Questions tagged [watchguard]

Watchguard make firewalls and other network devices, and related management and monitoring software.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

Watchguard logs incoming SMTP connections has an dst_user entry. Where can I change this entry?

Hello fellow Exchangers, as mentioned in the title any incoming smtp connection is routed correctly to our onpremise microsoft exchange server and the logs look as described here: https://www....
0 votes
1 answer
52 views

Site to Site VPN 4G/5G

We have just set up a new site where internet is currently unavailable so we are using 4G/5G internet which we are unable to get a static IP address for. We use WatchGuard devices for Branch Office ...
2 votes
1 answer
6k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
1 vote
1 answer
102 views

Exchange Online ESMTP responds differently from different clients - Windows 10 vs Windows Server 2019

When I telnet to our Exchange Online's SMTP server address (****.mail.protection.outlook.com, port 25) I get two different responses or types of connect depending on what machine I'm using. When I ...
0 votes
1 answer
131 views

Android .sswan profile to ipsec.conf

I have a .sswan profile with an embedded cert and username/password from a server admin. It connects to a Watchguard VPN without any issues. I was told by the server admin I can connect with my ubuntu ...
2 votes
1 answer
113 views

what is the proposal string for aes-gem256 deffie helman group 20, esp

As a developer tasked with connecting to a vpn without preconfigured profile scripts, i'm fumbling through setting up a strongswan ipsec.conf file. My current hurdle is an "invalid proposal ...
25 votes
5 answers
58k views

Is there a real way to connect to WatchGuard's VPN from Linux?

WatchGuard officially has clients only for Windows and Mac. But I see that it uses openvpn internally. I couldn't connect to WG from Linux. Is there someone who actually get this working? How?
-1 votes
1 answer
91 views

Cisco ASA to Watchguard

I have never worked with watchguard firebox firewalls in depth before and we are replacing a Cisco ASA 5515 with a Watchguard M390. I am having a hard time interpreting the configuration settings in ...
1 vote
3 answers
2k views

Merge VPNs of two Watchguard firewalls into one firewall

I have two different Watchguard XTM 515 firewalls. Each has it's own set of VPNs created in them. Now I need to use only one firewall to handle the VPNs of both. But the problem is that I don't know ...
1 vote
2 answers
36k views

Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)

I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs. The authentication itself works ...
0 votes
1 answer
1k views

Cannot access network resources once connected to VPN

To begin, it's important this excerpt is read and understood before anything is suggested: The VPN configuration has been untouched, as I'm the only admin user, and also the firewall itself has been ...
0 votes
1 answer
1k views

Rsyslog rotates, but still logging to old log

Server: Ubuntu Server 14.04 I have a Watchguard Firebox logging to a server. It is supposed to rotate daily, however, when the rotate occurs, it doesn't write to the new log. It keeps writing to the ...
0 votes
1 answer
1k views

VLAN tagging for non VLAN compliant devices

Okay so I'm a little new to VLANS, so forgive me if this is a silly question. I have a firewall set up with a few VLANS: ID 1: This is the primary, and set to untagged. This will be used as a ...
4 votes
2 answers
12k views

Watchguard L2TP over IPsec passthrough

I'm attempting to connect to a VPN (L2TP over IPsec) server through (not to) a WatchGuard XTM 505 appliance. I have the VPN server setup behind the firewall on a 1-to-1 NAT, and other protocols (such ...
0 votes
1 answer
11k views

watchguard port forwarding via SNAT

I have a problem with port forwarding on Watchguard. What I want? I need to access from Internet via public IP on different port (lets say 9999) to a Remote Desktop on a PC which is on local network (...
0 votes
1 answer
2k views

watchguard openvpn verify error

i've an Problem with an OpenVPN Connection, where i need al Little bit Help. We've an Watchguard T15 by or Customer and he will connect his Noteboot by VPN to his network. I've installed the ...
0 votes
1 answer
1k views

Azure Site-to-Site VPN through a Watchguard Firewall

Summary I'm trying to figure out what Firewall Policy I need to create to allow VPN connection traffic through my Watchguard firewall. Description I'm really struggling to figure out how to create ...
0 votes
0 answers
889 views

Routing to a different Subnet through VPN

im facing the following problem and after 2 days of own research and a huge amount of trial & error i could use some help. Situation: 1 Company, 2 Offices. Both are connected by a BVPN(Branch ...
0 votes
1 answer
227 views

Strange Path Selection in WatchGuard OSPF

I am trying to configure OSPF between some cisco CPE routers and two WatchGuards. Already tried quite a lot of different setups, already trying to change network design, unfortunately every time I ...
1 vote
2 answers
464 views

Watchguard SNAT not working

We are currently changing our external IP Address and trying to setup external access to your internally hosted website again without much luck. We use Go Daddy as our DNS host for our web domain and ...
3 votes
0 answers
3k views

How to block AnonymoX addon operations with Watchguard XTM

We are using Watchguard XTM 502 as firewall in our office. Some of our employee using AnonymoX addon proxy on firefox. Normally Watchguard XTM block proxy. But Watchguard XTM 502 can't able to block ...
2 votes
1 answer
136 views

Loading website on port 1433 without using ":1433"

Boss wants me to set up a website so that by typing "https://www.example.com" (no :1433) in the address bar of a web browser, the request will go through port 1433 on a Watchguard Firebox to an apache ...
1 vote
0 answers
589 views

Why is Watchguard dropping an open TCP connection?

We are using Watchguard version T35-W. When our system is under heavy load, we sometimes see active TCP client connections are dropped and become black holes. We think that this has something to do ...
0 votes
2 answers
164 views

DNS servers trying to send data to Google+ - Google DNS

I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
0 votes
1 answer
706 views

WatchGuard Firebox own Internet connectivity fails after adding BovpnVif route to 0.0.0.0/0

Environment: A company network has a Firebox M-series appliance with Total Security Suite at headquarters. Every branch office has a smaller T-series Firebox without subscription services. For this ...
5 votes
3 answers
44k views

Watchguard mobile vpn: failed to get domain name

I am struggling to connect to a VPN using Watchguard's Mobile VPN client, and could use some help. The error I'm getting is the following one (even with log level = debug), which I can't manage to ...
0 votes
1 answer
3k views

Getting error trying to connect across VPN using IPSEC IKEv2 PSK unsupport

This is the error I'm getting on the traffic monitor on my firewall. I have Watchguard X510 and I can't seem to get ipsec to work at all. 2018-07-12 10:46:19 iked (12.*.*.*<->10.30.30.146)drop ...
0 votes
0 answers
128 views

Deploying vhd from blob to Azure

We have some troubles in migrating VM(Linux) from local HyperV on Win 10 to Azure Cloud. We got a linux vhd - deploy it on HyperV - then save as static and upload to blob storade in Azure. Based on ...
2 votes
1 answer
3k views

VPN from WatchGuard to Google Cloud Platform: "establishing IKE_SA failed, peer not responding"

We are trying to "Build a VPN from a Watchguard to Google Cloud Platform" just like what is described here: https://querblick-it.de/build-vpn-watchguard-google-cloud-platform/ And under Remote peer ...
0 votes
0 answers
505 views

Watchguard - Configure custom domain IP resolve

A Watchguard firewall device used as DHCP server in a Local LAN office network. There is an internal web server pc connected within the same LAN. Lets say the website hosted in the web server ...
0 votes
4 answers
25k views

What are the instructions to reset a Watchguard Firebox X1000?

We had a Firebox X1000 model R6264S, and the power supply died. We purchased another one cheaply from Ebay, but I cannot find instructions anywhere about how to reset this device to factory defaults ...
0 votes
1 answer
32 views

Watch Guard Total Security working over VPN

We have a warehouse and 4 other showroom locations. All the 4 locations are connect to the warehouse through a VPN. If we get a watch guard for each location and connect through a VPN. Would it be ...
2 votes
1 answer
39k views

Watchguard Firewall - Issues with SSLVPN

I have a client who has a WatchGuard XTM 23 device on site as their primary firewall. I just upgraded its firmware a couple days ago to the latest version for that series, 11.6.6. The problem is that ...
1 vote
0 answers
981 views

Traffic is not routing through Watchguard branch office vpn to Amazon aws VPN

Following this guide, I have successfully (I think) created a connection between my Watchguard physical VPN and an Amazon-VPC with a VPN attached to it but I cannot ping my EC-2. Amazon is setup as ...
0 votes
1 answer
692 views

Is a Watchguard BOVPN or "site-to-site" VPN the best way to backup a server to a NAS at another location?

I currently have a customer who has two offices in separate cities. Each location has a Watchguard. They need a backup solution so we proposed a NAS to backup both servers to. The issue is the NAS ...
1 vote
0 answers
353 views

Watchguard Web UI Authentication with Active Directory user

Our WatchGuard firebox is configured to use active directory to authenticate VPN users. With Watchguard products, is it generally possible to use active directory to authenticate users that are ...
6 votes
5 answers
3k views

Adding second firewall to ISP connection with multiple subnets?

My routing knowledge is a little rusty. I have a fibre internet connection hooked up like this: The managed switch breaks out VLANS for transparent lan service that is also through the ISP's box. I ...
1 vote
2 answers
1k views

Hyper-V DMZ environment

Im facing some problems trying to create a DMZ virtual machine in Hyper-v. Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
2 votes
3 answers
3k views

IP Address Conflict with Router/Firewall

I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
4 votes
2 answers
20k views

tcp syn checking

I have a WatchGuard Firebox that I've recently configured. All of the policies look fine and all appropriate services seem to be working correctly. However, one or two (seemingly) random nodes keep ...
0 votes
1 answer
378 views

Port forwarding via Watchguard

I have problem with accessing oracle database with oracle SQL developer. I'm using Watchguard m400 as my firewall/router and Windows Server 2012 R2 as Oracle DB Server. I have server with local IP, ...
1 vote
1 answer
1k views

Best way to connect dual SSID / VLAN wireless to Watchguard firewall

I'm currently sorting out our network so we can have new wireless access points with dual SSIDs, one for internal use and one for guest use. These will be setup so each SSID is on a different VLAN. I'...
0 votes
1 answer
64 views

Lightswitch App AD authentication over SSL VPN

I have a lightswitch App (desktop app for windows) which authentications with AD against their logged in account, so the user doesn't need to log in again. This works great in the office but over the ...
0 votes
1 answer
975 views

Watchguard blocking ports

I want to block the whole Internet for particular hosts. In this case I used policy 'Any" which basically blocks every single port (tcp+udp I believe). In FROM field I put particular IP address from ...
0 votes
1 answer
2k views

Watchguard, accessing server with public IP from internal network

I can't go trough it. I need access from my internal network to a server with public IP. I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...