Solved

Watchguard Firewall Blocking web portal

Posted on 2008-06-13
5
1,277 Views
Last Modified: 2013-11-16
We have recently deployed watchguard firewalls through out our network.  They seem to work great, but I have ran into various weird issues.  The issue I am having today is that no one in our network is able to access a company portal that is on the web being hosted off site.  However, I can access that portal from anywhere else, including my home.  The portal is https and uses both Java and Active X.  When I attempt to access it from our network by entering in my credentials it times out and I get a page can not be displayed message.  When I access it from anywhere else, it goes right to the page it should go to.  So far, I have set the proxi settings to allow everything, that did not work so I have disabled Http proxy but I still can't access the page.  I don't see anything being denied in the system manager either.  I Also, I disconnected the firewall and connected my pc directly to the ISP circuit and it worked.  I am 98% sure its the firewall.  Please help.
0
Comment
Question by:rivera2419
  • 3
  • 2
5 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
ID: 21784769
As I understand the website is on the internet and when you are behind firewall you cannot access it; are you using HTTP proxy service for outbound internet access; if yes; create filteredHTTP [from packet filters; add HTTP service, I call it filtered based on old naming conventions] service as below:
Connections are enabled; from Any-trusted; to public-ip-address-of-website

I think proxy is not allowing Java or other things causing you to see just the blank page.

If the website is hosted on the internal network then I would ask you to use internal IP address rather than using FQDN or website name.

Please implement and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 21867219
Thank you, I did create a filtered http service, which allows me to by pass all the firewall settings like web blocker, howerver I still get the same result.  I am starting to think it might be an internal dns issue and not the firewall.  Do you think it can still be the watchguard?
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 21867934
I am not sure; it can be a DNS issue. But if you can resolve the name for microsoft server from CLI as below, then I do not see any problem with DNS server:

c:\>nslookup update.microsoft.com <server-ip>

here <server-ip> is the IP address of your DNS server.

If you get IP address resolved then DNS is working fine.

Also, enable logging on the HTTP service you created and see if you get allows from the internal machine to the windows update server.

Please check and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 22051603
It is a dns issue.  When I set up my pc with my ISP's dns server it works fine.
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22056381
Good to know you found the root cause for problem. :)
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
Need to grow your business through quality cloud solutions? With everything required to build a cloud platform and solution, you may feel like the distance between you and the cloud is quite long. Help is here. Spend some time learning about the Con…

937 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now