Questions tagged [watchguard]
Watchguard make firewalls and other network devices, and related management and monitoring software.
132
questions
0
votes
0
answers
27
views
Watchguard logs incoming SMTP connections has an dst_user entry. Where can I change this entry?
Hello fellow Exchangers,
as mentioned in the title any incoming smtp connection is routed correctly to our onpremise microsoft exchange server and the logs look as described here:
https://www....
0
votes
1
answer
52
views
Site to Site VPN 4G/5G
We have just set up a new site where internet is currently unavailable so we are using 4G/5G internet which we are unable to get a static IP address for. We use WatchGuard devices for Branch Office ...
2
votes
1
answer
6k
views
Watchguard config, drop-in or mixed-routing mode?
I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
1
vote
1
answer
102
views
Exchange Online ESMTP responds differently from different clients - Windows 10 vs Windows Server 2019
When I telnet to our Exchange Online's SMTP server address (****.mail.protection.outlook.com, port 25) I get two different responses or types of connect depending on what machine I'm using.
When I ...
0
votes
1
answer
131
views
Android .sswan profile to ipsec.conf
I have a .sswan profile with an embedded cert and username/password from a server admin. It connects to a Watchguard VPN without any issues. I was told by the server admin I can connect with my ubuntu ...
2
votes
1
answer
113
views
what is the proposal string for aes-gem256 deffie helman group 20, esp
As a developer tasked with connecting to a vpn without preconfigured profile scripts, i'm fumbling through setting up a strongswan ipsec.conf file. My current hurdle is an "invalid proposal ...
25
votes
5
answers
58k
views
Is there a real way to connect to WatchGuard's VPN from Linux?
WatchGuard officially has clients only for Windows and Mac. But I see that it uses openvpn internally. I couldn't connect to WG from Linux.
Is there someone who actually get this working? How?
-1
votes
1
answer
91
views
Cisco ASA to Watchguard
I have never worked with watchguard firebox firewalls in depth before and we are replacing a Cisco ASA 5515 with a Watchguard M390. I am having a hard time interpreting the configuration settings in ...
1
vote
3
answers
2k
views
Merge VPNs of two Watchguard firewalls into one firewall
I have two different Watchguard XTM 515 firewalls. Each has it's own set of VPNs created in them.
Now I need to use only one firewall to handle the VPNs of both. But the problem is that I don't know ...
1
vote
2
answers
36k
views
Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)
I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs.
The authentication itself works ...
0
votes
1
answer
1k
views
Cannot access network resources once connected to VPN
To begin, it's important this excerpt is read and understood before anything is suggested:
The VPN configuration has been untouched, as I'm the only admin user, and also the firewall itself has been ...
0
votes
1
answer
1k
views
Rsyslog rotates, but still logging to old log
Server: Ubuntu Server 14.04
I have a Watchguard Firebox logging to a server. It is supposed to rotate daily, however, when the rotate occurs, it doesn't write to the new log. It keeps writing to the ...
0
votes
1
answer
1k
views
VLAN tagging for non VLAN compliant devices
Okay so I'm a little new to VLANS, so forgive me if this is a silly question. I have a firewall set up with a few VLANS:
ID 1: This is the primary, and set to untagged. This will be used as a ...
4
votes
2
answers
12k
views
Watchguard L2TP over IPsec passthrough
I'm attempting to connect to a VPN (L2TP over IPsec) server through (not to) a WatchGuard XTM 505 appliance.
I have the VPN server setup behind the firewall on a 1-to-1 NAT, and other protocols (such ...
0
votes
1
answer
11k
views
watchguard port forwarding via SNAT
I have a problem with port forwarding on Watchguard.
What I want? I need to access from Internet via public IP on different port (lets say 9999) to a Remote Desktop on a PC which is on local network (...
0
votes
1
answer
2k
views
watchguard openvpn verify error
i've an Problem with an OpenVPN Connection, where i need al Little bit Help.
We've an Watchguard T15 by or Customer and he will connect his Noteboot by VPN to his network.
I've installed the ...
0
votes
1
answer
1k
views
Azure Site-to-Site VPN through a Watchguard Firewall
Summary
I'm trying to figure out what Firewall Policy I need to create to allow VPN connection traffic through my Watchguard firewall.
Description
I'm really struggling to figure out how to create ...
0
votes
0
answers
889
views
Routing to a different Subnet through VPN
im facing the following problem and after 2 days of own research and a huge amount of trial & error i could use some help.
Situation:
1 Company, 2 Offices. Both are connected by a BVPN(Branch ...
0
votes
1
answer
227
views
Strange Path Selection in WatchGuard OSPF
I am trying to configure OSPF between some cisco CPE routers and two WatchGuards. Already tried quite a lot of different setups, already trying to change network design, unfortunately every time I ...
1
vote
2
answers
464
views
Watchguard SNAT not working
We are currently changing our external IP Address and trying to setup external access to your internally hosted website again without much luck. We use Go Daddy as our DNS host for our web domain and ...
3
votes
0
answers
3k
views
How to block AnonymoX addon operations with Watchguard XTM
We are using Watchguard XTM 502 as firewall in our office. Some of our employee using AnonymoX addon proxy on firefox. Normally Watchguard XTM block proxy. But Watchguard XTM 502 can't able to block ...
2
votes
1
answer
136
views
Loading website on port 1433 without using ":1433"
Boss wants me to set up a website so that by typing "https://www.example.com" (no :1433) in the address bar of a web browser, the request will go through port 1433 on a Watchguard Firebox to an apache ...
1
vote
0
answers
589
views
Why is Watchguard dropping an open TCP connection?
We are using Watchguard version T35-W. When our system is under heavy load, we sometimes see active TCP client connections are dropped and become black holes. We think that this has something to do ...
0
votes
2
answers
164
views
DNS servers trying to send data to Google+ - Google DNS
I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
0
votes
1
answer
706
views
WatchGuard Firebox own Internet connectivity fails after adding BovpnVif route to 0.0.0.0/0
Environment: A company network has a Firebox M-series appliance with Total Security Suite at headquarters. Every branch office has a smaller T-series Firebox without subscription services. For this ...
5
votes
3
answers
44k
views
Watchguard mobile vpn: failed to get domain name
I am struggling to connect to a VPN using Watchguard's Mobile VPN client, and could use some help. The error I'm getting is the following one (even with log level = debug), which I can't manage to ...
0
votes
1
answer
3k
views
Getting error trying to connect across VPN using IPSEC IKEv2 PSK unsupport
This is the error I'm getting on the traffic monitor on my firewall. I have Watchguard X510 and I can't seem to get ipsec to work at all.
2018-07-12 10:46:19 iked (12.*.*.*<->10.30.30.146)drop ...
0
votes
0
answers
128
views
Deploying vhd from blob to Azure
We have some troubles in migrating VM(Linux) from local HyperV on Win 10 to Azure Cloud.
We got a linux vhd - deploy it on HyperV - then save as static and upload to blob storade in Azure.
Based on ...
2
votes
1
answer
3k
views
VPN from WatchGuard to Google Cloud Platform: "establishing IKE_SA failed, peer not responding"
We are trying to "Build a VPN from a Watchguard to Google Cloud Platform" just like what is described here:
https://querblick-it.de/build-vpn-watchguard-google-cloud-platform/
And under Remote peer ...
0
votes
0
answers
505
views
Watchguard - Configure custom domain IP resolve
A Watchguard firewall device used as DHCP server in a Local LAN office network.
There is an internal web server pc connected within the same LAN.
Lets say the website hosted in the web server ...
0
votes
4
answers
25k
views
What are the instructions to reset a Watchguard Firebox X1000?
We had a Firebox X1000 model R6264S, and the power supply died. We purchased another one cheaply from Ebay, but I cannot find instructions anywhere about how to reset this device to factory defaults ...
0
votes
1
answer
32
views
Watch Guard Total Security working over VPN
We have a warehouse and 4 other showroom locations. All the 4 locations are connect to the warehouse through a VPN. If we get a watch guard for each location and connect through a VPN. Would it be ...
2
votes
1
answer
39k
views
Watchguard Firewall - Issues with SSLVPN
I have a client who has a WatchGuard XTM 23 device on site as their primary firewall. I just upgraded its firmware a couple days ago to the latest version for that series, 11.6.6.
The problem is that ...
1
vote
0
answers
981
views
Traffic is not routing through Watchguard branch office vpn to Amazon aws VPN
Following this guide, I have successfully (I think) created a connection between my Watchguard physical VPN and an Amazon-VPC with a VPN attached to it but I cannot ping my EC-2.
Amazon is setup as ...
0
votes
1
answer
692
views
Is a Watchguard BOVPN or "site-to-site" VPN the best way to backup a server to a NAS at another location?
I currently have a customer who has two offices in separate cities. Each location has a Watchguard. They need a backup solution so we proposed a NAS to backup both servers to. The issue is the NAS ...
1
vote
0
answers
353
views
Watchguard Web UI Authentication with Active Directory user
Our WatchGuard firebox is configured to use active directory to authenticate VPN users. With Watchguard products, is it generally possible to use active directory to authenticate users that are ...
6
votes
5
answers
3k
views
Adding second firewall to ISP connection with multiple subnets?
My routing knowledge is a little rusty. I have a fibre internet connection hooked up like this:
The managed switch breaks out VLANS for transparent lan service that is also through the ISP's box. I ...
1
vote
2
answers
1k
views
Hyper-V DMZ environment
Im facing some problems trying to create a DMZ virtual machine in Hyper-v.
Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
2
votes
3
answers
3k
views
IP Address Conflict with Router/Firewall
I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
4
votes
2
answers
20k
views
tcp syn checking
I have a WatchGuard Firebox that I've recently configured. All of the policies look fine and all appropriate services seem to be working correctly.
However, one or two (seemingly) random nodes keep ...
0
votes
1
answer
378
views
Port forwarding via Watchguard
I have problem with accessing oracle database with oracle SQL developer.
I'm using Watchguard m400 as my firewall/router and Windows Server 2012 R2 as Oracle DB Server.
I have server with local IP, ...
1
vote
1
answer
1k
views
Best way to connect dual SSID / VLAN wireless to Watchguard firewall
I'm currently sorting out our network so we can have new wireless access points with dual SSIDs, one for internal use and one for guest use. These will be setup so each SSID is on a different VLAN. I'...
0
votes
1
answer
64
views
Lightswitch App AD authentication over SSL VPN
I have a lightswitch App (desktop app for windows) which authentications with AD against their logged in account, so the user doesn't need to log in again.
This works great in the office but over the ...
0
votes
1
answer
975
views
Watchguard blocking ports
I want to block the whole Internet for particular hosts. In this case I used policy 'Any" which basically blocks every single port (tcp+udp I believe). In FROM field I put particular IP address from ...
0
votes
1
answer
2k
views
Watchguard, accessing server with public IP from internal network
I can't go trough it.
I need access from my internal network to a server with public IP.
I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...