R Palmer
asked on
Quick Set up freezing at licnese screen
I have an existing firebox X1000 running FSM 7.3. I run the quick set up wizard, it detects the firebox, asks for the IP and when I get to the license screen to enter the fireware pro license it freezes up and the browse, next ,back and cancel buttons are greyed out&
ASKER
I am just following the directions that I found on watchguard's documentation. I am willing to give anything a try!
ASKER
How do you upgrade firmware from within policy manager, I am not seeing it.
If you wish to configure a out of box and know the settings you want to do then proceed as below:
Connect the trust interface of FB (port 0 is external; 1 is trust and 2 is dmz) to a laptop/desktop using a ethernet cable.
Reset the FB to factory defaults (to make sure any partially saved configuration do not bother):
1. Turn the Firebox off. On the front of the Firebox, find and depress the up arrow.
2. Hold down the up arrow button while you turn on the Firebox, and continue to hold the button down until the LCD display shows the Firebox is running in System B mode.
By default the FB would have IP 192.168.253.1 (if the box had 7.3 software) or 10.0.1.1 [I exactly don't remember the exact version when they changes the default IP (in version 7.5 it was 10.0.1.1 for sure)].
Configure your machine to be on the same subnet and you should be able to ping the firebox to make sure that the settings are correct.
Once you are able to ping the FB we proceed as below:
1. Open Policy Manager; click New; select FB model click OK.
2. Go to Network->Interfaces; configure external and trusted interface (the subnet you want WG to operate when functional).
3. Add services as FTP, ping, outgoing and watchguard. Leave all the services to default, configure watchguard service as below:
Incoming "Enabled and denied"
Outgoing "Enabled and allowed"; from trusted; to Firebox
Click File->Save->to firebox; specify WG IP as 192.168.253.1 or 10.0.1.1 [as per the case] and put password as "wg" (lower case without codes); hit OK; you would get a warning message, click OK; you would be prompted for readonly and readwrite/configuration passphrases; enter and remember as they would be needed to get in to the box at a later point in time.
Once saved; change the machine subnet to the new trusted interface and you should be able to connect back to FB; you can now go ahead and configure other services on FB and put the FB in production when completed.
Please let me know if you have any questions.
Thank you.
Connect the trust interface of FB (port 0 is external; 1 is trust and 2 is dmz) to a laptop/desktop using a ethernet cable.
Reset the FB to factory defaults (to make sure any partially saved configuration do not bother):
1. Turn the Firebox off. On the front of the Firebox, find and depress the up arrow.
2. Hold down the up arrow button while you turn on the Firebox, and continue to hold the button down until the LCD display shows the Firebox is running in System B mode.
By default the FB would have IP 192.168.253.1 (if the box had 7.3 software) or 10.0.1.1 [I exactly don't remember the exact version when they changes the default IP (in version 7.5 it was 10.0.1.1 for sure)].
Configure your machine to be on the same subnet and you should be able to ping the firebox to make sure that the settings are correct.
Once you are able to ping the FB we proceed as below:
1. Open Policy Manager; click New; select FB model click OK.
2. Go to Network->Interfaces; configure external and trusted interface (the subnet you want WG to operate when functional).
3. Add services as FTP, ping, outgoing and watchguard. Leave all the services to default, configure watchguard service as below:
Incoming "Enabled and denied"
Outgoing "Enabled and allowed"; from trusted; to Firebox
Click File->Save->to firebox; specify WG IP as 192.168.253.1 or 10.0.1.1 [as per the case] and put password as "wg" (lower case without codes); hit OK; you would get a warning message, click OK; you would be prompted for readonly and readwrite/configuration passphrases; enter and remember as they would be needed to get in to the box at a later point in time.
Once saved; change the machine subnet to the new trusted interface and you should be able to connect back to FB; you can now go ahead and configure other services on FB and put the FB in production when completed.
Please let me know if you have any questions.
Thank you.
to upgrade software; install the new version of software; open policy manager and save config to FB and it would get automatically upgraded.
Thank you.
Thank you.
ASKER
When I open system manager, it still says running WFS 7.5...I need to upgrade the firmware on this X1000 to Fireware Pro...they are at version 9.1.2...
I think the only way to upgrade to fireware is through the quick set up wizard
I think the only way to upgrade to fireware is through the quick set up wizard
ASKER
dpk_wal - How do i reset to factory defaults from a laptop?
First I would like to know what are you trying to accomplish; is it a new box or have you lost password or what...?
ASKER
I was uanble to reset the firewall to factory defaults but I decided to proceed with the rest of the steps anyways.
I connected the firebox to my laptop via crossover cable. I was able to ping the firebox. I configured a policy and tried saving it to the firebox using the password of wg. It won't accept this password.
I connected the firebox to my laptop via crossover cable. I was able to ping the firebox. I configured a policy and tried saving it to the firebox using the password of wg. It won't accept this password.
ASKER
This is a spare firewall that I am trying to upgrade to fireware. Fireware gives you the option to connect it to TWO WANS. Once this firewall is up and operating correctly I am going to configure two WANs on it. FSM does not have this feature therefore I had to upgrade.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I am not sure how to reset to factory default settings. I'll do some research...
ASKER
Make sure that firebox is using WFS 7.5 before using fbxinstall. If you need any help with using fbxinstall just do a google search for it and there will be a few pages that show up that explain how to use it. After the command line upgrade is complete you can run the quick set up wizard and it should not freeze on you.
Please update on the need and we would go through policy manager configuring the same if you wish.
Thank you.