WatchGuard Firewall

Experience the power of CompassOne

Get a Demo

Integrate. Simplify. Protect.

Satisfy logging and compliance needs by collecting and storing WatchGuard firewall logs. Live searching and simple setup give you a streamlined SIEM without the complexity, cost, and challenges of legacy solutions.

WatchGuard Firewall + Blackpoint Overview:

01Effortless log collection


Collect real-time WatchGuard firewall data, including traffic, event, alarm, diagnostic, and performance logs.

02Satisfy compliance, insurance, and regulatory needs


Collect and retain firewall logs to meet compliance standards, support regulatory audits, and maintain insurability. Leverage built-in log search tools to support periodic reviews.

03Predictable and affordable billing


Eliminate the high costs of traditional log and legacy SIEM tools. CompassOne offers a streamlined SIEM capability with flat-rate monthly pricing per firewall. No more complex usage calculations or unexpected billing overages.

04Robust log search


Leverage CompassOne’s powerful search, including time and field filters, keyword matching, and advanced query syntax, to rapidly find desired logs.

05Stored in standardized schema


CompassOne stores WatchGuard firewall logs using the widely adopted Open Cybersecurity Schema Framework (OCSF), making them compatible with numerous third-party tools for parsing, visualization, and analysis.

06Complimentary and extended storage


Start with a full year of free log storage for your WatchGuard firewalls. Easily extend retention with low monthly pricing.

07Simple setup


Install the Blackpoint EDR agent in your network, enable its syslog collector, log into your WatchGuard firewall and configure it to send logs to the agent. The same Blackpoint agent that enables 24/7 MDR also collects your logs. It’s that easy.