Firebox - Hardware — WatchGuard Community

Need Assistance With configuration

NicoWG — Mon, 23 Feb 2026 02:32:30 +0000

I need help with configuring the firebox. I assumed I had done it right because the initial config (First image) worked just fine

Context: After the initial config, user requested to allow whatsapp to bypass. There were unfortunately some "staged" changes that I thought had been skipped, indicated by "skipped" in deployment versions but it got applied and users ended up with dhcp of 10.0.x.x

Unfortunately I am unable to raise a technical support ticket

WiFi client mode

cmc — Fri, 06 Feb 2026 06:58:32 +0000

Say I want to put a firewall device in a location that doesn't have an Ethernet connection but does have an existing WiFi access point that has internet access. Do any Firebox devices support connecting to a WAP, thereby using the wireless interface as a WAN/external interface?

I need help regarding Firebox and regarding customer support

NicoWG — Tue, 23 Dec 2025 09:57:43 +0000

Two main points
1. My client and I have encountered an issue with the firebox wiring and/or config and we may need some assistance into understanding it more comprehensively
2. When I raise a ticket, it always demands a serial number, whereas the device is currently being controlled by my client's email(s), this makes it hard for me to request and communicate tickets to Watchguard when my client requires assistance

high CPU consumption watchguard M370

Diesco — Wed, 06 Aug 2025 20:57:52 +0000

I am having problems with a process that is consuming 50% of my CPU and sometimes it reaches 100% and services such as https portals, dhcp and other services stop working, the service is as follows:

/usr/bin/admd -f

we updated to 12.11.3.B719894 and the problem still happen.

Any Help?

M4600 Arm LED red

markus93 — Fri, 13 Jun 2025 10:04:22 +0000

Hello,

I have a M4600 purchased recently and right now I am trying to get it running. Whenever I boot it up, the Arm indicator is red right now, so I guess I am in recovery mode. But the quick setup wizard does not find the device, despite having an IP of 10.0.1.2 set on the Laptop and connected to eth1. I am also not able to reset the M4600 to factory, as the Arm indicator would just stay red even if I keep pressing the reset button.

Any help appreciated.

Thank you!
Markus

Tabletop Firebox with 2x10Gbe interfaces

Vladko — Thu, 15 May 2025 07:22:25 +0000

Hello guys,

I am looking to buy a WatchGuard tabletop device and I want 10Gb connectivity. I want two 10gig interfaces which I can aggregate for failover purposes and trunk VLANs on top that I can forward to a 10gig switch (or a stack) southbound. Essentially I want to use this logical interface for inter-vlan routing. At the moment the only option that you provide, to my knowledge, is T85 with a module with a single SFP+ interface on it. When is there going to be a module with 2x SFP+ interfaces. Fortinet have 90/91G model that has already four 10gig interfaces, Sonicwall has the TZ670,etc, all of them being tabletop devices. When are you going to implement this for the T85? So that people can buy the device now and at a later stage upgrade the LAN to 10gig. Please make a provision for this as it is needed.

Cheers,

Vladko

Third Party Transceivers for SFP+ Ports on an M590

BPL — Tue, 22 Apr 2025 16:34:28 +0000

I have a Firebox M590 with two SFP+ ports and according to the WatchGuard website, for multi-mode transceivers (10GBase-SR/1000Base-SX 850 nm), it supports the Cisco SFP-10G-SR. How particular is the M590 with requiring that exact model? I've seen Cisco variants of the same transceiver with model numbers like SFP-10G-SR-S and such. Will it accept those? More specifically, I can get MUCH cheaper third party transceivers that claim to be fully compatible such as the one I've listed below (TP-SFP-10G-SR). Can I safely use these third party transceivers in the M590?

https://www.infinitecables.com/products/cisco-sfp-10g-sr-compatible-10gbase-sr-sfp-850nm-mm-lc-transceiver?_pos=1&_sid=dc26dcbc7&_ss=r

FireBox T55

jocechavez — Thu, 16 Jan 2025 04:33:33 +0000

Que implicaciones puede traer el tener el WatchGuard sin licencias?
La empresa que asesoro no quiere pagar la licencia y me preocupan los riesgos que puede traer. me pueden indicar por favor ?

Higher than normal CPU

shaazaminator — Fri, 15 Nov 2024 15:54:24 +0000

M470 12.10.4

I've recently noticed my firebox running at higher than normal cpu levels.
After a reboot things are normal for a while then then cpu usage climbs again.
According to the Status Report this process seems to be the culprit with the %cpu running at 49.75%

3194 R 49.75 30824 25176 11264 Tue Nov 12 19:49:36 2024 1392:04.10 /usr/bin/admd -f

What is this process and what can I do if anything to reduce the cpu usage?

Thanks!

Doug

USB Drive attached to Firebox does not show up as Backup media

Landy — Wed, 25 Sep 2024 20:14:32 +0000

I am having a problem using a USB thumb drive for backup media. On my old M270, it didn't ever recognize an inserted USB and I figured it was just defective hardware. Now on my new M290 and T-45 fireboxes I have the same problem, so figure I must have to enable the USB ports or there is something more than just FAT32 format that is required.

Any help or ideas would be appreciated.

mSATA drive failed

Overbook1953 — Sun, 15 Sep 2024 02:01:01 +0000

Good day:

Product: Firebox M370

I purchased this device second hand, I am unable to activate the product and do not have access to the feature file or other privileged information.

The device does not connect via ethernet or console. After some investigation I found that the mSATA drive had failed. It is now replaced, but I have no means of installing the original OS.

The device is not recognized by WSM and does not go into recovery mode.

What options, aside from using it to hold open the door, do I have at this point? Is installing a 3rd party software a viable option? Thanks for reading.

Edit: I should also mention that I have submitted a transfer of ownership request, and during my troubleshooting used the CLI Reference and Hardware Guide for direction.

multigig ports on m690

Abertay — Tue, 20 Aug 2024 16:45:47 +0000

Hi,

Does anyone know if there is a trick to get the mutltigig ports on the m690 to go active.
I've tried connecting them to both a 1Gb RJ45 SFP and a 10Gb one and no life. The 1Gb works fine connected to any other port other than the two mgigs. It says it supports 1/2.5/5/10, but will it only work connected to a mgig switch and it doesnt like sfp's?

thanks.

Supported 5G modems

Farsight_Tech_Nordic — Wed, 03 Apr 2024 14:45:39 +0000

Greetings.

I am looking to use a 5G usb modem as a failover on a T15. The only list I can find of supported modems is 3/4G modems. Is there an updated list with 5G modems anywhere or is there a way for me to verify if a modem will work?

Regards
Stoffe Eriksson, Farsight.

Firebox T series and PoE not outputting 802.3at?

PhilT_VIT — Thu, 04 Jul 2024 00:25:33 +0000

Not sure if this is one for support to answer/review, but since I've seen it on two different Firebox T series appliances figured I'd ask here in case I'm seeing things.

The hardware spec sheets for both the T35-W and T40-W I have at home mention that port 4 supplies PoE power at the 802.3at standard.
The last two times I've plugged in different Aruba APs into those PoE ports I've noticed that the AP goes into a restricted power mode which only happens when it is powered by a 802.3af power source.
(I've verified this with one of the Aruba APs by doing a tech-support dump and reading the data to ascertain what power source it thinks it has).

I do have a T45-W-PoE that I will be commissioning at some point to replace the T40-W, however have this gut feeling it might have the same issue (ie. the PoE port only outputs at 802.3af - at least for the Aruba APs).

I can probably get my hands on an older WatchGuard AP225W from work to try (the primary reason for using a different AP is due to the internal APs on the T35-W and T40-W being single radio only), but wondering if anybody has come across this or is it some peculiarity that only happens with this combination of hardware?
I do have a PoE injector and separate PoE switch (both 802.3at) that I can use but was hoping to not have to press that into service if possible as this setup is a bit more compact as such.

What is the RPM limit of a FAN

Rafael_Coelho — Mon, 01 Jul 2024 19:27:05 +0000

Hello.

I work in a company where we sell and support Watchguard and I work in the NOC / SOC sector.

We have some zabbix dashboards and templates that we created and we are missing some information.

One of them is the maximum capacity of a FAN, for example an M570 model box.

This box has 3 FANs and I would like to Threshold these FANS.

Of course, besides this, I would like to obtain other models, is there any place where I can obtain this information?

Thanks.

I have a problem with T50

GreyBee — Tue, 04 Jun 2024 06:55:58 +0000

My device stop show web GUI. i can't connect by WSM.
can connect only by SSH. but it show cursor with note [Fault]:
all commands by CLI is working - but I'm not a familiar with this interface.
anybody can help to me - how can to restore normal access?

Watchguard Needs to Support Passkey(Passwordless) for Mobile VPN SSL

ThomasGV — Tue, 07 May 2024 16:11:36 +0000

Watchguard Needs to Support Passkey(Passwordless) for Mobile VPN SSL. Our organization is phasing out passwords, we want be passwordless. We want to stop the use of password because they are known to getting compromised.

This will be improved Security of old Two Factor Authentication.

[removed all the links to other sites, JC.]

M290 with 2 port SFP+ module installed

Sam_Cotton_01 — Wed, 03 Apr 2024 16:30:10 +0000

Will i be able ot use the teh SFP+ ports A0 and A1 as regular interfaces?
I plan on bringing my isp fiber port to the watchguard port A0 (eth8) and it seems i read something stating it was not a regular interface.

Issues setting up firebox M470

Tytanmus — Wed, 03 Apr 2024 04:05:16 +0000

I'm having issues getting connection on any of my ports, they do not let traffic through. Port 1- 7 can be set to trusted and have all the normal settings and still nothing.

When trouble shooting with the pc it says that it can not find the DNS or the Dhcp server.

all help is appreciated

T85 PoE vs M290

msimanyi — Thu, 08 Feb 2024 02:16:42 +0000

I have a T70 HA installation and our subscription is nearing maturity. The hardware is now fairly old, so I'm planning to replace it and I'm considering the T85 PoE as well as the M290.

I've searched the internet for any real world testing of throughput comparisons, without much luck. Does anyone have any direct experience with these two models? Care to offer any comments?

On the one hand, both will be material upgrades to our T70 setup. I'd prefer not to waste money, given the choice. But if the M290 is much more capable or much more reliable than the T85 PoE under live system settings, I'll spend the nominal additional for the M290.

Am I missing something ?

Kevin1000 — Sat, 11 Dec 2021 22:08:23 +0000

Second time doing a Firebox T15. First one was a while back. Now, I connect a local workstation directly into eth1 and use the network cable that was coming into that local workstation and I can get out to the Internet.
Take the Firebox back to the comm closet, plug the cable modem / router into eth0 and from eth1 to the existing switch and can't get out.
Am I dumb or what?
Thanks
Kevin

T25 NFR

GND — Tue, 09 Jan 2024 12:24:06 +0000

Is T25 NFR available in Total or Basic security features?

Trade up application

GND — Mon, 18 Dec 2023 13:25:15 +0000

Good day, may I ask where does one apply for Trade up pricing?
How does the trade up program work?

Puplic IP for T80 Fire Box

Jerom — Sat, 06 Jan 2024 13:06:53 +0000

The existing service provider has requested a public IP address from us, asserting that it is necessary for managing the WatchGuard Firebox firewall. They have emphasized that without a public IP, the management of the firewall may not be secure for the client. This has left me somewhat perplexed.

Could you kindly clarify whether a public IP is indeed required for managing the WatchGuard Firebox T80? If so, could you shed light on whether the responsibility of obtaining the public IP lies with the client or the service provider?

I appreciate your expertise in this matter and look forward to your guidance on ensuring the optimal security and management of the WatchGuard Firebox.

External DHCP failure Firebox T45

Coolpack — Sun, 31 Dec 2023 16:12:49 +0000

I bought a trade-up T45 from T35.
Connecting the T45 external line to the same Internet Fiber Modem as the T35 the T45 box could not establish an internet connection. There was no negotiation process starting. DHCP of the T45 failed to get an IP Adress from the Provider.

I've tried a reset of the Modem and different new starts and resets of the T45 - all this did not work.Definitely the T45 could not get an external IP while the external line showed a little bit of traffic.

The configuration of the external Port in T45 was the same as in T35.
After reconnecting the T35 to the same external Modem IP Adress was negotiated and Internet connection reestablished.

I think that the t45 may have an defect, or is there a configuration for the external Port that is different from T35

T45 Kernel Crash

Tantikorn — Thu, 14 Dec 2023 10:02:38 +0000

help
my customer use T45 and sometime it crash or freeze it make internet no access or can't VPN.
it hardware problem or not
my customer is using M200 (our spare firewall) never have kind of problem like this

reset to fabric firebox x550e

simone_derossi — Wed, 13 Sep 2023 10:11:07 +0000

i try to reset to fabric
i use firebox quick setup wizard
setting temporary ip correct
but the firebox quick setup wizard could not continue

10Gb RJ45 Ethernet interfaces (M690 only)

LauriAlo — Mon, 14 Aug 2023 09:38:17 +0000

Hello !

In WatchGuard Firebox M290/390/590/690 Hardware Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Hardware-Guides/firebox-m290-390-590-690-hardware-guide.html

10Gb RJ45 Ethernet interfaces (M690 only)

The Firebox M690 interfaces10 and 11 are RJ45 Ethernet interfaces that support link speeds of 1000, 2500, or 10000 Mbps. Each RJ45 interface has two indicators. The right indicator shows the interface connection status. The left indicator shows interface activity.
Indicator Indicator Color Interface Status
Connection (right) Yellow Link at 10 Gbps
Green Link at 2.5 Gbps
Not Lit Link at 1 Gbps, 100 Mbps, or no link
Activity (left) Yellow, blinks Power on, network activity
Not Lit Power off, no connections

My question is there limitations or restrictions of using these interfaces.
I tried connect the interfaces to Dell switches Dell S5248F-ON SFP28 ports 10GBast-T trancivers but intefaces stay down and indicator leds do not t have any light

I tried to connect the port to 1GbE ethenet switch the it worked as expected - i als0 loged to firebox with ssh and and looked these port link_speed configuration option and there was highest speed was only "1000-full Force 1000 Mbps full-duplex operation" - terminale console output:
WG(config/if-fe10/10)#link-speed ?
10-full Force 10 Mbps full-duplex operation
10-half Force 10 Mbps half-duplex operation
100-full Force 100 Mbps full-duplex operation
100-half Force 100 Mbps half-duplex operation
1000-full Force 1000 Mbps full-duplex operation
auto-negotiate Enable automatic negotiation

Lauri-Alo Adamson

Kernel panic when booting sysb

cmc — Sat, 20 May 2023 18:24:20 +0000

I have a T30 with unknown password that I want to reset. The standard procedure of holding reset button while powering on did not work, Attn light never comes on. I connected to the console port to try to do it from the command line. When I select the SysB boot option, it fails with a kernel panic error...

Loading sysb root filesystem
read /sysb_root.gz failed: : invalid block type
Error: load sysb root filesystem failed
[ 6.510429] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000000
[ 6.510429]
[ 6.519565] CPU: 0 PID: 1 Comm: init Not tainted 3.12.19-rt30 #1
[ 6.525561] Call Trace:
[ 6.528014] [7e049e20] [40007a78] show_stack+0x44/0x15c (unreliable)
[ 6.534371] [7e049e60] [405e0a68] dump_stack+0x78/0xa0
[ 6.539504] [7e049e70] [405dd6cc] panic+0xdc/0x20c
[ 6.544291] [7e049ec0] [4003fda8] do_exit+0x7e0/0x8b0
[ 6.549339] [7e049f10] [40040cf8] do_group_exit+0x48/0xac
[ 6.554732] [7e049f30] [40040d70] __wake_up_parent+0x0/0x18
[ 6.560306] [7e049f40] [4000fe64] ret_from_syscall+0x0/0x3c
[ 6.565873] --- Exception: c01 at 0x10059da8
[ 6.565873] LR = 0x10000de0
[ 6.573259] Starting kdump
[ 6.575962] Rebooting in 5 seconds..

Assuming it's not a hardware failure, is there any other method to access/restore this device or is it bricked?
Thanks

Connection of AP330 To Firebox M290 Issue

GARYMN — Wed, 12 Apr 2023 20:16:57 +0000

Hi, I have added an AP330 access point to my network and connected it to port 3 on my M290. I have Watchguard cloud configured with a DHCP address latest firmware and works when connected to lan switches. When I connect the AP330 to the M290 port which i have configured in bridge mode I cannot get the led to come blue and active only when on a lan switch. I am not able to ping the firebox through this port as well. Am I missing a configuration setup in bridge mode. Do i need to add the AP330 ip address in the bridge mode...