Watchguard make firewalls and other network devices, and related management and monitoring software.

learn more… | top users | synonyms

1
vote
1answer
62 views

Watchguard mobile vpn: failed to get domain name

I am struggling to connect to a VPN using Watchguard's Mobile VPN client, and could use some help. The error I'm getting is the following one (even with log level = debug), which I can't manage to ...
0
votes
0answers
18 views

Watchguard - Does SNAT and NAT Play together

Whilst I'm yet to try this because I'm affraid I'll loose access to my watchguards external interface I would like to know if the following scenario works? We currently have a bank of external IP's ...
2
votes
1answer
4k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
0
votes
2answers
20 views

Hyper-V DMZ environment

Im facing some problems trying to create a DMZ virtual machine in Hyper-v. Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
3
votes
1answer
7k views

Watchguard L2TP over IPsec passthrough

I'm attempting to connect to a VPN (L2TP over IPsec) server through (not to) a WatchGuard XTM 505 appliance. I have the VPN server setup behind the firewall on a 1-to-1 NAT, and other protocols (such ...
2
votes
1answer
2k views

How to block AnonymoX addon operations with Watchguard XTM

We are using Watchguard XTM 502 as firewall in our office. Some of our employee using AnonymoX addon proxy on firefox. Normally Watchguard XTM block proxy. But Watchguard XTM 502 can't able to block ...
0
votes
0answers
14 views

Watchguard ssl vpn doesn't accept long password

I set up a Watchguard SSL VPN on a T-10W model running firmware version 11.10.5-B492531. I use the Firebox-DB authentication store. At the login screen for the vpn, I kept getting Authentication ...
2
votes
3answers
2k views

IP Address Conflict with Router/Firewall

I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
3
votes
2answers
12k views

tcp syn checking

I have a WatchGuard Firebox that I've recently configured. All of the policies look fine and all appropriate services seem to be working correctly. However, one or two (seemingly) random nodes keep ...
6
votes
5answers
172 views

Adding second firewall to ISP connection with multiple subnets?

My routing knowledge is a little rusty. I have a fibre internet connection hooked up like this: The managed switch breaks out VLANS for transparent lan service that is also through the ISP's box. ...
0
votes
4answers
17k views

What are the instructions to reset a Watchguard Firebox X1000?

We had a Firebox X1000 model R6264S, and the power supply died. We purchased another one cheaply from Ebay, but I cannot find instructions anywhere about how to reset this device to factory defaults ...
0
votes
1answer
32 views

Port forwarding via Watchguard

I have problem with accessing oracle database with oracle SQL developer. I'm using Watchguard m400 as my firewall/router and Windows Server 2012 R2 as Oracle DB Server. I have server with local IP, ...
1
vote
1answer
114 views

Best way to connect dual SSID / VLAN wireless to Watchguard firewall

I'm currently sorting out our network so we can have new wireless access points with dual SSIDs, one for internal use and one for guest use. These will be setup so each SSID is on a different VLAN. I'...
0
votes
1answer
16 views

Lightswitch App AD authentication over SSL VPN

I have a lightswitch App (desktop app for windows) which authentications with AD against their logged in account, so the user doesn't need to log in again. This works great in the office but over the ...
0
votes
1answer
51 views

Watchguard blocking ports

I want to block the whole Internet for particular hosts. In this case I used policy 'Any" which basically blocks every single port (tcp+udp I believe). In FROM field I put particular IP address from ...
0
votes
0answers
32 views

Watchguard m400 limit bandwith per VLAN

is that possible to limit bandwith on Watchguard Firebox m400 per VLAN? I have few vlans on one physical interfaces and I need to limit the the bandwith. I know, I can limit it per policy or per ...
0
votes
1answer
150 views

Watchguard, accessing server with public IP from internal network

I can't go trough it. I need access from my internal network to a server with public IP. I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...
1
vote
0answers
55 views

Watchuguard access to external server from internal network

It looks, like my problem is common, I tried every single hint I found, but nothing is working. Here is my problem. I have an internal network behind Watchguard m400, with few VLAN's on ports. I ...
0
votes
2answers
221 views

WatchGuard, external IP, different port

I have few external IP addresses, but I want to use one, and NAT to it different PC's. That's how it should look like. 123.123.123.123 that's my IP, and I want to have on it 3 PC's on different ...
0
votes
0answers
47 views

Watchguard M400 Tagging VLAN

I have a problem with WatchGuard Firebox M400. I put interface 2 into VLAN mode. I created earlier few VLANs like: 10, 20, 30, 40, 110 and 199. When im puting those VLANs in that interface, i ...
0
votes
1answer
99 views

Cannot access network resources once connected to VPN

To begin, it's important this excerpt is read and understood before anything is suggested: The VPN configuration has been untouched, as I'm the only admin user, and also the firewall itself has been ...
0
votes
1answer
3k views

External VPN users cant access mapped network drives with Name have to use IP address

It's not a massive problem but some users complain they can't access our storage drive when working externally across the VPN. For instance, internally they can type \\storageserver\adminfolders and ...
1
vote
1answer
249 views

WatchGuard Authentication equivalent with Cisco ASA X series

I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
1
vote
1answer
18k views

Watchguard Firewall - Issues with SSLVPN

I have a client who has a WatchGuard XTM 23 device on site as their primary firewall. I just upgraded its firmware a couple days ago to the latest version for that series, 11.6.6. The problem is that ...
0
votes
0answers
120 views

Watchguard VPN Connection Issue

I am having problems setting up a BOVPN between an XTM510 and an XTM21-w. I have checked over the settings 3 times for all of the phases, tunnels and gateways on both sides and everything is correct. ...
2
votes
2answers
685 views

WatchGuard Port Forwarding / Static NAT

I'm trying to forward a specific port on my WatchGuard firewall to an internal host in a specific VLAN. My setup is roughly as follows: INTERNET vv WatchGuard vv--------vv--------vv [VLAN1]...
0
votes
1answer
26 views

Malware lab with watchguard firewall

I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
0
votes
1answer
148 views

Watchguard BOVPN and new ISP

We are changing our Internet Circuit to a new ISP. During testing I have both circuits, plus a failover circuit connected to our WatchGuard XTM515 I can browse the Internet, and Ping via the new ...
0
votes
2answers
1k views

WatchGuard blocking internal UDP packets

I'm seeing lots of packets that our WatchGuard firewall is dropping. They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500. Since I've started seeing these messages ...
1
vote
2answers
906 views

Watchguard VLAN Head-Grasping needed

I am trying to wrap my head around setting up my new watchguard M400. Here's what I need to figure out and what I've done so far. My ISP provided me with a P2P IP, which I plugged into my interface (...
1
vote
0answers
255 views

Firebox x700 Reset to Default Not Working

I found a site that explains how to reset a Firebox 700 series back to default as you can see from this link: https://www.hashdoc.com/documents/7502/how-to-default-a-watchguard-firebox-700-or-x700 ...
0
votes
1answer
3k views

Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)

I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs. The authentication itself ...
0
votes
1answer
219 views

Proxy action for user-agent blocking with regular expressions not blocking

I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this: List image ...
0
votes
2answers
97 views

DNS servers trying to send data to google+ - google DNS

I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
0
votes
2answers
267 views

Routing between 2 networks and 2 routers

I have a WatchGuard XTM33 and a Cisco ASA 5505, current network is running off of the Cisco and I want to eventually migrate over to the WatchGuard using new IP scheme. ASA 192.168.111.1/24 WG 10.0....
0
votes
1answer
428 views

Clients intermittently cannot reach internal server, Windows network with Watchguard XTM

Small business has internal Windows network on a single subnet 192.168.16.x. There is a Watchguard XTM 330 firewall appliance which routes traffic to the internet. Leased line. Some users are having ...
0
votes
0answers
76 views

Can I use both one-to-one NAT and port mapping on one Watchguard FireBox?

Old Watchguard III / 700. Is it possible to do both port mapping and one-to-one NAT? I recently changed ISP. Our external static range is a different range from the gateway subnet. Only way I ...
0
votes
0answers
368 views

IPSEC VPN with same remote peer IP - Only 1 remote connection at a time

I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address. The first phone connects fine, when the second phone connects the first phone ...
0
votes
0answers
371 views

Watchguard dimension backups

I've got a virtual machine with Watchguard dimension OS which writes a database backup every 7 days: I haven't checked for a couple of months but when I've logged on I've seen that the /var mountpoint ...
1
vote
2answers
606 views

Watchguard Firebox “split” fibre optic line into 2 interfaces

We have a requirement on our Watchguard Firebox XTM505 to be able to split our incoming external interface, in this case a fibre optic dedicated leased line, 100/100. We use the line in our office of ...
0
votes
1answer
528 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
0
votes
3answers
20k views

WatchGuard 'Internal Policy' intermittently blocking outbound web traffic

I have a lot of legitimate outbound traffic intermittently being denied by WatchGuard's "Internal Policy." Today I tried to go to Splunk's homepage and my traffic was denied by my watchguard XTM 22 ...
0
votes
1answer
173 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
1
vote
1answer
872 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
0
votes
1answer
1k views

watchguard fb x10 and x15 password reset

Is it possible to reset the password on watchguard fb x10 and x15 devices without clearing the config? We have 2 of these devices, they appear to have a serial port but not sure if that provides a ...
1
vote
1answer
6k views

Network Performance Issues w/ Watchguard XTM 23

I'm in charge of maintaining a small network for a client (around 10-15 computers) that has an internet connection to the outside world of 100mbps (ironically, though, I just ran a speedtest bypassing ...
0
votes
1answer
2k views

Watchguard Firewall SSLVPN

After running into some initial connection errors (which were resolved via Watchguard Firewall - Issues with SSLVPN), I'm able to accept the SSL certificate provided by the firewall and get further ...
1
vote
0answers
417 views

Watchguard - passwordless SSH login to block/ban IP addresses

I have Watchguard XTM22-W as my firewall. On it there are few 1-to-1 NAT policies through which I access local services (mainly SSH on different machines). All these machines have Fail2Ban installed ...
1
vote
1answer
1k views

Watchguard XTM 505 forward ftp reuqests

I have a Watchguard XTM 505 that I need a user to open up their FTP client and connect to the outside IP address of the building and have the watchguard forward that request to the ftp server at 192....
20
votes
4answers
29k views

Is there a real way to connect to WatchGuard's VPN from Linux?

WatchGuard officially has clients only for Windows and Mac. But I see that it uses openvpn internally. I couldn't connect to WG from Linux. Is there someone who actually get this working? How?