Home > Cybersecurity > Firewall security licenses
WatchGuard® Basic vs Total Security Suite explained
A WatchGuard Firebox is two things: the hardware, and a security subscription that turns on the protection inside it. Without a current subscription, the firewall still routes traffic but stops getting the updates that block new threats. Here is what each level includes and how to choose.
The short answer
- Every Firebox comes with a support license: firewall, VPN, SD-WAN, firmware updates and hardware warranty.
- Basic Security adds the core threat services: intrusion prevention, gateway antivirus, web filtering, application control, spam blocking and reputation checks.
- Total Security adds AI powered malware protection, cloud sandboxing, DNS filtering, endpoint protection, threat response, longer cloud reporting and Gold support.
- When a subscription expires, those services stop updating and firewall rules that use them can start blocking traffic.
- Terms are sold by the year. Longer terms usually cost less per year, and we track renewal dates for you.
What each level includes
| Feature | Support | Basic | Total |
|---|---|---|---|
| Firewall, VPN and SD-WAN | Yes | Yes | Yes |
| Firmware updates and hardware warranty | Yes | Yes | Yes |
| Intrusion prevention (IPS) | Yes | Yes | |
| Gateway antivirus | Yes | Yes | |
| Web content filtering | Yes | Yes | |
| Application control | Yes | Yes | |
| Spam blocking and reputation checks | Yes | Yes | |
| Cloud sandboxing of unknown files | Yes | ||
| AI powered malware protection | Yes | ||
| DNS filtering | Yes | ||
| Endpoint protection and threat response | Yes | ||
| Cloud reporting history | 1 day | 30 days | |
| WatchGuard support level | Standard 24x7 | Standard 24x7 | Gold 24x7 |
Exact features vary by Firebox model, and some larger models require Total Security.
Which one do you need?
What happens when the license expires
- Threat definitions stop updating, so new malware and attacks are not recognized.
- Web filtering, antivirus and intrusion prevention stop working or can start blocking traffic, depending on how rules are set.
- Firmware updates and hardware warranty end when support lapses, leaving known flaws unpatched.
- Your PCI scan, cyber insurance or E-Rate filtering proof may no longer hold up.
- Waiting to renew does not usually save money, and the protection stays off until it is renewed.
How WENO handles your licensing
Questions people ask
Can we upgrade from Basic to Total mid term?
Yes. Upgrades are available, and we can line up the dates so you are not paying twice.
Is the firewall useless without a license?
It still routes traffic and runs basic firewall rules, but it stops getting the updates and services that block modern threats.
Does hardware as a service include the license?
Yes. The Firebox, license, monitoring and support are in one monthly payment. See hardware as a service.
Sources
Features and terms are set by WatchGuard and can change. We confirm current details with every quote.