Cloudflare Zero Trust Services vs. WatchGuard DNSWatchGO

I wanted to securely connect to my servers without getting tracked by malicious attackers, even though I was on public Wi-Fi. Security was my top priority, and I also wanted a setup that was easy and quick to start and provided great network performance. Cloudflare's Zero trust matches my criteria for becoming my first choice.

Incentivized

We have a lot of salesman that everyday have to connect to the office from remote, different places. the problem was that vpn is not safe anymore, with DWatchGuard DNSWatchGO they can connect without vpn and in safe mode, all the traffic is control by dns request so the bad site request are immediately block and the network is safer. Sometimes a category can be faulty, some good website are mark as "bad", so until WatchGuard DNSWatchGO fix the category you cannot use the website. or you have to make a rule to enable the website.

Incentivized

• Block access to known bad, risky, or unwanted destinations at the DNS or HTTP level.
• Excellent protection for remote users.
• Best in class browser isolation techniques.

Incentivized

• protect from phishing, ransomware
• content filtering
• no vpn needed
• cloud based

Incentivized

• Cloudflare picks the nearest device location to route the traffic, but It would be great if we could select any particular location.
• Cloudflare enables monitoring for all the connected clients; it would be great if we could monitor any individual client device while keeping some client devices private.
• Sometimes, its DNS is not able to resolve a few project websites; we have to manually purge the cache and even disable the Security to get the work done. So, it would be better if we could manually provide a DNS list or whitelist some websites.

Incentivized

• cost of service

Incentivized

We really need an extra layer of protection for our laptops. Choosing the DNSWatchGo makes sense as we have Watchguard firewall. If we had another brand of firewalls we would probably use anther product instead!

Incentivized

Within a few hours, new engineers are trained in basic tasks and are quite happy they are able to resolve issues independently. After SSO is configured, onboarding is as simple as signing into m365 via a web browser popup.

Incentivized

Good chat support from the portal for basic questions and minor issues. The enterprise support line is provided as well.

As long as all Cloudflare products and services rely on anycast technology, in a complex approach Cloudflare is faster and more relevant for cloud applications. The balance between security and performance is fully established. Also, Cloudflare has quite a good stack for API connection protection, like the API Shield example, which makes it more effective compared to F5 for example. Warp as a ZTNA agent gives better visibility and device posture information than FortiClient does.

Incentivized

At the time we were looking for a DNS based protection solution we had also tried "Blue Shield Umbrella". Both programs had similar behavior, but the main reason we eventually decided to go with DNSWatchGo was the fact the we have WatchGurd firewalls. So deploying DNSWatchGo was easy as we just copied the Application Control settings from our firewalls to the DNSWatchGo setup. Also Watchguard firewalls already have the DNSWatch service for the PCs that are connected to them while inside the company network, so it makes sense to equip them with the same shield while outside the company network.

Incentivized

• Cloudflare has provided us with 100% uptime even during planned maintenance
• Cloudflare has reduced time for engineering fixes from hours (or days) to minutes in some cases (primarily through Workers)

Incentivized

• easy to mange
• you can have control over external pc or cellphone

Incentivized