Listing Thumbnail

    WatchGuard AuthPoint - Cloud MFA With Passkeys and Zero Trust

     Info
    Deployed on AWS
    Free Trial
    AWS Free Tier
    Award-winning cloud MFA with phishing-resistant passkeys, device DNA, and zero trust policies. Built for organizations and MSPs protecting endpoints, VPNs, and Microsoft Entra ID.
    4.3

    Overview

    Play video

    AuthPoint Multi-Factor Authentication (MFA) by WatchGuard

    AuthPoint MFA is a cloud-native access management solution that protects businesses from unauthorized credential-based access and identity breaches. Trusted by more than 250,000 customers worldwide and managed by over 17,000 security resellers and service providers, AuthPoint delivers adaptive authentication with push notifications, passkeys, one-time passcodes, QR codes, and hardware tokens - all managed from WatchGuard Cloud.

    Winner of the 2025 SC Award for Best Authentication Technology and recipient of eight TrustRadius Top Rated Awards for 2026 (including Authentication, Identity Management, and Single Sign-On), AuthPoint is trusted by millions of users across tens of thousands of MSPs worldwide, with adoption rising more than 30% year over year.

    Start a free trial for up to 30 days and 250 users directly from AWS Marketplace.


    Key Capabilities

    • Phishing-Resistant Passkeys: Users authenticate with biometrics (fingerprint or face scan) instead of passwords. Each passkey is cryptographically bound to the real application domain, so phishing pages cannot intercept credentials. Supports both synced passkeys (NIST AAL2) and device-bound FIDO2 hardware keys like YubiKey (NIST AAL3).

    • Zero Trust Adaptive Policies: Every login is evaluated in context. Device posture, location, and behavior determine whether access is granted. Risk-based policies and geolocation intelligence block impossible login locations automatically.

    • Unique Mobile Device DNA: Every authentication is tied to the real device. Cloned phones are rejected automatically, preventing token duplication attacks.

    • 130+ Integrations Ready: AuthPoint connects to your existing environment via SAML and OIDC protocols. Protect Microsoft 365, Azure, Salesforce, Google Workspace, and other cloud applications. Certified for Microsoft Entra ID External MFA - no SAML configuration required for Microsoft environments.

    • VPN and Network Access: Integrates with all WatchGuard Firebox mobile VPN methods and major third-party remote access and firewall VPN products via RADIUS or SAML protocols.

    • Single Sign-On (SSO): SAML and OIDC application portal with MFA-protected access through the AuthPoint Identity Provider portal.

    • Cross-Platform Coverage: Protects Windows (10, 11), macOS (10.11+), VPN, and cloud applications. Mobile app supports Android 7.0+ and iOS/iPadOS 14.0+.


    Real-World Deployment: Healthcare Compliance

    MedNet, a healthcare services company managing sensitive patient records across three locations under GDPR requirements, deployed 500 AuthPoint licenses to protect authorized access to their network. After evaluating AuthPoint against Gemalto SafeNet Authenticator and RSA SecureID Access, MedNet chose WatchGuard for its value and technical support. "AuthPoint was rather simple to install on our network, thanks to the help of technical support. Combined with the simplicity for our employees, it was easy to use from the very start," said Kostantinos Theodorou, Systems Administrator at MedNet.


    Getting Started

    1. Subscribe through AWS Marketplace and activate your free trial (up to 30 days, 250 users).
    2. Configure users in WatchGuard Cloud - no on-premises infrastructure required for cloud-only environments.
    3. Assign tokens and deploy the AuthPoint mobile app to users.
    4. Set policies using zero trust adaptive rules for device, location, and behavior-based access control.
    5. Protect logins across endpoints, VPN, Microsoft 365, and cloud applications the same day.

    Compliance and Certifications

    WatchGuard Cloud holds ISO/IEC 27001:2022 certification for its information security management system and has earned TX-RAMP Level 2 authorization. AuthPoint passkeys meet NIST AAL2 (synced) and NIST AAL3 (device-bound) assurance levels, built on FIDO2 and WebAuthn standards recognized by Apple, Google, and Microsoft.


    Who Is AuthPoint Built For?

    Organizations and MSPs that need one MFA solution across every environment. Particularly effective for businesses protecting Microsoft 365, endpoints, and VPN access under one policy framework, and for MSPs managing multiple customer accounts from WatchGuard Cloud with multi-tenant management.

    Start your free trial today to see how AuthPoint protects your environment in minutes, not weeks.

    Highlights

    • Phishing-Resistant Passkeys and Unique Device DNA Security - AuthPoint goes beyond standard MFA with phishing-resistant passkeys built on FIDO2 and WebAuthn standards, meeting NIST AAL2 and AAL3 requirements. Each authentication is cryptographically bound to the real application domain, so phishing pages cannot intercept credentials. Device DNA ties every authentication to the genuine physical device, automatically rejecting cloned phones.
    • 130+ Integrations With Cross-Platform and Microsoft Entra ID Coverage - Protect Windows, macOS, VPN, and cloud applications from a single platform with 130+ ready integrations. AuthPoint is certified for Microsoft Entra ID External MFA, covering Microsoft 365 and Azure without requiring SAML configuration. Supports OIDC and SAML for SaaS apps including Salesforce and Google Workspace.
    • Cloud-Native Multi-Tenant Management Built for MSPs and Organizations - Deploy and manage identity security across all customer accounts from WatchGuard Cloud with no on-premises infrastructure required for cloud-only environments. Configure users, assign tokens, and start protecting logins the same day. Trusted by more than 17,000 security resellers and service providers protecting over 250,000 customers.

    Details

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free according to the free trial terms set by the vendor.

    WatchGuard AuthPoint - Cloud MFA With Passkeys and Zero Trust

     Info
    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    12-month contract (7)

     Info
    Dimension
    Description
    Cost/12 months
    WatchGuard AuthPoint MFA Identity Security (1 to 50 User License)
    WatchGuard AuthPoint MFA Identity Security License
    $29.36
    WatchGuard AuthPoint MFA Identity Security (51 to 100 User License)
    WatchGuard AuthPoint MFA Identity Security (51 to 100 User License)
    $25.85
    WatchGuard AuthPoint MFA Identity Security (101 to 250 User License)
    WatchGuard AuthPoint MFA Identity Security (101 to 250 User License)
    $22.97
    WatchGuard AuthPoint MFA Identity Security (251 to 500 User License)
    WatchGuard AuthPoint MFA Identity Security (251 to 500 User License)
    $20.60
    WatchGuard AuthPoint MFA Identity Security (501 to 1000 User License)
    WatchGuard AuthPoint MFA Identity Security (501 to 1000 User License)
    $17.61
    WatchGuard AuthPoint MFA Identity Security (1001 to 5000 User License)
    WatchGuard AuthPoint MFA Identity Security (1001 to 5000 User License)
    $15.35
    WatchGuard AuthPoint MFA Identity Security (5001+ User License)
    WatchGuard AuthPoint MFA Identity Security (5001+ User License)
    $13.29

    AI Insights

     Info

    Dimensions summary

    You buy WatchGuard AuthPoint MFA Identity Security as a per-user license under a contract term. The seven dimensions are volume bands based on your user count: 1 to 50, 51 to 100, 101 to 250, 251 to 500, 501 to 1000, 1001 to 5000, and 5001 or more users. You pick the band that matches your total users. As your user count moves into a higher band, the per-user cost decreases. All bands cover the same MFA identity security service; they differ only by user volume.

    Top-of-mind questions for buyers

    Each user account you configure in WatchGuard Cloud counts as one licensed user. You buy a license per user, so your total headcount determines which volume band applies. The service also covers authentication methods like the mobile app and hardware tokens for those same users.
    You buy the license band matching your total user count. As your user base grows into a higher band, the per-user cost decreases. The band applies to your full user count, not just the added users. You select the band that matches your headcount.
    Your license includes a WatchGuard Cloud account with automated token provisioning, AD/LDAP sync, RADIUS authentication, risk-based policies, reports and alerts, the mobile app for iOS and Android, Windows Logon agents, a Web SSO portal, feature updates, and technical support. Dark Web Credential Monitoring is not part of this MFA license.
    www.watchguard.com
    Helpful?

    Vendor refund policy

    For sales returns on WatchGuard Identity Security Solutions, please contact your WatchGuard Channel Partner. If you have an issue requiring troubleshooting, please feel free to open a support case via the WatchGuard Support Portal.

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    WatchGuard provides multiple support channels for AuthPoint MFA customers:

    Online Support Portal Submit and track support cases online for non-critical issues. Upload troubleshooting documents and receive detailed status updates to help resolve cases more quickly.

    Phone Support Recommended for critical situations such as network failures or authentication outages. Call +1 (877) 232-3531 for direct assistance.

    Email Support Reach the support team at support@watchguard.com  for questions and issue reporting.

    Free Trial Support AuthPoint offers a free trial of up to 30 days for a maximum of 250 users, allowing you to evaluate the solution in your environment before committing.

    Customer Satisfaction WatchGuard customers consistently rate support 4.7+ stars, with access to real experts. As noted by MedNet Systems Administrator Kostantinos Theodorou: "WatchGuard had immediate, informative sales and technical responses every time we contacted them. They also have a high standard of service."

    Minimum System Requirements

    • Mobile app: Android 7.0+, iOS/iPadOS 14.0+
    • Desktop agent: Windows 10, Windows 11, macOS 10.11+

    For deployment assistance, AuthPoint is managed entirely from WatchGuard Cloud. For cloud-only environments, no on-premises installation is required. Configure users, assign tokens, and begin protecting logins the same day.

    For refund or billing inquiries, contact WatchGuard support through any of the channels listed above.

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    4.3
    4 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    50%
    50%
    0%
    0%
    0%
    1 AWS reviews
    |
    3 external reviews
    External reviews are from PeerSpot .
    reviewer2245134

    Includes many security features and provides push notification feature

    Reviewed on Aug 12, 2024
    Review provided by PeerSpot

    What is our primary use case?

    We were using WatchGuard AuthPoint for our MFA users. Those using WatchGuard AuthPoint are connecting to the WatchGuard firewall.

    What is most valuable?

    The WatchGuard firewall includes many security features, such as UDP, block filters, web filtering, and GeoBlock. It's advantageous for us to have the roles in place to block people where we want to have them connected.

    What needs improvement?

    The solution should implement a tagging process, which will provide an extra layer of security for the devices connected to the VPN. This will help us determine which Windows Firewall feature or Windows version we need to connect to the VPN. We need to improve these things because we cannot restrict those features right now.

    For how long have I used the solution?

    I have been working with WatchGuard AuthPoint in the company for the past 15 years.

    What do I think about the stability of the solution?

    WatchGuard AuthPoint is a stable solution.

    I rate the solution a nine out of ten for stability.

    What do I think about the scalability of the solution?

    I don't see any issue with the solution’s scalability.

    I rate the solution’s scalability an eight out of ten.

    How are customer service and support?

    Technical support needs more people who have good technical skills and knowledge instead of just sharing documentation. We can refer to the documentation from our end. It will be easy for us to troubleshoot if they have someone with knowledge of how these boxes work. We contact technical support when we can't find the issue after referring to the documentation. So, when they offer us documentation, it makes no sense.

    We need someone with that knowledge level to understand the issue and at least recommend what needs to be done. Documentation sharing is something I can agree with. However, they share the document for any issue and ask us to refer to it. Having a TAC in place doesn't make sense if they don't want to resolve something in real time.

    How was the initial setup?

    The solution's initial setup is not complicated, and we can do it on our own.

    What's my experience with pricing, setup cost, and licensing?

    We got the product at a low price.

    What other advice do I have?

    WatchGuard AuthPoint works well in securing remote access for our organization. It's helping the organization a lot in terms of people. Regarding remote connectivity, we have configured the solution with all the users using it.

    The AuthPoint mobile app is used for AuthPoint authentication and push notifications. It's quite good in terms of performance, and I didn't find many issues with that. You get notifications on time, and it's working well.

    The solution's push notification feature has provided a good user experience. I didn't find many delays in the notification process. It is quite reliable, and the notifications are coming on time to the users who didn't find any issues.

    The product has limited next-generation firewall features. The solution has basic features but must improve and add many features to benefit the organization. That's something they need to develop.

    I would recommend WatchGuard AuthPoint to people who have budget constraints and need a pretty standard solution with all the features that will benefit an organization. However, the solution has some limitations. People who want a higher level of packet capturing and something better in terms of deep-level inspection should choose some other tool.

    Overall, I rate the solution an eight out of ten.

    RuiBarbosa

    Provides authentication with simple deployment and tutorials

    Reviewed on Jul 24, 2024
    Review provided by PeerSpot

    What is our primary use case?

    We use the solution for MFA.

    What is most valuable?

    Integration with mobile application is working fine.

    What needs improvement?

    It's so simple to configure. We have integration with the WatchGuard firewall.

    For how long have I used the solution?

    I have been using WatchGuard AuthPoint for two years.

    What do I think about the stability of the solution?

    I rate the solution’s stability an eight out of ten.

    What do I think about the scalability of the solution?

    50 users are using this solution.

    I rate the solution’s scalability a nine out of ten.

    Which solution did I use previously and why did I switch?

    I compared the specifications and tried some implementations. After I decided to choose Watchguard AuthPoint.

    How was the initial setup?

    The initial setup is very simple. They have good tutorials and good support from vendors.

    What's my experience with pricing, setup cost, and licensing?

    The solution is a little expensive.

    What other advice do I have?

    Overall, I rate the solution a nine out of ten.

    Ícaro Lira

    The integrations are good, and the push notifications improve the user experience

    Reviewed on Apr 02, 2024
    Review provided by PeerSpot

    What is our primary use case?

    We use the solution for multi-factor authentication.

    What is most valuable?

    The solution helps with workforce authentication. The security provided by the product is valuable. It is easy to use the push notifications. They improve user experience. The integrations are good.

    What needs improvement?

    The product must enable administrators to restrict the privileges of remote users.

    For how long have I used the solution?

    I have been using the solution for three months.

    How are customer service and support?

    Support is very good.

    How was the initial setup?

    The initial setup is easy. The deployment took two hours. I deployed the tool myself. I took a course on WatchGuard AuthPoint to configure it.

    What other advice do I have?

    I will recommend the product to others. We can integrate the tool with a firewall and secure it. Overall, I rate the solution an eight out of ten.

    Michael-Angelo Francis

    Strong security measures and easy initial setup

    Reviewed on Dec 22, 2023
    Review from a verified AWS customer

    What is our primary use case?

    We had a client needing strong security measures for their VPN users. They already used WatchGuard VPN, so to add extra security, we recommended upgrading their basic subscription to include multi-factor authentication (MFA) with AuthPoint. It was seamless, applying the license, adding users, syncing with the local gateway, then Active Directory, and the user groups. And it was as easy as that.

    I primarily use AuthPoint for the authentication feature, and it can also do mobile device authentication and more.

    What is most valuable?

    The token-based two-factor verification (2FA) for user logins is valuable. It's the primary reason we use AuthPoint, and I find it very effective.

    What needs improvement?

    I did reach out to WatchGuard for some features I'd like to see. I have a security license where AuthPoint could be used as a secondary authenticator for Office 365 users.

    It would be great to leverage AuthPoint for external authentication for Office 365, especially since some users prefer familiar tools, even with Microsoft's recent 2FA rollout.

    Additionally, I'm currently testing WatchGuard EDR, and I'd love to see full visibility into the cybersecurity status of assets, including vulnerabilities.

    For how long have I used the solution?

    I have been using it since August this year.

    What do I think about the stability of the solution?

    I faced no issue whatsoever. AuthPoint has been incredibly stable, with no lag, crashes, or downtime.

    What do I think about the scalability of the solution?

    Scaling is very simple. When I need to add users for our MFA (multi-factor authentication), I just purchase additional licenses from WatchGuard directly or through partners like Amazon. Entering the license key updates my subscription and expands my user base. We recently scaled from one user to ten, and I expect to have at least twenty in the near future.

    How are customer service and support?

    I have a couple of open cases right now as I explore the full potential of WatchGuard solutions and how they can help us.

    Their accuracy has been impeccable, and their speed is fantastic. They're very responsive and technically competent. When I faced an issue configuring my CMITsec (local machines not pulling licenses from the IPSec server), it was a simple fix. The support technician walked me through the steps, and identified a missing firewall rule on port 22, and it was resolved within 15 minutes. Case open, case closed! The issue was fixed quickly.

    How was the initial setup?

    The initial setup with AuthPoint was very easy. I simply logged into WatchGuard Cloud, entered the license, and attached it to the necessary firewall. The wizards were clear and straightforward, with no guesswork involved.

    Once I configured the gateway and put it on a server, the configuration for specific features, like the Redis server, was clearly outlined. Everything went seamlessly.

    It only took me around three hours! I needed a couple of support calls for questions that weren't explicitly covered in the instructions for advanced features, but the overall process was smooth and quick.

    What about the implementation team?

    I handled the deployment entirely in-house. As an SSP supporting our clients, we take care of these things ourselves.

    It was just me for the deployment process. I'm the head IT assistant, so I manage these kinds of deployments.

    What was our ROI?

    We saw a very high ROI. Since we started reselling and using WatchGuard as our flagship, it's evolved beyond firewalls to a SaaS platform offering comprehensive cybersecurity.

    This allows us to sell its value and market the products to customers, earning profit through our markups. Additionally, WatchGuard's excellent support and service quality contribute to our company's overall return on investment. We trust them and they are reliable.

    What's my experience with pricing, setup cost, and licensing?

    The pricing seems great. It's tied to the firewall subscriptions, with one-year and three-year options available.

    My only concern is the segmentation of services, which I understand is common in SaaS. If I want most security features, like vulnerability scanning, it's not included in the basic package. It requires purchasing EDR, which gives endpoint detection but only limited asset management (physical hardware and software info, user list, malware) and no performance scanning. To get full features, I need Total Security, which combines everything into one payment.

    What other advice do I have?

    I'd suggest to read the documentation carefully. Reading the manuals is crucial. WatchGuard is detailed and clear, even for non-technical users. Its support team is also fantastic if you need further assistance.

    The manuals cover everything from basic setup to advanced features like Intrudy WebUI and console monitoring. It's truly simple and straightforward.

    Overall, I would rate the solution a nine out of ten.

    View all reviews