Questions tagged [watchguard]
Watchguard make firewalls and other network devices, and related management and monitoring software.
132
questions
1
vote
2
answers
37k
views
Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)
I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs.
The authentication itself works ...
1
vote
1
answer
872
views
Proxy action for user-agent blocking with regular expressions not blocking
I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this:
List image
...
0
votes
2
answers
9k
views
WatchGuard blocking internal UDP packets
I'm seeing lots of packets that our WatchGuard firewall is dropping.
They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500.
Since I've started seeing these messages ...
0
votes
2
answers
165
views
DNS servers trying to send data to Google+ - Google DNS
I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
1
vote
1
answer
587
views
WatchGuard Authentication equivalent with Cisco ASA X series
I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
0
votes
2
answers
939
views
Routing between 2 networks and 2 routers
I have a WatchGuard XTM33 and a Cisco ASA 5505, current network is running off of the Cisco and I want to eventually migrate over to the WatchGuard using new IP scheme.
ASA 192.168.111.1/24
WG 10.0....
0
votes
0
answers
265
views
Can I use both one-to-one NAT and port mapping on one Watchguard FireBox?
Old Watchguard III / 700.
Is it possible to do both port mapping and one-to-one NAT?
I recently changed ISP. Our external static range is a different range from the gateway subnet. Only way I ...
0
votes
1
answer
908
views
Clients intermittently cannot reach internal server, Windows network with Watchguard XTM
Small business has internal Windows network on a single subnet 192.168.16.x. There is a Watchguard XTM 330 firewall appliance which routes traffic to the internet. Leased line.
Some users are having ...
0
votes
0
answers
792
views
IPSEC VPN with same remote peer IP - Only 1 remote connection at a time
I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address.
The first phone connects fine, when the second phone connects the first phone ...
0
votes
0
answers
2k
views
Watchguard dimension backups
I've got a virtual machine with Watchguard dimension OS which writes a database backup every 7 days: I haven't checked for a couple of months but when I've logged on I've seen that the /var mountpoint ...
0
votes
1
answer
810
views
WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN
we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20
any machine on our internal network ranges can communicate with the systems at the ...
1
vote
1
answer
6k
views
External VPN users cant access mapped network drives with Name have to use IP address
It's not a massive problem but some users complain they can't access our storage drive when working externally across the VPN.
For instance, internally they can type \\storageserver\adminfolders and ...
0
votes
1
answer
350
views
How do I create a specific report on a Watchguard firewall?
I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL.
I need specific communication data on ports above 1000.
I do not see a way to setup a specific report of ...
1
vote
1
answer
3k
views
Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?
I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)"
If I disable this, even web traffic wouldn't work although ...
1
vote
1
answer
11k
views
Network Performance Issues w/ Watchguard XTM 23
I'm in charge of maintaining a small network for a client (around 10-15 computers) that has an internet connection to the outside world of 100mbps (ironically, though, I just ran a speedtest bypassing ...
0
votes
1
answer
673
views
Watchguard XTM blocking login attempts
routinely I'm seeing lots of login attempts to my mail server trying out various login names starting from A to Z coming from the one IP on one day and another IP on another day. Is there any means ...
1
vote
2
answers
1k
views
Watchguard Firebox "split" fibre optic line into 2 interfaces
We have a requirement on our Watchguard Firebox XTM505 to be able to split our incoming external interface, in this case a fibre optic dedicated leased line, 100/100.
We use the line in our office of ...
2
votes
2
answers
4k
views
Watchguard firebox: public IP addresses behind firewall with as much usable IP addresses as possible
Our ISP assigned us 16 public IP addresses that we want to assign to hosts behind a Watchguard firebox x750e.
The IP addresses are:
x.x.x.176/28
of which x.x.x.177 is the gateway.
The hosts will be ...
1
vote
1
answer
13k
views
Watchguard XTM Internal Policy Denial
Question on Watchguard XTM policy not allowing some traffic through. I have setup in Policy Manager named "TCP - NAS" that allows all TCP ports from External to SNAT from 192.168.10.13 -> 192.168.60....
3
votes
0
answers
3k
views
How to block AnonymoX addon operations with Watchguard XTM
We are using Watchguard XTM 502 as firewall in our office. Some of our employee using AnonymoX addon proxy on firefox. Normally Watchguard XTM block proxy. But Watchguard XTM 502 can't able to block ...
0
votes
1
answer
5k
views
Watchguard Firewall SSLVPN
After running into some initial connection errors (which were resolved via Watchguard Firewall - Issues with SSLVPN), I'm able to accept the SSL certificate provided by the firewall and get further ...
2
votes
1
answer
39k
views
Watchguard Firewall - Issues with SSLVPN
I have a client who has a WatchGuard XTM 23 device on site as their primary firewall. I just upgraded its firmware a couple days ago to the latest version for that series, 11.6.6.
The problem is that ...
0
votes
4
answers
25k
views
What are the instructions to reset a Watchguard Firebox X1000?
We had a Firebox X1000 model R6264S, and the power supply died. We purchased another one cheaply from Ebay, but I cannot find instructions anywhere about how to reset this device to factory defaults ...
1
vote
0
answers
843
views
Watchguard - passwordless SSH login to block/ban IP addresses
I have Watchguard XTM22-W as my firewall. On it there are few 1-to-1 NAT policies through which I access local services (mainly SSH on different machines). All these machines have Fail2Ban installed ...
0
votes
2
answers
1k
views
Separate WebBlocker settings, using one Watchguard XTM 505?
I support a school with 3 locations that uses a Watchguard XTM 505. They are implementing a BYOD wireless solution with Aerohive APs, and they will have 3 SSIDs (School, Guest, BYOD).
Each SSID needs ...
1
vote
3
answers
516
views
Networking 2 lans together for file transfers
I currently have 2 separate cabinets setup in a data center and each cabinet has it's own Watchguard XTM810 firewall and ISP router. The cabinets are not located next to each other. All of the servers ...
0
votes
1
answer
78
views
Can Watchgurard XTM 520 support 2nd network drop?
I need a bit of advice here.
We are having 2 XTM 520 firewall configured in HA by a consultant previously. The FW are connected to a 100 mbps network drop currently.
I have taken over the work but I ...
1
vote
2
answers
886
views
New EFM leased line setup with Watchguard router, vlan tagging issue
I have recently had a 2mb EFM connection installed in a charity I work for. We were not supplied a router because we already had a watchguard XTM330 in storage ready to be used. The line is presented ...
4
votes
2
answers
1k
views
Two companies one Internet connection, Passthrough Public IP
My client is the tenant who will be sharing Internet from the other tenant. The other tenant has a WatchGuard in place. I am not familiar with WatchGuard or their interface. The IT guy I am working ...
0
votes
1
answer
5k
views
GPO Setting to allow workstations to use VPN
Is there a GPO setting that allows non-admins access to change their network settings. Which is what the SSLVPN does? If so, what is it?
Background :
I've got a few laptops that are used by Domains ...
1
vote
0
answers
679
views
Webservice randomly dropping connections - possibly due to firewall nonevent data?
I have a hosted webapp which requests data from a REST webservice in our office. Each page calls one (or several) webservices, which go from our host, via our firewall (a Watchguard Firebox) to a ...
0
votes
1
answer
3k
views
How to forward external traffic from specific port to specific external ip?
How do i forward outgoing traffic for specific port from internal network to specific external ip in watchguard? I know how to forward incoming traffic using SNAT.
1
vote
1
answer
1k
views
Connecting two networks VPN different IP Schemes
I have a client with two networks in two buildings and they want to access each others resources. Right now site B connects to site A via a VPN over a T1 line. They want to get rid of the T1 and go ...
-1
votes
1
answer
7k
views
Routing between multiple IPSEC VPN connections?
I have 4 sites configured with IPsec VPNs like the diagram below:
Site A ------------ Main Site -------------- Site B
|
|
...
1
vote
1
answer
16k
views
WatchGuard proxy error - header-line too large
When trying to access new threads on a forum, I am receiving the error below. It seems like post count on the forum may have reached a point that it is generating a HTTP response header that is too ...
1
vote
1
answer
849
views
Wireless LAN Bridge with WAN VPN Failover
My network is below, it's currently just an ordinary 192.168.0.0/24, the branch offices needs to have access to resources on the main site. Currently all internet traffic go across the bridge and ...
0
votes
1
answer
239
views
Is this considered 2 Factor Authentication?
Trying to create a 2 Factor Authentication for users to access data remotely.
Here my scenario:
We have a Watchguard to VPN into the network - If we use it's internal DB to store authentication ...
2
votes
3
answers
3k
views
IP Address Conflict with Router/Firewall
I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
2
votes
2
answers
7k
views
Kernel Printk: xx message suppressed
Hi I have a watchguard firewall, and I lost access to the firewall before xmas, therefore I visited the site, upgraded the firewall to the latest firmware but unfortunatly, I am now having similar ...
4
votes
2
answers
12k
views
Watchguard L2TP over IPsec passthrough
I'm attempting to connect to a VPN (L2TP over IPsec) server through (not to) a WatchGuard XTM 505 appliance.
I have the VPN server setup behind the firewall on a 1-to-1 NAT, and other protocols (such ...
0
votes
4
answers
2k
views
looking for free windows/linux process watchdog
i have process running on windows and linux , i need watch dog that will email me if some process is down more then N seconds/minutes and also this watch dog will try to start it
after N time and N ...
0
votes
1
answer
7k
views
Watchguard Firebox SSL certificate validation failed
I'm really stuck on this one! I have two Watchguard firebox firewalls. My SSL certificates expired and I bought two new wildcard certificates from RapidSSL. I couldn't get the certificate to install ...
0
votes
3
answers
39k
views
WatchGuard 'Internal Policy' intermittently blocking outbound web traffic
I have a lot of legitimate outbound traffic intermittently being denied by WatchGuard's "Internal Policy." Today I tried to go to Splunk's homepage and my traffic was denied by my watchguard XTM 22 ...
0
votes
1
answer
4k
views
Watchguard Firewall - bridge a public IP to another interface?
I have a Watchguard XTM 8 series firewall, and it is setup in mixed routing mode. I have a /24 public IP range and I want to pass one of those IPs to another interface on the firewall WITHOUT using ...
0
votes
2
answers
1k
views
Watchguard SSL VPN and Outlook 2010
Recently I installed a watchguard xtm 21 appliance.
Everything went fine until I updated from Office 2007 to Office 2010.
Behind my watchguard appliance I've got an Exchange 2007 server, which I was ...
0
votes
1
answer
2k
views
watchguard fb x10 and x15 password reset
Is it possible to reset the password on watchguard fb x10 and x15 devices without clearing the config? We have 2 of these devices, they appear to have a serial port but not sure if that provides a ...