Local webblocker failover

Steve_E · September 3

I use a local webblocker server with a hot spare.

I dont see a way to auto failover if the the working vm is unavailable.

Is there a way?

Hero · September 3

https://www.watchguard.com/help/docs/help-center/en-US/content/en-us/Fireware/services/webblocker/webblocker_define_adv_options_c.html

james.carson · September 3

Hi @Steve_E

For local webblocker servers, the system should connect to the first available one on the list. So long as it can maintain a TCP connection, and it gets responses, it will stay with that server.

If both servers are listed in your on-premise webblocker config, that's all you should need, provided they're both up and responding to queries.

Steve_E · September 5

When you say list, you mean the list. right?

pm > subscription service > webblocker > configure > global settings

Anywhere else?

Steve_E · September 6

@Hero said:
https://www.watchguard.com/help/docs/help-center/en-US/content/en-us/Fireware/services/webblocker/webblocker_define_adv_options_c.html

Thanks for the link

What I cant find is a "server timeout" setting to "failover"

If the server checked in the proxy policies stops working, I have to manually change it in each policy

james.carson · September 9

That action is per webblocker policy. If you use the same webblocker policy for several policies, you only need to update it once.

Each of your webblocker policies will have a unique name. If you're using a policy that is colored blue, it's a default policy that can't be edited, and you will need to clone it or make your own to save.

Local webblocker failover

Comments