Best Of

Re: Exempting IP from being blocked for Port Scanning

Curious what happened with this one

I had a similar issue with a SIP trunk provider that does 'checks' to make sure they can still reach the 100+ PBXs we have in our datacenter. The datacenter firebox would often (few times a month) block the providers IP as an IP SCAN ATTACK.

Adding them to Blocked Site Exceptions list did NOT prevent them from getting on the blocked site list and WG support confirmed that was expected behavior. They said that sources of IP SCAN attack will always end up on blocked sites and the exceptions list will not stop this. Only option was turn off scan protection.

We ended up just using GrayLog to filter the logs and email us when we saw the SIP trunk get blocked so we can handle it asap.

MGNL

1

Re: smtp connection behind WG?

As someone a long time ago said on the boards - not all problems are caused by the firewall.

Glad you got this sorted.

Bruce_Briggs

1

Re: how to integrate WG DHCP with DNS

Manual Host file...hey, do me a solid. Can you listen to "1999" from Prince when you create it? ;-P

TestingTester

2

T80 Total Secu / Add to cloud for loggin

Hello
I have a T80 12.8 with TSS for 3 years
I don't know how to add the firewall to my cloud account to see logs
Does it possible ti have your help please, I read the documentation but I don't understand
Thank you so much

SH3108

1

Re: A quick guide to using the WatchGuard Community

Because we are oldsters who are not “hip” to today’s replacement words for phat

Bruce_Briggs

3

Re: IPv6 to IPv4 Capabilities

The firebox does not currently have any IPv6 to IPv4 NATing capabilities. IPv6 traffic is handled and sent out as IPv6.

There is an open feature request for this (it's FBX-4012) but there's currenty no ETA on if/when that will be available. Please create a support case and mention FBX-4012 if you'd like to follow that request -- the support rep can set the case up to do that for you.