Questions tagged [watchguard]
Watchguard make firewalls and other network devices, and related management and monitoring software.
113
questions
0
votes
1
answer
43
views
Android .sswan profile to ipsec.conf
I have a .sswan profile with an embedded cert and username/password from a server admin. It connects to a Watchguard VPN without any issues. I was told by the server admin I can connect with my ubuntu ...
- 121
2
votes
1
answer
51
views
what is the proposal string for aes-gem256 deffie helman group 20, esp
As a developer tasked with connecting to a vpn without preconfigured profile scripts, i'm fumbling through setting up a strongswan ipsec.conf file. My current hurdle is an "invalid proposal ...
- 121
-1
votes
1
answer
57
views
Cisco ASA to Watchguard
I have never worked with watchguard firebox firewalls in depth before and we are replacing a Cisco ASA 5515 with a Watchguard M390. I am having a hard time interpreting the configuration settings in ...
- 1
0
votes
1
answer
1k
views
Rsyslog rotates, but still logging to old log
Server: Ubuntu Server 14.04
I have a Watchguard Firebox logging to a server. It is supposed to rotate daily, however, when the rotate occurs, it doesn't write to the new log. It keeps writing to the ...
- 348
0
votes
1
answer
809
views
VLAN tagging for non VLAN compliant devices
Okay so I'm a little new to VLANS, so forgive me if this is a silly question. I have a firewall set up with a few VLANS:
ID 1: This is the primary, and set to untagged. This will be used as a ...
- 23
0
votes
1
answer
2k
views
watchguard openvpn verify error
i've an Problem with an OpenVPN Connection, where i need al Little bit Help.
We've an Watchguard T15 by or Customer and he will connect his Noteboot by VPN to his network.
I've installed the ...
0
votes
1
answer
1k
views
Azure Site-to-Site VPN through a Watchguard Firewall
Summary
I'm trying to figure out what Firewall Policy I need to create to allow VPN connection traffic through my Watchguard firewall.
Description
I'm really struggling to figure out how to create ...
- 6,518
0
votes
0
answers
502
views
Routing to a different Subnet through VPN
im facing the following problem and after 2 days of own research and a huge amount of trial & error i could use some help.
Situation:
1 Company, 2 Offices. Both are connected by a BVPN(Branch ...
- 1
1
vote
2
answers
439
views
Watchguard SNAT not working
We are currently changing our external IP Address and trying to setup external access to your internally hosted website again without much luck. We use Go Daddy as our DNS host for our web domain and ...
- 11
0
votes
1
answer
207
views
Strange Path Selection in WatchGuard OSPF
I am trying to configure OSPF between some cisco CPE routers and two WatchGuards. Already tried quite a lot of different setups, already trying to change network design, unfortunately every time I ...
- 170
2
votes
1
answer
126
views
Loading website on port 1433 without using ":1433"
Boss wants me to set up a website so that by typing "https://www.example.com" (no :1433) in the address bar of a web browser, the request will go through port 1433 on a Watchguard Firebox to an apache ...
- 21
1
vote
0
answers
568
views
Why is Watchguard dropping an open TCP connection?
We are using Watchguard version T35-W. When our system is under heavy load, we sometimes see active TCP client connections are dropped and become black holes. We think that this has something to do ...
- 155
0
votes
1
answer
688
views
WatchGuard Firebox own Internet connectivity fails after adding BovpnVif route to 0.0.0.0/0
Environment: A company network has a Firebox M-series appliance with Total Security Suite at headquarters. Every branch office has a smaller T-series Firebox without subscription services. For this ...
- 47.4k
0
votes
1
answer
3k
views
Getting error trying to connect across VPN using IPSEC IKEv2 PSK unsupport
This is the error I'm getting on the traffic monitor on my firewall. I have Watchguard X510 and I can't seem to get ipsec to work at all.
2018-07-12 10:46:19 iked (12.*.*.*<->10.30.30.146)drop ...
- 1
0
votes
0
answers
126
views
Deploying vhd from blob to Azure
We have some troubles in migrating VM(Linux) from local HyperV on Win 10 to Azure Cloud.
We got a linux vhd - deploy it on HyperV - then save as static and upload to blob storade in Azure.
Based on ...
2
votes
1
answer
3k
views
VPN from WatchGuard to Google Cloud Platform: "establishing IKE_SA failed, peer not responding"
We are trying to "Build a VPN from a Watchguard to Google Cloud Platform" just like what is described here:
https://querblick-it.de/build-vpn-watchguard-google-cloud-platform/
And under Remote peer ...
google-cloud-platform
0
votes
1
answer
10k
views
watchguard port forwarding via SNAT
I have a problem with port forwarding on Watchguard.
What I want? I need to access from Internet via public IP on different port (lets say 9999) to a Remote Desktop on a PC which is on local network (...
- 21
0
votes
0
answers
497
views
Watchguard - Configure custom domain IP resolve
A Watchguard firewall device used as DHCP server in a Local LAN office network.
There is an internal web server pc connected within the same LAN.
Lets say the website hosted in the web server ...
- 171
0
votes
1
answer
31
views
Watch Guard Total Security working over VPN
We have a warehouse and 4 other showroom locations. All the 4 locations are connect to the warehouse through a VPN. If we get a watch guard for each location and connect through a VPN. Would it be ...
1
vote
0
answers
950
views
Traffic is not routing through Watchguard branch office vpn to Amazon aws VPN
Following this guide, I have successfully (I think) created a connection between my Watchguard physical VPN and an Amazon-VPC with a VPN attached to it but I cannot ping my EC-2.
Amazon is setup as ...
- 11
1
vote
0
answers
348
views
Watchguard Web UI Authentication with Active Directory user
Our WatchGuard firebox is configured to use active directory to authenticate VPN users. With Watchguard products, is it generally possible to use active directory to authenticate users that are ...
- 681
0
votes
1
answer
665
views
Is a Watchguard BOVPN or "site-to-site" VPN the best way to backup a server to a NAS at another location?
I currently have a customer who has two offices in separate cities. Each location has a Watchguard. They need a backup solution so we proposed a NAS to backup both servers to. The issue is the NAS ...
1
vote
3
answers
1k
views
Merge VPNs of two Watchguard firewalls into one firewall
I have two different Watchguard XTM 515 firewalls. Each has it's own set of VPNs created in them.
Now I need to use only one firewall to handle the VPNs of both. But the problem is that I don't know ...
- 229
5
votes
3
answers
43k
views
Watchguard mobile vpn: failed to get domain name
I am struggling to connect to a VPN using Watchguard's Mobile VPN client, and could use some help. The error I'm getting is the following one (even with log level = debug), which I can't manage to ...
- 51
1
vote
2
answers
1k
views
Hyper-V DMZ environment
Im facing some problems trying to create a DMZ virtual machine in Hyper-v.
Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
- 49
0
votes
1
answer
365
views
Port forwarding via Watchguard
I have problem with accessing oracle database with oracle SQL developer.
I'm using Watchguard m400 as my firewall/router and Windows Server 2012 R2 as Oracle DB Server.
I have server with local IP, ...
- 1
1
vote
1
answer
1k
views
Best way to connect dual SSID / VLAN wireless to Watchguard firewall
I'm currently sorting out our network so we can have new wireless access points with dual SSIDs, one for internal use and one for guest use. These will be setup so each SSID is on a different VLAN. I'...
- 71
6
votes
5
answers
2k
views
Adding second firewall to ISP connection with multiple subnets?
My routing knowledge is a little rusty. I have a fibre internet connection hooked up like this:
The managed switch breaks out VLANS for transparent lan service that is also through the ISP's box. I ...
- 17.9k
0
votes
1
answer
952
views
Watchguard blocking ports
I want to block the whole Internet for particular hosts. In this case I used policy 'Any" which basically blocks every single port (tcp+udp I believe). In FROM field I put particular IP address from ...
- 33
0
votes
1
answer
2k
views
Watchguard, accessing server with public IP from internal network
I can't go trough it.
I need access from my internal network to a server with public IP.
I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...
- 33
0
votes
1
answer
64
views
Lightswitch App AD authentication over SSL VPN
I have a lightswitch App (desktop app for windows) which authentications with AD against their logged in account, so the user doesn't need to log in again.
This works great in the office but over the ...
- 1
1
vote
0
answers
109
views
Watchuguard access to external server from internal network
It looks, like my problem is common, I tried every single hint I found, but nothing is working.
Here is my problem.
I have an internal network behind Watchguard m400, with few VLAN's on ports.
I ...
- 33
0
votes
2
answers
4k
views
WatchGuard, external IP, different port
I have few external IP addresses, but I want to use one, and NAT to it different PC's.
That's how it should look like.
123.123.123.123 that's my IP, and I want to have on it 3 PC's on different ...
- 33
0
votes
0
answers
271
views
Watchguard M400 Tagging VLAN
I have a problem with WatchGuard Firebox M400.
I put interface 2 into VLAN mode.
I created earlier few VLANs like: 10, 20, 30, 40, 110 and 199.
When im puting those VLANs in that interface, i ...
- 33
0
votes
1
answer
1k
views
Cannot access network resources once connected to VPN
To begin, it's important this excerpt is read and understood before anything is suggested:
The VPN configuration has been untouched, as I'm the only admin user, and also the firewall itself has been ...
- 93
0
votes
0
answers
349
views
Watchguard VPN Connection Issue
I am having problems setting up a BOVPN between an XTM510 and an XTM21-w.
I have checked over the settings 3 times for all of the phases, tunnels and gateways on both sides and everything is correct. ...
0
votes
1
answer
60
views
Malware lab with watchguard firewall
I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
- 23
2
votes
2
answers
5k
views
WatchGuard Port Forwarding / Static NAT
I'm trying to forward a specific port on my WatchGuard firewall to an internal host in a specific VLAN. My setup is roughly as follows:
INTERNET
vv
WatchGuard
vv--------vv--------vv
[VLAN1]...
- 438
1
vote
0
answers
1k
views
Firebox x700 Reset to Default Not Working
I found a site that explains how to reset a Firebox 700 series back to default as you can see from this link:
https://www.hashdoc.com/documents/7502/how-to-default-a-watchguard-firebox-700-or-x700
...
- 11
1
vote
2
answers
5k
views
Watchguard VLAN Head-Grasping needed
I am trying to wrap my head around setting up my new watchguard M400. Here's what I need to figure out and what I've done so far.
My ISP provided me with a P2P IP, which I plugged into my interface (...
0
votes
1
answer
555
views
Watchguard BOVPN and new ISP
We are changing our Internet Circuit to a new ISP. During testing I have both circuits, plus a failover circuit connected to our WatchGuard XTM515
I can browse the Internet, and Ping via the new ...
- 1,503
1
vote
2
answers
35k
views
Watchguard Mobile VPN with SSL - user can't connect - failed to open shared memory for openvpn command (error: 2)
I have a problem with my Watchguard VPN. I've set up the device for SSLVPN (added policies, users, a group etc.) according to this description from the Watchguard docs.
The authentication itself works ...
- 209
1
vote
1
answer
845
views
Proxy action for user-agent blocking with regular expressions not blocking
I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this:
List image
...
- 133
0
votes
2
answers
9k
views
WatchGuard blocking internal UDP packets
I'm seeing lots of packets that our WatchGuard firewall is dropping.
They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500.
Since I've started seeing these messages ...
- 11
0
votes
2
answers
161
views
DNS servers trying to send data to Google+ - Google DNS
I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
1
vote
1
answer
580
views
WatchGuard Authentication equivalent with Cisco ASA X series
I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
0
votes
2
answers
932
views
Routing between 2 networks and 2 routers
I have a WatchGuard XTM33 and a Cisco ASA 5505, current network is running off of the Cisco and I want to eventually migrate over to the WatchGuard using new IP scheme.
ASA 192.168.111.1/24
WG 10.0....
- 344
0
votes
0
answers
245
views
Can I use both one-to-one NAT and port mapping on one Watchguard FireBox?
Old Watchguard III / 700.
Is it possible to do both port mapping and one-to-one NAT?
I recently changed ISP. Our external static range is a different range from the gateway subnet. Only way I ...
- 1
0
votes
1
answer
895
views
Clients intermittently cannot reach internal server, Windows network with Watchguard XTM
Small business has internal Windows network on a single subnet 192.168.16.x. There is a Watchguard XTM 330 firewall appliance which routes traffic to the internet. Leased line.
Some users are having ...
- 263
0
votes
0
answers
782
views
IPSEC VPN with same remote peer IP - Only 1 remote connection at a time
I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address.
The first phone connects fine, when the second phone connects the first phone ...
- 1,150