Compatible withWindows Server 2019✓ Astley WatchTower
Windows Firewall. Finally under control.
Cloud-managed firewall protection, live traffic visibility and active defence for business-critical Windows Servers.
From £99per Windows Server
per month*
*Excludes VAT where applicable.per month*
✓Protection activePolicy monitored
24/7Cloud managedFrom one workspace
Built for the servers your business depends on
Web serversRemote DesktopFile serversDomain controllersBusiness applications
Windows Server compatibility
Built for the Windows Servers you rely on.
WatchTower works with supported Windows Server environments across current and established deployments.
Compatible withWindows Server 2019✓Compatible withWindows Server 2022✓Compatible withWindows Server 2025✓One clear workspace
See exposure. Understand traffic. Respond with confidence.
WatchTower turns raw Windows Firewall configuration and connection events into decisions your team can understand and act on.
01Firewall exposure
See what every inbound rule is really allowing.
Search enabled Windows Firewall rules, highlight broadly scoped access and bring sensitive management ports to the surface without working through raw policy lists.
- Searchable rule inventory
- Exposure guidance for sensitive ports
- Server-scoped changes with an audit trail
02Live Network Audit
Understand each allowed and blocked decision.
Investigate near-real-time inbound and outbound activity by address, port, protocol, process, direction and time. Pause the five-second live view when something needs a closer look.
- Allowed and blocked connection decisions
- Application and service context
- Powerful filters for focused investigation
Active defence
Move from watching attacks to responding to them.
WatchTower correlates repeated failed sign-ins and lets you choose how your environment responds.
Monitor
Collect evidence and understand the attack pattern without changing access.
Recommend
Surface high-confidence source IPs for your team to review and approve.
Automatically respond
Block high-confidence public sources while trusted management IPs remain protected.
Geo & IP intelligence
Apply smarter controls without losing trusted access.
Country-based inbound blocking, reputation correlation and tenant allowlists work together to reduce unnecessary exposure. Confirmed hostile addresses can be distributed across protected endpoints, with every action recorded.
Allowlists firstTrusted IPs take priorityPrivate ranges protectedLocal addresses are rejectedConsolidated policyManaged rules stay usableRecorded decisionsDistribution is auditable
04Role-aware hardening
Protect the server for the job it actually performs.
A web server, domain controller and file server should not expose the same services. Preview the policy, back up the current configuration, restrict remote administration and retain a rollback path.
Approval remains with you.Hardening is never applied automatically. An authorised user must explicitly approve deployment in the portal.
Build your protection plan
Tell us what needs protecting.
Complete the short journey and our team will confirm the right setup, onboarding approach and monthly price.
Starting from£99per Windows Server, per month
*Excludes VAT where applicable.
*Excludes VAT where applicable.
- Cloud-managed Windows Firewall
- Live Network Audit
- Active defence controls
- Geo and IP intelligence
- Hardening, backup and rollback
Astley WatchTower Cloud Firewall