WatchGuard and Kaspersky
Hi there !
Given the recent events in Ukraine and the cyber-attacks from Russia, a question arises about eventual links between WatchGuard and Kaspersky. Indeed, Kaspersky Labs mentions WatchGuard as a partner [1]. It states that WatchGuard uses Kaspersky Anti-Virus SDK.
So, in my organization, we have some concerns about the fact that some WG products may use components whose supply is potentially under Russian control, therefore causing a high risk of supply chain attack.
The questions are then :
- How can we get sure no Kaspersky component is still in use on WG products ?
- Can WG guarantee this and provide evidences or ways to check for this ?
If we cannot get sufficient guarantee that it does not use any library originating from Kaspersky, we may consider withdraw all our WatchGuard products...
References
[1] https://www.kaspersky.com/partners/technology
0
Sign In to comment.
Comments
See my reply to your other post on this
In case anyone's looking for that "other post", here it is:
https://community.watchguard.com/watchguard-community/discussion/2450/watchguard-and-kaspersky#latest
[Edit from James C -- The other thread was closed to keep everything on this thread, if you have any comments or questions please make them here.]
WatchGuard no longer uses Kaspersky components in any of our products. Years ago we used Kaspersky AV on the XCS (email) and Fireclient (mobile) products, both of which are discontinued and EOL now. US federal government issued guidance in 2019 against using Kaspersky products.
WatchGuard Firebox passed the US NSA's Commercial Solutions for Classified use (CSfC) certification in early 2021. We could not have achieved this if we used Kaspersky in our product. https://www.nsa.gov/Resources/Commercial-Solutions-for-Classified-Program/Components-List/#components-list-index
Brendan Patterson
VP Product Management
Thank you @Brendan_Patterson
-James Carson
WatchGuard Customer Support
Excellent ! Thank you so much.