Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [watchguard]

Watchguard make firewalls and other network devices, and related management and monitoring software.

1
vote
0answers
18 views

Why is Watchguard dropping an open TCP connection?

We are using Watchguard version T35-W. When our system is under heavy load, we sometimes see active TCP client connections are dropped and become black holes. We think that this has something to do ...
0
votes
0answers
18 views

Watchguard: Forward incoming traffic to external IP

How is it possible to forward incoming traffic over a specific port to an external IP with WatchGuard Fireware Web UI? Normally, I would create a SNAT, but there's no option to define any external IP.
0
votes
1answer
38 views

WatchGuard Firebox own Internet connectivity fails after adding BovpnVif route to 0.0.0.0/0

Environment: A company network has a Firebox M-series appliance with Total Security Suite at headquarters. Every branch office has a smaller T-series Firebox without subscription services. For this ...
0
votes
0answers
92 views

DNS resolve delays with Watchguard M370 routers when single-request is disabled

After replacing our Watchguartd M200 router with a new Watchguard M370 router, we experienced delays in DNS resolving from linux clients, when packages to the DNS server are rooted via the Firewall. ...
0
votes
1answer
204 views

Getting error trying to connect across VPN using IPSEC IKEv2 PSK unsupport

This is the error I'm getting on the traffic monitor on my firewall. I have Watchguard X510 and I can't seem to get ipsec to work at all. 2018-07-12 10:46:19 iked (12.*.*.*<->10.30.30.146)drop ...
0
votes
0answers
85 views

Deploying vhd from blob to Azure

We have some troubles in migrating VM(Linux) from local HyperV on Win 10 to Azure Cloud. We got a linux vhd - deploy it on HyperV - then save as static and upload to blob storade in Azure. Based on ...
0
votes
0answers
37 views

How to setup Watchguard so VPN client could be accessed from trusted network ? (HQ <=> remote servers)

Anyone knows how to setup Watchguard VPN so I could connect from X number of remote servers to HQ Watchguard Firewall and trusted network, while trusted network could access remote servers ? At this ...
0
votes
0answers
452 views

Squid Proxy Very Slow

Hi guys then I'll explain: I have a firewall watchguard on an IP address that has configured as an external proxy a proxy server squid, below I put the squid cache settings, then my problem is that it ...
0
votes
0answers
43 views

Port forwarding with SNAT watchguard

I am trying to configure the SNAT forwarding on watchguard T10, i tried with all the ways like SNAT, NAT, one to one NAT. But everytime it return me on watchguard home page. Actually my local IP is ...
2
votes
1answer
831 views

VPN from WatchGuard to Google Cloud Platform: “establishing IKE_SA failed, peer not responding”

We are trying to "Build a VPN from a Watchguard to Google Cloud Platform" just like what is described here: https://querblick-it.de/build-vpn-watchguard-google-cloud-platform/ And under Remote peer ...
0
votes
1answer
3k views

watchguard port forwarding via SNAT

I have a problem with port forwarding on Watchguard. What I want? I need to access from Internet via public IP on different port (lets say 9999) to a Remote Desktop on a PC which is on local network (...
0
votes
0answers
206 views

Watchguard - Configure custom domain IP resolve

A Watchguard firewall device used as DHCP server in a Local LAN office network. There is an internal web server pc connected within the same LAN. Lets say the website hosted in the web server ...
0
votes
1answer
27 views

Watch Guard Total Security working over VPN

We have a warehouse and 4 other showroom locations. All the 4 locations are connect to the warehouse through a VPN. If we get a watch guard for each location and connect through a VPN. Would it be ...
1
vote
0answers
582 views

Traffic is not routing through Watchguard branch office vpn to Amazon aws VPN

Following this guide, I have successfully (I think) created a connection between my Watchguard physical VPN and an Amazon-VPC with a VPN attached to it but I cannot ping my EC-2. Amazon is setup as ...
1
vote
0answers
273 views

Watchguard Web UI Authentication with Active Directory user

Our WatchGuard firebox is configured to use active directory to authenticate VPN users. With Watchguard products, is it generally possible to use active directory to authenticate users that are ...
0
votes
1answer
438 views

Is a Watchguard BOVPN or “site-to-site” VPN the best way to backup a server to a NAS at another location?

I currently have a customer who has two offices in separate cities. Each location has a Watchguard. They need a backup solution so we proposed a NAS to backup both servers to. The issue is the NAS ...
1
vote
2answers
336 views

Merge VPNs of two Watchguard firewalls into one firewall

I have two different Watchguard XTM 515 firewalls. Each has it's own set of VPNs created in them. Now I need to use only one firewall to handle the VPNs of both. But the problem is that I don't know ...
5
votes
3answers
18k views

Watchguard mobile vpn: failed to get domain name

I am struggling to connect to a VPN using Watchguard's Mobile VPN client, and could use some help. The error I'm getting is the following one (even with log level = debug), which I can't manage to ...
1
vote
2answers
625 views

Hyper-V DMZ environment

Im facing some problems trying to create a DMZ virtual machine in Hyper-v. Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
0
votes
1answer
167 views

Port forwarding via Watchguard

I have problem with accessing oracle database with oracle SQL developer. I'm using Watchguard m400 as my firewall/router and Windows Server 2012 R2 as Oracle DB Server. I have server with local IP, ...
1
vote
1answer
872 views

Best way to connect dual SSID / VLAN wireless to Watchguard firewall

I'm currently sorting out our network so we can have new wireless access points with dual SSIDs, one for internal use and one for guest use. These will be setup so each SSID is on a different VLAN. I'...
6
votes
5answers
828 views

Adding second firewall to ISP connection with multiple subnets?

My routing knowledge is a little rusty. I have a fibre internet connection hooked up like this: The managed switch breaks out VLANS for transparent lan service that is also through the ISP's box. I ...
0
votes
1answer
651 views

Watchguard blocking ports

I want to block the whole Internet for particular hosts. In this case I used policy 'Any" which basically blocks every single port (tcp+udp I believe). In FROM field I put particular IP address from ...
0
votes
1answer
1k views

Watchguard, accessing server with public IP from internal network

I can't go trough it. I need access from my internal network to a server with public IP. I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...
0
votes
1answer
43 views

Lightswitch App AD authentication over SSL VPN

I have a lightswitch App (desktop app for windows) which authentications with AD against their logged in account, so the user doesn't need to log in again. This works great in the office but over the ...
1
vote
0answers
87 views

Watchuguard access to external server from internal network

It looks, like my problem is common, I tried every single hint I found, but nothing is working. Here is my problem. I have an internal network behind Watchguard m400, with few VLAN's on ports. I ...
0
votes
2answers
2k views

WatchGuard, external IP, different port

I have few external IP addresses, but I want to use one, and NAT to it different PC's. That's how it should look like. 123.123.123.123 that's my IP, and I want to have on it 3 PC's on different ...
0
votes
0answers
162 views

Watchguard M400 Tagging VLAN

I have a problem with WatchGuard Firebox M400. I put interface 2 into VLAN mode. I created earlier few VLANs like: 10, 20, 30, 40, 110 and 199. When im puting those VLANs in that interface, i ...
0
votes
1answer
643 views

Cannot access network resources once connected to VPN

To begin, it's important this excerpt is read and understood before anything is suggested: The VPN configuration has been untouched, as I'm the only admin user, and also the firewall itself has been ...
0
votes
0answers
281 views

Watchguard VPN Connection Issue

I am having problems setting up a BOVPN between an XTM510 and an XTM21-w. I have checked over the settings 3 times for all of the phases, tunnels and gateways on both sides and everything is correct. ...
0
votes
1answer
47 views

Malware lab with watchguard firewall

I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
2
votes
2answers
4k views

WatchGuard Port Forwarding / Static NAT

I'm trying to forward a specific port on my WatchGuard firewall to an internal host in a specific VLAN. My setup is roughly as follows: INTERNET vv WatchGuard vv--------vv--------vv [VLAN1]...
1
vote
0answers
782 views

Firebox x700 Reset to Default Not Working

I found a site that explains how to reset a Firebox 700 series back to default as you can see from this link: https://www.hashdoc.com/documents/7502/how-to-default-a-watchguard-firebox-700-or-x700 ...
1
vote
2answers
4k views

Watchguard VLAN Head-Grasping needed

I am trying to wrap my head around setting up my new watchguard M400. Here's what I need to figure out and what I've done so far. My ISP provided me with a P2P IP, which I plugged into my interface (...
0
votes
1answer
414 views

Watchguard BOVPN and new ISP

We are changing our Internet Circuit to a new ISP. During testing I have both circuits, plus a failover circuit connected to our WatchGuard XTM515 I can browse the Internet, and Ping via the new ...
0
votes
2answers
15k views

Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)

I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs. The authentication itself ...
0
votes
1answer
586 views

Proxy action for user-agent blocking with regular expressions not blocking

I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this: List image ...
0
votes
2answers
6k views

WatchGuard blocking internal UDP packets

I'm seeing lots of packets that our WatchGuard firewall is dropping. They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500. Since I've started seeing these messages ...
0
votes
2answers
136 views

DNS servers trying to send data to Google+ - Google DNS

I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
1
vote
1answer
483 views

WatchGuard Authentication equivalent with Cisco ASA X series

I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
0
votes
2answers
738 views

Routing between 2 networks and 2 routers

I have a WatchGuard XTM33 and a Cisco ASA 5505, current network is running off of the Cisco and I want to eventually migrate over to the WatchGuard using new IP scheme. ASA 192.168.111.1/24 WG 10.0....
0
votes
0answers
170 views

Can I use both one-to-one NAT and port mapping on one Watchguard FireBox?

Old Watchguard III / 700. Is it possible to do both port mapping and one-to-one NAT? I recently changed ISP. Our external static range is a different range from the gateway subnet. Only way I ...
0
votes
1answer
652 views

Clients intermittently cannot reach internal server, Windows network with Watchguard XTM

Small business has internal Windows network on a single subnet 192.168.16.x. There is a Watchguard XTM 330 firewall appliance which routes traffic to the internet. Leased line. Some users are having ...
0
votes
0answers
678 views

IPSEC VPN with same remote peer IP - Only 1 remote connection at a time

I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address. The first phone connects fine, when the second phone connects the first phone ...
0
votes
0answers
1k views

Watchguard dimension backups

I've got a virtual machine with Watchguard dimension OS which writes a database backup every 7 days: I haven't checked for a couple of months but when I've logged on I've seen that the /var mountpoint ...
0
votes
1answer
737 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
1
vote
1answer
5k views

External VPN users cant access mapped network drives with Name have to use IP address

It's not a massive problem but some users complain they can't access our storage drive when working externally across the VPN. For instance, internally they can type \\storageserver\adminfolders and ...
0
votes
1answer
333 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
1
vote
1answer
3k views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
1answer
10k views

Network Performance Issues w/ Watchguard XTM 23

I'm in charge of maintaining a small network for a client (around 10-15 computers) that has an internet connection to the outside world of 100mbps (ironically, though, I just ran a speedtest bypassing ...