Watchguard make firewalls and other network devices, and related management and monitoring software.

learn more… | top users | synonyms

0
votes
0answers
12 views

Watchguard VPN Connection Issue

I am having problems setting up a BOVPN between an XTM510 and an XTM21-w. I have checked over the settings 3 times for all of the phases, tunnels and gateways on both sides and everything is correct. ...
0
votes
1answer
15 views

Malware lab with watchguard firewall

I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
2
votes
2answers
59 views

WatchGuard Port Forwarding / Static NAT

I'm trying to forward a specific port on my WatchGuard firewall to an internal host in a specific VLAN. My setup is roughly as follows: INTERNET vv WatchGuard vv--------vv--------vv ...
1
vote
0answers
53 views

Firebox x700 Reset to Default Not Working

I found a site that explains how to reset a Firebox 700 series back to default as you can see from this link: https://www.hashdoc.com/documents/7502/how-to-default-a-watchguard-firebox-700-or-x700 ...
1
vote
2answers
68 views

Watchguard VLAN Head-Grasping needed

I am trying to wrap my head around setting up my new watchguard M400. Here's what I need to figure out and what I've done so far. My ISP provided me with a P2P IP, which I plugged into my interface ...
0
votes
1answer
39 views

Watchguard BOVPN and new ISP

We are changing our Internet Circuit to a new ISP. During testing I have both circuits, plus a failover circuit connected to our WatchGuard XTM515 I can browse the Internet, and Ping via the new ...
0
votes
1answer
503 views

Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)

I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs. The authentication itself ...
0
votes
1answer
62 views

Proxy action for user-agent blocking with regular expressions not blocking

I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this: List image ...
0
votes
2answers
156 views

WatchGuard blocking internal UDP packets

I'm seeing lots of packets that our WatchGuard firewall is dropping. They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500. Since I've started seeing these messages ...
0
votes
0answers
60 views

Watchguard HA Cluster Issue

I am trying to setup a Watchguard Firecluster in our rack and am having issues with the setup. We have two Ethernet up links provided by the Data center that go to their VRRP/HSRP configured routers ...
0
votes
2answers
72 views

DNS servers trying to send data to google+ - google DNS

I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
1
vote
0answers
99 views

WatchGuard Authentication equivalent with Cisco ASA X series

I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
0
votes
2answers
111 views

Routing between 2 networks and 2 routers

I have a WatchGuard XTM33 and a Cisco ASA 5505, current network is running off of the Cisco and I want to eventually migrate over to the WatchGuard using new IP scheme. ASA 192.168.111.1/24 WG ...
0
votes
0answers
225 views

Why need DHCP Relay (Watchguard) inside the Trusted network?

I run a small network that looks like this: { Win 2008 server , desktops , Wifi AP} -> Switch -> Watchguard XTM21 firewall (the Switch is connected to the XTM's Trusted interface ; the XTM ...
0
votes
0answers
35 views

Can I use both one-to-one NAT and port mapping on one Watchguard FireBox?

Old Watchguard III / 700. Is it possible to do both port mapping and one-to-one NAT? I recently changed ISP. Our external static range is a different range from the gateway subnet. Only way I ...
0
votes
1answer
281 views

Clients intermittently cannot reach internal server, Windows network with Watchguard XTM

Small business has internal Windows network on a single subnet 192.168.16.x. There is a Watchguard XTM 330 firewall appliance which routes traffic to the internet. Leased line. Some users are having ...
0
votes
0answers
189 views

IPSEC VPN with same remote peer IP - Only 1 remote connection at a time

I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address. The first phone connects fine, when the second phone connects the first phone ...
0
votes
0answers
153 views

Watchguard dimension backups

I've got a virtual machine with Watchguard dimension OS which writes a database backup every 7 days: I haven't checked for a couple of months but when I've logged on I've seen that the /var mountpoint ...
0
votes
0answers
56 views

Watchguard XTM 23 blocking company website

The company that I'm working at runs a website and 1 week ago the site started returning 404's whenever anyone tried to access it from our protected network. We immediately checked on the status with ...
0
votes
1answer
338 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
0
votes
1answer
1k views

External VPN users cant access mapped network drives with Name have to use IP address

It's not a massive problem but some users complain they can't access our storage drive when working externally across the VPN. For instance, internally they can type \\storageserver\adminfolders and ...
0
votes
1answer
89 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
1
vote
1answer
371 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
1answer
3k views

Network Performance Issues w/ Watchguard XTM 23

I'm in charge of maintaining a small network for a client (around 10-15 computers) that has an internet connection to the outside world of 100mbps (ironically, though, I just ran a speedtest bypassing ...
0
votes
1answer
161 views

Watchguard XTM blocking login attempts

routinely I'm seeing lots of login attempts to my mail server trying out various login names starting from A to Z coming from the one IP on one day and another IP on another day. Is there any means ...
1
vote
2answers
384 views

Watchguard Firebox “split” fibre optic line into 2 interfaces

We have a requirement on our Watchguard Firebox XTM505 to be able to split our incoming external interface, in this case a fibre optic dedicated leased line, 100/100. We use the line in our office of ...
2
votes
2answers
1k views

Watchguard firebox: public IP addresses behind firewall with as much usable IP addresses as possible

Our ISP assigned us 16 public IP addresses that we want to assign to hosts behind a Watchguard firebox x750e. The IP addresses are: x.x.x.176/28 of which x.x.x.177 is the gateway. The hosts will be ...
0
votes
1answer
3k views

Watchguard XTM Internal Policy Denial

Question on Watchguard XTM policy not allowing some traffic through. I have setup in Policy Manager named "TCP - NAS" that allows all TCP ports from External to SNAT from 192.168.10.13 -> ...
2
votes
1answer
1k views

How to block AnonymoX addon operations with Watchguard XTM

We are using Watchguard XTM 502 as firewall in our office. Some of our employee using AnonymoX addon proxy on firefox. Normally Watchguard XTM block proxy. But Watchguard XTM 502 can't able to block ...
0
votes
1answer
1k views

Watchguard Firewall SSLVPN

After running into some initial connection errors (which were resolved via Watchguard Firewall - Issues with SSLVPN), I'm able to accept the SSL certificate provided by the firewall and get further ...
0
votes
1answer
9k views

Watchguard Firewall - Issues with SSLVPN

I have a client who has a WatchGuard XTM 23 device on site as their primary firewall. I just upgraded its firmware a couple days ago to the latest version for that series, 11.6.6. The problem is that ...
0
votes
4answers
10k views

What are the instructions to reset a Watchguard Firebox X1000?

We had a Firebox X1000 model R6264S, and the power supply died. We purchased another one cheaply from Ebay, but I cannot find instructions anywhere about how to reset this device to factory defaults ...
1
vote
0answers
301 views

Watchguard - passwordless SSH login to block/ban IP addresses

I have Watchguard XTM22-W as my firewall. On it there are few 1-to-1 NAT policies through which I access local services (mainly SSH on different machines). All these machines have Fail2Ban installed ...
0
votes
2answers
738 views

Separate WebBlocker settings, using one Watchguard XTM 505?

I support a school with 3 locations that uses a Watchguard XTM 505. They are implementing a BYOD wireless solution with Aerohive APs, and they will have 3 SSIDs (School, Guest, BYOD). Each SSID needs ...
1
vote
3answers
177 views

Networking 2 lans together for file transfers

I currently have 2 separate cabinets setup in a data center and each cabinet has it's own Watchguard XTM810 firewall and ISP router. The cabinets are not located next to each other. All of the servers ...
0
votes
1answer
61 views

Can Watchgurard XTM 520 support 2nd network drop?

I need a bit of advice here. We are having 2 XTM 520 firewall configured in HA by a consultant previously. The FW are connected to a 100 mbps network drop currently. I have taken over the work but I ...
1
vote
2answers
564 views

New EFM leased line setup with Watchguard router, vlan tagging issue

I have recently had a 2mb EFM connection installed in a charity I work for. We were not supplied a router because we already had a watchguard XTM330 in storage ready to be used. The line is presented ...
4
votes
2answers
632 views

Two companies one Internet connection, Passthrough Public IP

My client is the tenant who will be sharing Internet from the other tenant. The other tenant has a WatchGuard in place. I am not familiar with WatchGuard or their interface. The IT guy I am working ...
0
votes
1answer
1k views

GPO Setting to allow workstations to use VPN

Is there a GPO setting that allows non-admins access to change their network settings. Which is what the SSLVPN does? If so, what is it? Background : I've got a few laptops that are used by Domains ...
0
votes
1answer
2k views

Watchguard SSLVPN user connection issue

I have a user that needs access to our SSLVPN on our Watchguard firewall from his company issued laptop. The problem is when he tries to connect as himself he cannot connect. If I login to the machine ...
1
vote
0answers
324 views

Webservice randomly dropping connections - possibly due to firewall nonevent data?

I have a hosted webapp which requests data from a REST webservice in our office. Each page calls one (or several) webservices, which go from our host, via our firewall (a Watchguard Firebox) to a ...
0
votes
1answer
2k views

How to forward external traffic from specific port to specific external ip?

How do i forward outgoing traffic for specific port from internal network to specific external ip in watchguard? I know how to forward incoming traffic using SNAT.
0
votes
1answer
526 views

Connecting two networks VPN different IP Schemes

I have a client with two networks in two buildings and they want to access each others resources. Right now site B connects to site A via a VPN over a T1 line. They want to get rid of the T1 and go ...
0
votes
1answer
3k views

Routing between multiple IPSEC VPN connections?

I have 4 sites configured with IPsec VPNs like the diagram below: Site A ------------ Main Site -------------- Site B | | ...
0
votes
1answer
4k views

WatchGuard proxy error - header-line too large

When trying to access new threads on a forum, I am receiving the error below. It seems like post count on the forum may have reached a point that it is generating a HTTP response header that is too ...
1
vote
1answer
520 views

Wireless LAN Bridge with WAN VPN Failover

My network is below, it's currently just an ordinary 192.168.0.0/24, the branch offices needs to have access to resources on the main site. Currently all internet traffic go across the bridge and ...
0
votes
1answer
179 views

Is this considered 2 Factor Authentication?

Trying to create a 2 Factor Authentication for users to access data remotely. Here my scenario: We have a Watchguard to VPN into the network - If we use it's internal DB to store authentication ...
2
votes
2answers
2k views

IP Address Conflict with Router/Firewall

I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
1
vote
2answers
4k views

Kernel Printk: xx message suppressed

Hi I have a watchguard firewall, and I lost access to the firewall before xmas, therefore I visited the site, upgraded the firewall to the latest firmware but unfortunatly, I am now having similar ...
3
votes
1answer
6k views

Watchguard L2TP over IPsec passthrough

I'm attempting to connect to a VPN (L2TP over IPsec) server through (not to) a WatchGuard XTM 505 appliance. I have the VPN server setup behind the firewall on a 1-to-1 NAT, and other protocols (such ...