Does anyone have tried to run FireboxV on Emulated Virtual Environment Next Generation (EVE NG). just want to do an network simulated environment with WatchGuard.

https://www.eve-ng.net/index.php/documentation/howtos/watchguard-fireboxv/

thanks in advance.

We have the issue that our FireboxV running on Hyper-v is giving slow performance when the windows server VM and the FireboxV are running on the same host. We see a delay of 10 seconds. When the FireboxV and windows server VM are running on DIFFERENT hosts we dont have that issue.
Any idea what this could be ?

Second issue, but probably related; New devices connect, but will not deploy sitting at waiting device. Local devices show, unable to download config or policy. Multiple subscribers, different models. I just pulled out an MSSP one here on my desk, allocated it, did plain vanilla, time zone, DHCP on external, and it came up connected, but same issue. Wont download config, wont apply..

Tried this after removing device from cloud, adding it back, factory defaulting and then trying to add it instead of already on portal, had it try adding it from the device...same result.

Something seems completely messed up, sitting on a tech support call for 2 hours. Worked with a tech for an hour doing the same steps, and now On hold for an hour waiting for him to come back to the line.

Anyone else experiencing the same?

Ta

I have set up a VM with FireboxV on a Windows server (dedicated, hosted by Hetzner). I have ordered an additional IPv4 add-on from Hetzner so that both the HyperV and the FireboxV can receive a public IP address.
So far I have made the configuration on the HyperV side (static MAC address). Unfortunately, the Firebox does not obtain the IP for the Interface0 via DHCP and even if I enter the IP statically, the interface is displayed as UP, but I cannot ping the Firebox from outside and cannot access the web interface from outside. I can reach the web interface via Interface1 without any problems and the interface works.

Does anyone have an idea what I have done wrong / what I can optimize?

WG#show sysinfotatus-report

Status report for M290-xxx from Fri Aug 30 18:44:36 2024

Version : 12.7.2.B655803
sysb : 12.7.2B652363
Serial #: C039043BDE5AE
OEM serial #: 2149M293217380498B
Model : M290
CPU cores: 4

Current local time: Fri Aug 30 18:44:36 2024
Current UTC time : Fri Aug 30 11:44:36 2024
Uptime : 177d 21h 43m 26s

System Health

100

Module status delay
admd ok 1
cad ok 1
ccd ok 1
certd ok 1
configd ok 1
crd ok 1
ctd ok 1
cvd ok 2
drclient ok 2
epm ok 2
firewalld ok 1
iked ok 2
loggerd ok 2
networkd ok 1
sessiond ok 1
systemd ok 1
wgagent trying 1
wgrelayd ok 1

Ive logged a case under customer care.
Has anyone else had any success with this, or is this generally something they reject?

Any advise appreciated!

I am able to deploy the .qcow2 FireBoxV image on my device and it boots normally.
But when trying to create an instance in an OpenStack KVM based cloud, it does not boot.
The instance keeps rebooting every 30 seconds and I get the same following error :

kernel panic not syncing: VFS: unable to mount root fs on unknown-block(0,0)
CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.14.83 #1

I was wondering what might be the problem...
Any ideas ?

Thanks !

We are investigating options to rollout firewallV in a "zero touch" approach. So if we look at the process it's a VMware host with the OVA file imported and shipped to the customer. As we all know nowadays almost every company uses fixed IP's thus the firewall will never be able to register itself in WGC. We do not want to touch any firewall except by pushing some kind of "kickstart" approach into the OVA so the firewall will receive all required information like the primary external IP and some other configuration items to be able to connect to WGC. After registration in WGC the appropriate template (rapid deploy) will be pushed to the firewall and of we go. Does anyone have experience with FireboxV scripting to automate this process?

Regards,

Erwin

i configured a new FireboxV and the lock symbol is missing which i have to hit before making any changes to config. On my other model the lock ist always on the top of the screen
Were can i configure the lock?

thx

HN

We have a FireboxCloud at Azure.
I have setup IKEv2 and i can fine connect to it.
I can ping internal and external resources by IP.
But i cant get DNS lookups working.
I haved set it to assign DNS server 8.8.8.8, and also did try with internal, but DNS resolving dosent work.

Could it be Azure dropping the UDP packets for DNS at some way?

Anyone have IPv6 setup on their instance and have it working?
Thanks,
Adam

Just received a upgrade notice from our hosting provider they will upgrade VMWare vCenters this weekend to version 8.0

I am currently running FireboxV version 12.9.4. Will this version keep working on vCenter 8 or do i have to upgrade to Fireware 10 ?

/Robert

1. It's stated that the support is for 1500 users — in our architecture, there are no users, only white subnets associated with the customer. Will this count as a user? Is the limitation hypothetically determined (based on average utilization from synthetic tests) or strictly defined by the licensing terms?

2. What is the maximum traffic volume that one virtual machine can handle?

3. What are the hardware requirements for the hypervisor, specifically regarding optical network cards?

I want to make a web server (10.0.1.10) present in my LAN network accessible on the WAN network.

I have created the following rules but it does not work. I think I am missing a configuration.

SNAT :

FW :

I think I forgot something, can you help me?

Thanks in advance

This night/morning DNS Watch decided to brake dns queries from my internal MS dns servers. My DNS server(s) could not validate my dns forwarders so no dns resolution worked.

I disabled DNS Watch on my Firebox V and all dns server validation started to work and dns flow are flowing noamally again.

I am located in the EU zone. Is there a issue with DNS Watch?

/Robert

Model: FireboxV-MED
Version: 12.9.3.B679093

I am struggling to find the Diagnostic options on the WebUI on a Firebox V. I just don't seem to have an option anywhere to select so I can do network tests directly from the Firebox - (ping, tracert, etc.).

I have always done from WSM in the past, but after checking one of our M270 physical devices it seems to be missing from there as well.

Can someone tell me where the option is hidden away?

Kind Regards,
Chris Snape

I think it's because the public (elastic) IP differs from the private IP set on the Firebox's external interface. But WG support don't seem to think it's an issue.

Anyone have it running successfully?

Thanks, Adam

I am in the proces of setting up a firebox V cluster on VMware.

VMware ESXi, 7.0.3, 19482531
Fireware 12.7.2 U2

Promiscuous mode = enable
address changes = enabled
Forged transmits = enabled
Forged Transmits = Accept
Garp allowed
All mac addresses on members is:

HA1:
00:50:56:00:00:00
00:50:56:00:00:01
00:50:56:00:00:02
00:50:56:00:00:03

HA2:
00:50:56:22:22:20
00:50:56:22:22:21
00:50:56:22:22:22
00:50:56:22:22:23

They are both using VMXNET3 adaptor.

All is setup and cluster (id 50) is running with no problems reported. Access from external to the public ip works no matter who is master. Cluster has been running for 2 weeks.

Today we powered a VM up behind the cluster but we could not get traffic routed through the cluster. The cluster vrrp ip address did not repsond to ping, but both members management addresses was responding to ping and the firebox arp tabled listed the VM mac/ip address. Management access from external to public ip was working.

We are renting a virtual datacenter and my provider asked me to turn of one of the members. As soon as i turn of the cluster master the internal vrrp address started to respond to ping and traffic was routed through the new master device fine.

Afterwords i tried every combination of master/slave, power on/off, failover and it works. I am clueless.

Of cause i will have to test futher, but any idea why the cluster stopped accepting traffic to the internal vrrp address?

/Robert