Watchguard provides wide range of devices, including WIFI with SMB level firewall with central management, reporting e.t.c for multiple devices. Based on yearly subscription. Capable of doing traffic inspection, anti-spam, anti-virus, IPS.

learn more… | top users | synonyms

1
vote
0answers
13 views

Firebox x700 Reset to Default Not Working

I found a site that explains how to reset a Firebox 700 series back to default as you can see from this link: https://www.hashdoc.com/documents/7502/how-to-default-a-watchguard-firebox-700-or-x700 ...
0
votes
0answers
25 views

Watchguard VLAN Head-Grasping needed

I am trying to wrap my head around setting up my new watchguard M400. Here's what I need to figure out and what I've done so far. My ISP provided me with a P2P IP, which I plugged into my interface ...
0
votes
0answers
20 views

Watchguard BOVPN and new ISP

We are changing our Internet Circuit to a new ISP. During testing I have both circuits, plus a failover circuit connected to our WatchGuard XTM515 I can browse the Internet, and Ping via the new ...
0
votes
1answer
223 views

Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)

I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs. The authentication itself ...
0
votes
1answer
35 views

Proxy action for user-agent blocking with regular expressions not blocking

I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this: List image ...
0
votes
1answer
87 views

WatchGuard blocking internal UDP packets

I'm seeing lots of packets that our WatchGuard firewall is dropping. They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500. Since I've started seeing these messages ...
0
votes
0answers
44 views

Watchguard HA Cluster Issue

I am trying to setup a Watchguard Firecluster in our rack and am having issues with the setup. We have two Ethernet up links provided by the Data center that go to their VRRP/HSRP configured routers ...
0
votes
2answers
61 views

DNS servers trying to send data to google+ - google DNS

I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
1
vote
0answers
70 views

WatchGuard Authentication equivalent with Cisco ASA X series

I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
0
votes
2answers
93 views

Routing between 2 networks and 2 routers

I have a WatchGuard XTM33 and a Cisco ASA 5505, current network is running off of the Cisco and I want to eventually migrate over to the WatchGuard using new IP scheme. ASA 192.168.111.1/24 WG ...
0
votes
0answers
172 views

Why need DHCP Relay (Watchguard) inside the Trusted network?

I run a small network that looks like this: { Win 2008 server , desktops , Wifi AP} -> Switch -> Watchguard XTM21 firewall (the Switch is connected to the XTM's Trusted interface ; the XTM ...
0
votes
0answers
30 views

Can I use both one-to-one NAT and port mapping on one Watchguard FireBox?

Old Watchguard III / 700. Is it possible to do both port mapping and one-to-one NAT? I recently changed ISP. Our external static range is a different range from the gateway subnet. Only way I ...
0
votes
1answer
242 views

Clients intermittently cannot reach internal server, Windows network with Watchguard XTM

Small business has internal Windows network on a single subnet 192.168.16.x. There is a Watchguard XTM 330 firewall appliance which routes traffic to the internet. Leased line. Some users are having ...
0
votes
0answers
173 views

IPSEC VPN with same remote peer IP - Only 1 remote connection at a time

I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address. The first phone connects fine, when the second phone connects the first phone ...
0
votes
0answers
127 views

Watchguard dimension backups

I've got a virtual machine with Watchguard dimension OS which writes a database backup every 7 days: I haven't checked for a couple of months but when I've logged on I've seen that the /var mountpoint ...
0
votes
0answers
49 views

Watchguard XTM 23 blocking company website

The company that I'm working at runs a website and 1 week ago the site started returning 404's whenever anyone tried to access it from our protected network. We immediately checked on the status with ...
0
votes
1answer
304 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
0
votes
1answer
980 views

External VPN users cant access mapped network drives with Name have to use IP address

It's not a massive problem but some users complain they can't access our storage drive when working externally across the VPN. For instance, internally they can type \\storageserver\adminfolders and ...
0
votes
0answers
95 views

OSSEC fails to apply Decoder Rule

I am trying to create some decoders for my watchguard log entries. However, even though my regex is correct, which even OSSEC-Regex agrees, it fails to apply the decoder. My decoders look like this: ...
0
votes
1answer
81 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
1
vote
1answer
312 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
1answer
3k views

Network Performance Issues w/ Watchguard XTM 23

I'm in charge of maintaining a small network for a client (around 10-15 computers) that has an internet connection to the outside world of 100mbps (ironically, though, I just ran a speedtest bypassing ...
0
votes
1answer
142 views

Watchguard XTM blocking login attempts

routinely I'm seeing lots of login attempts to my mail server trying out various login names starting from A to Z coming from the one IP on one day and another IP on another day. Is there any means ...
1
vote
2answers
333 views

Watchguard Firebox “split” fibre optic line into 2 interfaces

We have a requirement on our Watchguard Firebox XTM505 to be able to split our incoming external interface, in this case a fibre optic dedicated leased line, 100/100. We use the line in our office of ...
2
votes
2answers
1k views

Watchguard firebox: public IP addresses behind firewall with as much usable IP addresses as possible

Our ISP assigned us 16 public IP addresses that we want to assign to hosts behind a Watchguard firebox x750e. The IP addresses are: x.x.x.176/28 of which x.x.x.177 is the gateway. The hosts will be ...
0
votes
1answer
3k views

Watchguard XTM Internal Policy Denial

Question on Watchguard XTM policy not allowing some traffic through. I have setup in Policy Manager named "TCP - NAS" that allows all TCP ports from External to SNAT from 192.168.10.13 -> ...
2
votes
1answer
1k views

How to block AnonymoX addon operations with Watchguard XTM

We are using Watchguard XTM 502 as firewall in our office. Some of our employee using AnonymoX addon proxy on firefox. Normally Watchguard XTM block proxy. But Watchguard XTM 502 can't able to block ...
0
votes
1answer
976 views

Watchguard Firewall SSLVPN

After running into some initial connection errors (which were resolved via Watchguard Firewall - Issues with SSLVPN), I'm able to accept the SSL certificate provided by the firewall and get further ...
0
votes
1answer
8k views

Watchguard Firewall - Issues with SSLVPN

I have a client who has a WatchGuard XTM 23 device on site as their primary firewall. I just upgraded its firmware a couple days ago to the latest version for that series, 11.6.6. The problem is that ...
0
votes
4answers
9k views

What are the instructions to reset a Watchguard Firebox X1000?

We had a Firebox X1000 model R6264S, and the power supply died. We purchased another one cheaply from Ebay, but I cannot find instructions anywhere about how to reset this device to factory defaults ...
1
vote
0answers
282 views

Watchguard - passwordless SSH login to block/ban IP addresses

I have Watchguard XTM22-W as my firewall. On it there are few 1-to-1 NAT policies through which I access local services (mainly SSH on different machines). All these machines have Fail2Ban installed ...
0
votes
2answers
675 views

Separate WebBlocker settings, using one Watchguard XTM 505?

I support a school with 3 locations that uses a Watchguard XTM 505. They are implementing a BYOD wireless solution with Aerohive APs, and they will have 3 SSIDs (School, Guest, BYOD). Each SSID needs ...
1
vote
3answers
172 views

Networking 2 lans together for file transfers

I currently have 2 separate cabinets setup in a data center and each cabinet has it's own Watchguard XTM810 firewall and ISP router. The cabinets are not located next to each other. All of the servers ...
0
votes
1answer
59 views

Can Watchgurard XTM 520 support 2nd network drop?

I need a bit of advice here. We are having 2 XTM 520 firewall configured in HA by a consultant previously. The FW are connected to a 100 mbps network drop currently. I have taken over the work but I ...
1
vote
2answers
537 views

New EFM leased line setup with Watchguard router, vlan tagging issue

I have recently had a 2mb EFM connection installed in a charity I work for. We were not supplied a router because we already had a watchguard XTM330 in storage ready to be used. The line is presented ...
4
votes
2answers
575 views

Two companies one Internet connection, Passthrough Public IP

My client is the tenant who will be sharing Internet from the other tenant. The other tenant has a WatchGuard in place. I am not familiar with WatchGuard or their interface. The IT guy I am working ...
0
votes
1answer
1k views

GPO Setting to allow workstations to use VPN

Is there a GPO setting that allows non-admins access to change their network settings. Which is what the SSLVPN does? If so, what is it? Background : I've got a few laptops that are used by Domains ...
0
votes
1answer
2k views

Watchguard SSLVPN user connection issue

I have a user that needs access to our SSLVPN on our Watchguard firewall from his company issued laptop. The problem is when he tries to connect as himself he cannot connect. If I login to the machine ...
1
vote
0answers
310 views

Webservice randomly dropping connections - possibly due to firewall nonevent data?

I have a hosted webapp which requests data from a REST webservice in our office. Each page calls one (or several) webservices, which go from our host, via our firewall (a Watchguard Firebox) to a ...
0
votes
1answer
2k views

How to forward external traffic from specific port to specific external ip?

How do i forward outgoing traffic for specific port from internal network to specific external ip in watchguard? I know how to forward incoming traffic using SNAT.
0
votes
1answer
499 views

Connecting two networks VPN different IP Schemes

I have a client with two networks in two buildings and they want to access each others resources. Right now site B connects to site A via a VPN over a T1 line. They want to get rid of the T1 and go ...
0
votes
1answer
3k views

Routing between multiple IPSEC VPN connections?

I have 4 sites configured with IPsec VPNs like the diagram below: Site A ------------ Main Site -------------- Site B | | ...
0
votes
1answer
4k views

WatchGuard proxy error - header-line too large

When trying to access new threads on a forum, I am receiving the error below. It seems like post count on the forum may have reached a point that it is generating a HTTP response header that is too ...
1
vote
1answer
507 views

Wireless LAN Bridge with WAN VPN Failover

My network is below, it's currently just an ordinary 192.168.0.0/24, the branch offices needs to have access to resources on the main site. Currently all internet traffic go across the bridge and ...
0
votes
1answer
178 views

Is this considered 2 Factor Authentication?

Trying to create a 2 Factor Authentication for users to access data remotely. Here my scenario: We have a Watchguard to VPN into the network - If we use it's internal DB to store authentication ...
2
votes
2answers
2k views

IP Address Conflict with Router/Firewall

I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
1
vote
2answers
3k views

Kernel Printk: xx message suppressed

Hi I have a watchguard firewall, and I lost access to the firewall before xmas, therefore I visited the site, upgraded the firewall to the latest firmware but unfortunatly, I am now having similar ...
3
votes
1answer
5k views

Watchguard L2TP over IPsec passthrough

I'm attempting to connect to a VPN (L2TP over IPsec) server through (not to) a WatchGuard XTM 505 appliance. I have the VPN server setup behind the firewall on a 1-to-1 NAT, and other protocols (such ...
0
votes
4answers
631 views

looking for free windows/linux process watchdog

i have process running on windows and linux , i need watch dog that will email me if some process is down more then N seconds/minutes and also this watch dog will try to start it after N time and N ...
0
votes
1answer
2k views

Watchguard Firebox SSL certificate validation failed

I'm really stuck on this one! I have two Watchguard firebox firewalls. My SSL certificates expired and I bought two new wildcard certificates from RapidSSL. I couldn't get the certificate to install ...