so pick the tier that matches your headcount. Not sure which tier fits? Our certified WatchGuard reps can size it for you.
No. FireCloud is delivered from the cloud, and protecting internet traffic only takes the agent on each computer. To give users access to private resources, you connect a FireCloud Gateway to your network. That can be a Firebox you already own, a virtual gateway on Hyper-V, VMware ESXi, or Proxmox, or a gateway installed right on Windows Server 2022 or 2025.
Users connect with the WatchGuard Agent and Connection Manager on 64-bit Windows 10 and 11, or on macOS High Sierra (10.13) through Tahoe (26). Macs need Rosetta installed before the agent goes on. The client isn't available today for Windows on ARM, Windows Server endpoints, Linux, Chromebooks, iOS, or Android.
Yes. FireCloud signs users in through WatchGuard Cloud Directory, WatchGuard AuthPoint for MFA and SSO, or a third party SAML 2.0 provider such as Microsoft Entra ID or Okta. Access rules are assigned by user group, so each team only reaches the resources it actually needs.
A traditional VPN gives a user broad access to the network once they log in, and you tune it firewall by firewall. FireCloud Total Access grants access one app at a time based on who the user is, inspects their internet traffic in the cloud, and keeps policies, users, and reports in one place in WatchGuard Cloud.
Yes, with one quick change. FireCloud tunnels traffic over WireGuard, and Firebox Application Control blocks WireGuard by default. Add an Application Control action on that Firebox that allows WireGuard, and users connect normally.
Yes. WatchGuard offers a free 30 day trial for up to 250 users, activated in WatchGuard Cloud or through a partner. Reach out to Firewalls.com and we'll help you get the trial running and move it to a paid license when you're ready.
Ready to retire your remote user VPN?
Tell us how many users you have and what they need to reach. Our certified WatchGuard experts will match you to the right tier and term, and our team can handle the FireCloud setup for you. Firewalls.com is a WatchGuard One Gold Partner.
Login and Registration Form
Existing User