Best Of
Re: Problem with RADIUS authentication
To that guy ... Um RTFM...
And for the version of your firmware
Re: Watchguard blocking attachments of only one user (Urgent)
Root cause is that the sender is sending email in Rich Test format to this user!
https://www.slipstick.com/problems/outlook-is-sending-winmail-dat-attachments/
Why do email attachments sent through the SMTP-proxy appear as Winmail.dat attachments?
http://watchguardsupport.force.com/publicKB?type=KBArticle&SFDCID=kA2A00000000FnKKAU&lang=en_US
Kimmo
Re: New M270 cannot boot up after OS downgraded
In Policy Manager:
Setup -> OS Compatability
select 12.0-12.5.x
Re: Log errors
Hi @Abertay
CryptQueryObject is used to pull signing information from files that have been signed (like executable, office documents, etc.) It's fairly common for them to be self-signed or also not be signed at all. If that happens, a log will appear. So long as you're not having trouble opening a document, the log can be disregarded.
Re: WG Cloud - Web Blocker timing out
If you're unable to get to your firewall in WG cloud, you should be able to make the exception locally via the System Manager.
If you're running into an error accessing your firebox, I'd suggest opening a support incident so that our support representatives can assist.
Re: From trial to subscription
You should be able to allocate that new license to your account with no change.
If you have an end user account, activate the license like here:
If you are a service provider, you'll need to allocate the licenses to the specific account you want them to be used on:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/sp_allocate-users.html
Re: APs Purchased prior to new licensing policy
Whenever I see "We do read your feedback and", it usually means "We hear you, but we really are not going to change."
BRAVO to WatchGuard for not only listening, but responding in a positive way. I don't use your APs, but I am sure you will make a lot of people happy with this announcement!
Good job!
Re: Disable TLS 1.1 and weak ciphers for TLS 1.2
"I'm also finding that the whole IT Security topic is so vast that I may never comprehend everything." Oh, you could not be more correct! It can be utterly overwhelming.
What Firebox and Fireware are you running?
If you are post 11.5.x, have you regenerated all the self-signed certs on the box so that they are all SHA256 and not SHA1?
What are your results if you use https://www.ssllabs.com/ssltest/analyze.html to test (be sure to check the box not to show your results on the boards)?
Interesting. I got curious and ran my own T35 running 12.5.2 Update 1 against that site and got "This server supports TLS 1.1. Grade will be capped to B from January 2020." Dang you! Now I have to check my own systems!
Re: daas component log messages
Thanks Bruce. I take back what I said about not seeing these logs on my own Firebox. I'll get something logged to make sure these logs get moved to Debug.
You got it.
Ralph
Re: tcp invalid connection state
Fred2K,
Do you have logging enabled for the outbound 587 rule? If not, enable it, and I bet you'll see allowed traffic from the printer that is throwing the deny messages that hit the dst_intf=Firebox target. If the printer works to send on 587, ignore the messages. I have an open case on it with a request to allow disabling logging of those bogus messages. My perfectly-working UniFi wireless access points seem to throw these logs a lot...there are four or five for each successful outbound packet to my UniFi controller, whether it's my LAN or a clients' remote AP phoning home (their Fireboxes show the same thing).
I ignore all of those message as they are utterly meaningless.