Skip to content
Wizard IT
WatchGuard Gold Partner · Firebox · Total Security

WatchGuard firewall security for small business

Enterprise-class network security in a box sized for 5 to 100 users. We supply it, install it after hours, and manage it so it is never the device nobody has logged into since 2023.

Total Security Suite

What the subscription switches on

A Firebox without a licence is a good router. With Total Security Suite it is nine services that inspect, filter and sandbox everything crossing the edge of your network, and report on it in language an owner can read.

Small businesses are targeted because they usually have no real firewall. A Firebox gives a 12-person flooring company the same edge protection a 500-person firm runs, for a few dollars a day. We have put them in front of accountants, law offices, workshops and a hotel.

More detail in our WatchGuard firewall post and how DNSWatch stops a phishing click.

Services in Total Security9 items
  1. 01Intrusion PreventionScans traffic on all major protocols against constantly updated signatures: spyware, buffer overflows, cross-site scripting, SQL injection.
  2. 02WebBlockerBlocks known malicious sites and lets you filter categories. Stops the bad link loading and saves bandwidth on the sites that were never work.
  3. 03Gateway AntiVirusSignature and heuristic scanning of files as they cross the network edge, before they reach a PC.
  4. 04APT BlockerSuspicious files are detonated in a cloud sandbox. Catches new malware that has no signature yet.
  5. 05DNSWatchEvery DNS lookup is checked. A phishing link that gets clicked resolves to a block page instead of the attacker.
  6. 06spamBlockerReal-time spam and phishing detection, regardless of language or format, in front of your mail server or Microsoft 365.
  7. 07Reputation Enabled DefenceCloud reputation scoring of sites and botnets. Known-bad traffic is dropped before it is inspected.
  8. 08Network DiscoveryA live map of every device on the network and which ports are open. The printer with telnet enabled shows up here.
  9. 09ThreatSyncCorrelates what the Firebox and the endpoint agents see. An infected laptop is quarantined at the network level, not just on the machine.
Beyond the box

Three WatchGuard add-ons we usually recommend

AuthPoint MFA

Push-to-phone multi-factor for Microsoft 365, VPN and Windows logins. The single cheapest control against stolen passwords.

EPDR endpoints

Endpoint protection, detection and response on every PC and server, correlated with the Firebox through ThreatSync.

Secure Wi-Fi

WatchGuard access points managed from the same console. Separate guest network, no shared password on a sticky note.

FAQ

Questions we get asked

Straight answers. If yours is not here, ask it and we will add it.

What does a WatchGuard firewall cost for a small business in NZ?

A Firebox sized for a 10 to 25 person office with a three-year Total Security licence, installed, is a fixed one-off quote. Managed service on top is a modest monthly fee that covers rule changes, firmware, monitoring and the monthly report. We will quote it after a 15 minute call.

Is the router from our internet provider not a firewall already?

It does basic NAT and that is about it. It does not inspect traffic, filter web or DNS, sandbox files or report anything. The ISP router stays as the modem; the Firebox sits behind it and does the security.

Which Firebox model do we need?

For most Auckland small businesses the T25 or T45 with Total Security. Above 50 users, or with heavy VPN use, the T85 or an M-series. We size on your internet speed, user count and whether you have remote staff, and we will not sell you the bigger one to be safe.

Do you manage it after install, or do we?

Either. Most clients have us manage it: firmware updates, rule changes when you add a service, and a monthly report of what was blocked. It is a small monthly fee and it means the firewall is never the thing nobody has logged into for two years.

Can the Firebox handle remote workers?

Yes. The Firebox terminates VPN for staff working from home, or you use it with Microsoft 365 conditional access and skip the VPN entirely. We set up whichever fits how your staff work. Our remote work guide covers the options.

More services

Everything else we look after

Seven services, one set of technicians, delivered on-site across Auckland or remotely. Pick one or hand us the lot.

Taking calls now

Something broken?
Say so.

One number. A person picks up. Remote fix first, on-site the same day if it needs hands. You only pay for the time used.

Call 0800 438 949Get IT help