Cloud-native SWG and FWaaS that extends enterprise-grade firewall security to remote and hybrid workers, managed through WatchGuard Cloud with unified policy enforcement.
FireCloud Internet Access: Cloud-Delivered Security for the Modern Workforce
FireCloud Internet Access is a cloud-delivered secure web gateway (SWG) and firewall-as-a-service (FWaaS) solution built for secure access service edge (SASE) architectures. It extends enterprise-grade firewall security policies and protections to remote workers anywhere in the world, ensuring they receive the same level of protection as on-premises users -- all with lightning-fast performance and a seamless user experience.
The modern workplace has evolved past the traditional office setup. Employees work from remote locations, home offices, and on the go, blurring the boundaries of traditional network perimeters. FireCloud Internet Access addresses this challenge by inspecting web traffic in the cloud before it reaches users, defending against malware, phishing, ransomware, zero-day exploits, and other web-borne threats.
Comprehensive Security Feature Set
FireCloud Internet Access delivers a robust suite of security capabilities:
Firewall as a Service (FWaaS):
DNS Filtering with DNSWatch for advanced threat intelligence and real-time blocking
Intrusion Prevention System (IPS) protecting against spyware, SQL injections, and cross-site scripting
Gateway AntiVirus (GAV) scanning incoming and outgoing traffic for viruses and malware
APT Blocker with AI and machine learning to identify advanced persistent threats and zero-day exploits
TLS Inspection for encrypted traffic analysis
Botnet Detection and Geolocation Blocking
Secure Web Gateway (SWG):
WebBlocker URL Filtering to block malicious websites and inappropriate content
Application Control for granular management of which applications can run on devices
User Authentication:
SAML integration for identity provider (IdP) connectivity
Connection Manager with support for local accounts
Centralized Management Through WatchGuard Cloud
FireCloud Internet Access is seamlessly managed through WatchGuard Cloud, a centralized platform that unifies network security, identity, and endpoint management in a single interface. Administrators can configure global security policies that are instantly propagated to worldwide points of presence (PoPs). The platform delivers streamlined visibility, real-time threat monitoring, log and report data retention, and security event reporting -- reducing administrative burdens and empowering informed decision-making.
An easy setup wizard simplifies initial deployment, while automated updates and maintenance keep your security posture current without manual intervention.
Part of the WatchGuard Unified Security Platform
FireCloud Internet Access is a key component of the WatchGuard Unified Security Platform architecture, which spans Network Security (including Firebox appliances), Endpoint Security, Multi-Factor Authentication (AuthPoint), and Secure Wi-Fi. This unified approach enables organizations to enforce consistent security policies across their entire environment -- from on-premises Firebox-protected networks to remote users secured by FireCloud -- all managed from a single platform.
How to Get Started
Deploying FireCloud Internet Access is straightforward:
Subscribe through AWS Marketplace and access WatchGuard Cloud
Configure security policies and services using the easy setup wizard
Deploy the FireCloud client to user devices
Connect - users enter their credentials and gain secure access from anywhere
Monitor threats, traffic, and compliance from the WatchGuard Cloud dashboard
A free trial is available so you can evaluate FireCloud Internet Access in your environment before committing.
Key Use Cases
Securing Hybrid and Remote Workforces: Extend on-premises firewall protections to employees working from home, co-working spaces, or on the road, ensuring consistent security regardless of location.
Controlling Internet and Cloud Application Access: Enforce URL filtering, application control, and DNS security policies for remote employees to enhance compliance and reduce exposure to web-based attacks.
Defending Against Advanced Threats: Leverage AI-powered APT Blocker, IPS, and Gateway AntiVirus to protect against sophisticated cyberattacks including ransomware, zero-day exploits, and advanced persistent threats.
Why FireCloud Internet Access
Enterprise-grade protection with the same security services available to on-premises users
Global network of PoPs for optimized connectivity and low-latency access worldwide
Simplified management through a single cloud console covering security policies, monitoring, and reporting
Scalable deployment that grows with your organization's remote workforce
Unified platform that integrates with WatchGuard's broader security ecosystem including Firebox and AuthPoint
FireCloud Internet Access is security that travels with your workforce.
Highlights
Comprehensive threat protection with FWaaS and SWG capabilities including intrusion prevention (IPS), Gateway AntiVirus, APT Blocker with AI-powered cloud sandboxing, DNS filtering via DNSWatch, WebBlocker URL filtering, application control, TLS inspection, botnet detection, and geolocation blocking.
Architected for hybrid and remote workforces with cloud-native FWaaS and SWG delivered through worldwide points of presence. Users connect via the FireCloud client on any device with simple credential-based authentication, including SAML integration with your identity provider. Security policies configured in WatchGuard Cloud are instantly propagated to all PoPs, ensuring consistent enforcement regardless of user location.
Built for MSP efficiency through WatchGuard Cloud, a single management platform that unifies network security, identity, and endpoint administration. Administrators use an easy setup wizard, configure common policies across tenants, and access centralized real-time threat monitoring, automated updates, and streamlined security event reporting - reducing administrative burden and enabling scalable multi-tenant service delivery.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You buy WatchGuard FireCloud Internet Access as a one-year contract, priced per user license. The seven dimensions are volume bands based on how many user licenses you need: 1 to 50, 51 to 100, 101 to 250, 251 to 500, 501 to 1000, 1001 to 5000, and 5001 and above. You pick the band that matches your user count. Each band covers the same cloud-delivered service; the tiers only reflect license quantity. As your user count grows into a higher band, your per-user rate changes accordingly.
Top-of-mind questions for buyers
What counts as one license for billing under this product?
One license covers one user. You buy a license for each person who needs secure internet access. Your total user count determines which volume band you fall into. Count every remote or hybrid worker who connects through the service, since each active user requires a license.
If my user count grows into a higher band, does the new per-user rate apply to all users or only added ones?
You buy under a single band that matches your total user count. When your count crosses into a higher band, the per-user rate for that band applies to your whole license quantity, not just the added users. You select the band covering your full user total.
What security functions does each user license include?
Every license covers the same cloud-delivered service. This includes Secure Web Gateway with threat blocking, user-based Firewall-as-a-Service, and application-level Zero Trust Network Access. You also get VPN replacement, private application access, and central management through one console. The bands differ only by license quantity, not features.
www.watchguard.com+1
Helpful?
Vendor refund policy
For sales returns on licenses of FireCloud Internet Access, please contact your WatchGuard Channel Partner. If you have an issue requiring troubleshooting, please feel free to open a support case via the WatchGuard Support Portal.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
WatchGuard provides support for FireCloud Internet Access through two primary channels:
Online Support
Recommended for non-critical issues. Submit cases through the WatchGuard support portal at https://www.watchguard.com/wgrd-support/overview where you can provide detailed issue descriptions, upload troubleshooting documents, and track the status of your case.
Phone Support
Recommended for critical network failure situations or if you cannot access the online support portal. Have your WatchGuard serial number ready before calling.
U.S. Support: +1 (877) 232-3531
U.S. Sales: 1.800.734.9905
International Sales: +1.206.613.0895
Getting Started
FireCloud Internet Access is managed through WatchGuard Cloud, which includes an easy setup wizard, centralized policy configuration, and automated updates. Administrators can configure global security services and policies that are instantly propagated to worldwide points of presence. Users connect by entering their credentials into the FireCloud client on any device.
For product documentation, deployment guidance, and technical resources, visit the WatchGuard support overview page linked above.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Cloud-native SASE platform combining ZTNA, SWG, and FWaaS for hybrid workforces. Managed via WatchGuard Cloud with multi-tenant support built for MSPs and SMEs.
WatchGuard Firebox Cloud delivers unified threat management for AWS VPCs with IPS, antivirus, web filtering, and application control. Built for SMBs and distributed enterprises.
WatchGuard Firebox Cloud delivers unified threat management for AWS VPCs with IPS, antivirus, web filtering, and application control. Built for SMBs and distributed enterprises.
Combine AuthPoint MFA with dark web credential monitoring and credential access threat detection to protect every login and detect exposed credentials before attackers exploit them.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.