Firewall Security Services
Premium Protection Plan for your Watchguard Firewall
The Prime Security Suite is WatchGuard’s Premium all-in-one security protection package with advanced security features, real-time protection, and proactive threat defense with one comprehensive subscription. It includes everything from the Basic Security Suite — plus advanced protections such as cloud sandboxing (APT Blocker), DNS filtering, Shadow AI visibility, and enhanced log retention, helping organizations detect threats earlier, monitor AI adoption, and gain deeper visibility into their networks.
Get advanced security features, real-time protection, and proactive threat defense with one comprehensive subscription.
Cloud sandboxing, DNS filtering, Shadow AI visibility, and enhanced log retention.
Detects ransomware and zero-day exploits that evade traditional defenses using next-gen cloud analysis and behavior-based detection. Explore APT Blocker
Prevents phishing and malware infections by blocking malicious DNS requests and educating users in the moment. About DNSWatch
Identifies generative AI applications on the network and provides visibility into AI usage, adoption trends, and potential risk.
Manage all your Fireboxes from one console with WatchGuard Cloud or Dimension, including full network visibility and reporting tools.
Intrusion Prevention Service (IPS), Gateway AntiVirus, WebBlocker, spamBlocker, Application Control, Reputation Enabled Defense, Network Discovery, Botnet & Tor Detection — and centralized management with WatchGuard Cloud.
Choose WatchGuard Prime Security Suite for powerful, reliable protection and greater peace of mind every day.
From essential firewall features to AI-powered prevention and XDR response.
| Features & Services | SUPPORT | BASIC SECURITY | PRIME SECURITY | TOTAL SECURITY |
|---|---|---|---|---|
| Stateful Firewall | ||||
| VPN | ||||
| SD-WAN | ||||
| Access Portal** | ||||
| Intrusion Prevention Service (IPS) | — | |||
| Application Control | — | |||
| WebBlocker | — | |||
| spamBlocker | — | |||
| Gateway AntiVirus | — | |||
| Reputation Enabled Defense | — | |||
| Geolocation Blocking | — | |||
| Botnet Detection | — | |||
| Tor Exit Node Blocking | — | |||
| Network Discovery | — | |||
| APT Blocker | — | — | ||
| DNSWatch | — | — | ||
| Shadow AI* | — | — | Network Management | — | — | — |
| IntelligentAV*** | — | — | — | |
| ThreatSync (XDR) | — | — | — | |
| EDR Core | — | — | — | |
| WatchGuard Cloud Log Data Retention Report Data Retention |
— | 45 Days 1 Day |
90 Days 1 Day |
365 Days 30 Days |
| Support | Standard (24x7) | Standard (24x7) | Standard (24x7) | Gold (24x7) |
*Only available for new models, launched after 2025 (talk to your representative): T115-W, T125, T125-W, T145, T145-W, T175, T185, M295, M395, M495, M595, M695, M4850, M5850, M6850
**Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R. Total Security Suite required for M270, M370, M470, M570, M670, FireboxV and Firebox Cloud.
***Not available on Firebox T115-W, T20/T20-W, T25/T25-W, or T35-R.
Understanding your options for comprehensive network security
WatchGuard offers four pre-configured security bundles that combine essential services with support at different levels. Each tier builds upon the previous one, giving you the flexibility to choose the right level of protection for your organization.
The foundation of WatchGuard security
Standard Support + Essential UTM Services
Standard Support + Advanced Protections
Complete Protection with AI-Powered XDR
| Feature/Service | Standard Support | Basic Security Suite | Prime Security Suite | Total Security Suite |
|---|---|---|---|---|
| Technical Support (24/7) | ||||
| Software Updates | ||||
| Hardware Warranty | ||||
| Gateway AntiVirus | ||||
| Intrusion Prevention (IPS) | ||||
| WebBlocker | ||||
| Spam Blocker | ||||
| APT Blocker | ||||
| DNSWatch | ||||
| Shadow AI | ||||
| Threat Detection & Response | ||||
| IntelligentAV | ||||
| Data Loss Prevention |
If you already have a WatchGuard Firebox with an active subscription, you can:
Upgrades are pro-rated based on your remaining subscription time, so you only pay for what you use.
Switching from a competitor? WatchGuard's Trade Up program offers exclusive discounts when you trade in your existing firewall for a new WatchGuard Firebox.
Learn About Competitive Trade UpAlready a WatchGuard customer? Upgrade from your earlier-generation appliance to the latest solutions at a discount off standard pricing.
Learn About Trade Up ProgramPrefer to build your own security stack? You can also purchase individual security services separately and combine them with Standard Support. However, bundles offer significant cost savings compared to purchasing services individually.
Expand your WatchGuard protection beyond the firewall with these complementary solutions:
Cloud-managed wireless access points with WatchGuard security built-in.
Explore Wi-Fi Solutions →Advanced endpoint protection with EDR, EPP, and zero-trust network access.
Explore Endpoint Security →Multi-factor authentication to protect user access and prevent credential theft.
Explore AuthPoint →Extend WatchGuard protection to cloud environments with FireboxV and Firebox Cloud.
Explore Cloud Solutions →Centralized visibility and reporting with WatchGuard Cloud and Dimension.
Explore Management Tools →Browse all WatchGuard Firebox models for tabletop and rackmount deployment.
View All Firebox Models →Select Standard Support, Basic Security Suite, or Total Security Suite based on your security needs.
Find your Firebox model in the pricing table below and choose your subscription term (1 or 3 years).
Click the purchase button, and our team will process your order and send you activation instructions.
Questions? Contact our team for personalized recommendations.
Use the selector above to jump to your device in the table.
Pricing notes