SonicWall is expanding its
MSP portfolio with a new endpoint security offering that gives partners more choice in how they deliver managed security services. SonicWall Endpoint Security combines next-generation antivirus and endpoint detection and response in one agent. MSPs can manage the platform themselves, connect it to their own SOC or XDR environment, or use SonicWall’s SonicSentry service for fully managed detection and response.
That gives MSPs more flexibility in how they build services for different customers.
One console for more security tools
For MSPs already using SonicWall, the company is putting endpoint security into its existing Unified Management platform. A SonicWall spokesperson told ChannelE2E,
“SonicWall Endpoint Security is managed right from within SonicWall Unified Management, which gives MSPs a single pane of glass experience for managing firewalls and Cloud Secure Edge as well. Being able to conduct management in this unified platform saves significant MSP engineer time so they can focus on actual customer service, rather than constantly switching platforms. It also makes managing multiple tenants easy, and with one click MSPs can drill into a single customer or get a view of their entire portfolio.”
For MSPs, that can reduce the amount of time technicians spend moving between different security consoles.
The platform also includes behavioral detection, SonicWall’s Real-Time Deep Memory Inspection technology, automated response and ransomware rollback. It can also connect with SIEM and ticketing tools, which helps partners fit endpoint security into existing workflows.
MSPs can choose how much SOC work to handle
SonicWall is also giving partners options around who handles the security operations work. MSPs with their own SOC can continue running security operations themselves. They can also use SonicSentry for some customers while keeping others in-house.
“SonicWall Endpoint Security can integrate with most SIEM and XDR tools, making it a cost-effective technology option for smaller customers. MSPs with their own SOCs could also leverage SonicWall Endpoint Security with SonicSentry fully managed MDR for smaller customers while reserving their own SOC for larger, higher-value customers," the spokesperson said.
That approach gives MSPs another way to manage capacity. A provider could use its own SOC for larger customers while using SonicSentry for smaller accounts that may not justify the same level of internal resources. For MSPs that do not have a full security operations team, SonicSentry also gives them a way to offer MDR without adding more analysts.
Pricing built around recurring services
SonicWall is offering Endpoint Security in three tiers. Endpoint Security Advanced includes NGAV and EDR. Endpoint Security Premier adds longer telemetry retention. MDR for Endpoint Security adds SonicSentry’s 24/7 SOC, managed threat hunting and policy management.
SonicWall said the pricing is designed to help MSPs build the service into their existing customer packages.
“It's not just priced for SMBs; it's priced for MSPs to be able to sell it as part of their service offerings to their SMB clients. We anticipate MSPs who are still moving toward a solution selling model (rather than selling piecemeal products) will find it easier to build out service plans that are approachable for their customers while still preserving healthy margins at this price point, and the ability to offer it with fully managed MDR from SonicSentry means MSPs can significantly expand their service offerings without also having to expand their teams.”
For MSPs, the flexibility is the main draw. They can manage endpoint security themselves, use SonicWall for MDR, or combine the two based on the customer. That gives partners more room to build recurring services around their existing workflows, customer needs and margin goals.
