Comments

  • Good morning everyone, going to https://status.dnswatch.watchguard.com/ you can see the status of DNSWatch. Unfortunately yesterday we had some problem that now is resolved. Service is again back operational. Regards, -Daniele M. WG Support Engineer
  • Hello James, thanks for writing in the WatchGuard community. Regarding your post, this is something that our AuthPoint team is already evaluating. We have an internal request opened tracked under: * AAAS-5330: Allow Assigning Users/Groups to Resources that could avoid the conflict to have one user on different groups at…
  • Hello @Iscott , all information about the synchronization can be find here: * https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/authpoint/providers_about.html Sync Your Users Now that you have created an external identity for your LDAP database and connected the external identity to your Gateway…
  • Hello @racso , please open a support case going to your WatchGuard Portal. WatchGuard support will be happy to assist you checking both Dimension and Firebox configuration. Regards, -Daniele M.
  • As Bruce pointed out, HTTP and HTTPS Proxy has in General Setting the option "Enable logging for reports". Regards, -Daniele M.
  • Hello @racso , as I said the "Send a log message for reports" is on editing a Policy -> Properties tab -> Logging button -> there is an option there. What's the firmware version your firebox is currently running? What's the device model? Regards, -Daniele M.
  • Hello @WCES , there are multiple variables here to understand where is the culprit (AuthPoint config, Radius config, Firebox config) of the issue. It's better to troubleshoot the problem opening a support case logging to your WatchGuard Portal. Our Support team will be happy to assist you. Thanks in advance. Regards,…
  • Hello @racso , are you using Packet Filter or Proxy policies in your configuration? If you are using packet filter, the packet filter is a kind of policy that check source and destination port protocol and ip addresses, there are very few information on it. Using a proxy instead, the entire stack ISO/OSI (7 layers) is…
  • Hello @racso , this is the list of all reports you can generate using Dimension server (the new Log/Report server free) service you can install locally: * https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/dimension/reports_report-list_d.html Once you have IP address, you can generate "Per Client…
  • Hello @Daniel_P30 , in this kind of scenario, the only way to resolve the problem is to contact WatchGuard support opening a ticket and provide the email address that didn't receive the email activation. As you know, this problem was that the user email was not created at the time that LDAP sync has been done with…
  • Hello @Daniel_P30 , at this point, if the issue persist, open a Support Case going to: https://watchguard.force.com/customers/WGCreateNewCase#t=All and a WatchGuard support rep will be happy to troubleshoot the problem with you. Thanks in advance, Regards, -Daniele M.
  • Hello Ville_H, yes, when firmware is updated, the new changes are reflected in your https exception list. Please take a look the KB article (Article ID :000011173) below: https://watchguardsupport.secure.force.com/publicKB?type=KBArticle&SFDCID=kA22A000000HQlQ&lang=en_US this is always updated since 12.1.x version. Within…
  • Hello WCS, this question need to be worked directly with WatchGuard Support opening a case. I suggest to open it going to: * https://watchguard.force.com/customers/WGCreateNewCase You need to setup #3 "device template" on Wifi Cloud portal and assign each SSID, but again it's better opening a case to better understand…
  • Hello Nigel, Thanks for asking. The T10-D firewall is the only hardware available with ADSL/VDSL abilities. You can trade up as you said to any new firewalls like T15 or T35 or T55, but these have not DSL integration. Kindly regards, Daniele Mammano | Support Engineer WatchGuard Technologies, Inc. | www.watchguard.com
  • Hi Greg, the advantage is that you can edit your setting like RAM, or CPU or Hard Disk in easy way, due to the Dimension server is a VM. It is also free, so you don't need to buy a service to store your logs. And Dimension have also Report you can schedule and generate in base of your needs. In addition Dimension have the…
  • Hello Greg, in most cases you don't need to enable content inspection to use WebBlocker for HTTPS traffic. However, several websites and services need content inspection for better categorization. Regards, Daniele Mammano | Support Engineer
  • Hello Greg, configuration file (.xml) is ok for any platform. You just need to change System and Feature Key. About upgrade from XTMv to FireboxV, please contact your Sales Representative. He will provide you all information you need and which model of FireboxV is good for your actual environment. Regards, Daniele Mammano…
  • Hello Greg, yes, cluster ip and management ip need to be different. Cluster IP is used to connect each cluster member and it is used to sync the configuration. You can have one cluster interface and also a backup cluster interface. The management IP instead is the management network you use to configure the Firecluster, to…
  • Hello Greg, I think you have to contact your Sales Representative to buy new hardware and see what's the best model that replace your old Firecluster. After that, the configuration file (.xml) can be converted easily to the new platform. More info below:…
  • Hello Greg, WatchGuard Dimension is a new free server we provide over Log-Report Server. More info you can find here: * https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/dimension/about-dimension_d.html?tocpath=Dimension%7C_____0 You can install WatchGuard Dimension in a VMWare or in a Hyper-V…