WatchGuard Authentication Client

by WatchGuardv12.7.0

Last updated Jun 8, 2026

Firebox Single Sign-On Authentication Client Software

Install with winget

$ winget install --id WatchGuard.WatchGuardAuthenticationClient --exact --version 12.7.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for WatchGuard Authentication Client

WatchGuard Authentication Client uses MSI. The silent install switches are /quiet /norestart.

One-line silent install (x86)

msiexec.exe /i WG-Authentication-Client_12_7.msi /quiet /norestart

See the full silent install reference for WatchGuard Authentication Client →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

Installers · v12.7.0

Architecture	Type	Scope	Install	Download
x86	MSI	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

2 known CVEs via NVD

high7.5Patched in wingetCVE-2024-6594affects <=12.7Sep 25, 2024
Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign...
Vendor advisory
critical9.1Patched in wingetCVE-2024-6592affects <=12.5.4Sep 25, 2024
Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authenticatio...
Vendor advisory

Source: NVD, updated 4h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr.

Related apps

WatchGuard Mobile VPN with SSL clientWatchGuard
WatchGuard.MobileVPNWithSSLClientv2026.2
The WatchGuard Mobile VPN with SSL client is a software application that is installed on a remote computer. The client makes a secure connection from the remote computer to your protected network through an unsecured network, such as the Internet.
WatchGuard Terminal Service AgentWatchGuard
WatchGuard.WatchGuardTerminalServiceAgentv12.11.2
WatchGuard® Terminal Services Agent Software
WatchGuard Authentication GatewayWatchGuard
WatchGuard.WatchGuardAuthenticationGatewayv12.10.2
Firebox Single Sign-On Authentication Gateway Software

Frequently asked questions

How do I install WatchGuard Authentication Client on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id WatchGuard.WatchGuardAuthenticationClient --exact --version 12.7.0. winget downloads the installer from WatchGuard and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install WatchGuard Authentication Client silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id WatchGuard.WatchGuardAuthenticationClient --exact 12.7.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

What are the silent install switches for WatchGuard Authentication Client?

WatchGuard Authentication Client uses MSI. Run the downloaded installer with: msiexec.exe /i WG-Authentication-Client_12_7.msi /quiet /norestart. The silent switches are /quiet /norestart.

How do I uninstall WatchGuard Authentication Client via winget?

Run: winget uninstall --id WatchGuard.WatchGuardAuthenticationClient --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from WatchGuard Authentication Client's Apps & Features entry.

Is WatchGuard Authentication Client free?

WatchGuard Authentication Client is distributed under Proprietary. Refer to the publisher (https://software.watchguard.com/SoftwareHome) for the full license terms - Wingetly itself does not charge for installation.

Does WatchGuard Authentication Client work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls WatchGuard Authentication Client directly from the publisher.

How do I keep WatchGuard Authentication Client up to date?

Run winget upgrade --id WatchGuard.WatchGuardAuthenticationClient --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of WatchGuard Authentication Client from microsoft/winget-pkgs.