Solved

Watchguard Firewall Blocking web portal

Posted on 2008-06-13
5
1,298 Views
Last Modified: 2013-11-16
We have recently deployed watchguard firewalls through out our network.  They seem to work great, but I have ran into various weird issues.  The issue I am having today is that no one in our network is able to access a company portal that is on the web being hosted off site.  However, I can access that portal from anywhere else, including my home.  The portal is https and uses both Java and Active X.  When I attempt to access it from our network by entering in my credentials it times out and I get a page can not be displayed message.  When I access it from anywhere else, it goes right to the page it should go to.  So far, I have set the proxi settings to allow everything, that did not work so I have disabled Http proxy but I still can't access the page.  I don't see anything being denied in the system manager either.  I Also, I disconnected the firewall and connected my pc directly to the ISP circuit and it worked.  I am 98% sure its the firewall.  Please help.
0
Comment
Question by:rivera2419
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
ID: 21784769
As I understand the website is on the internet and when you are behind firewall you cannot access it; are you using HTTP proxy service for outbound internet access; if yes; create filteredHTTP [from packet filters; add HTTP service, I call it filtered based on old naming conventions] service as below:
Connections are enabled; from Any-trusted; to public-ip-address-of-website

I think proxy is not allowing Java or other things causing you to see just the blank page.

If the website is hosted on the internal network then I would ask you to use internal IP address rather than using FQDN or website name.

Please implement and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 21867219
Thank you, I did create a filtered http service, which allows me to by pass all the firewall settings like web blocker, howerver I still get the same result.  I am starting to think it might be an internal dns issue and not the firewall.  Do you think it can still be the watchguard?
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 21867934
I am not sure; it can be a DNS issue. But if you can resolve the name for microsoft server from CLI as below, then I do not see any problem with DNS server:

c:\>nslookup update.microsoft.com <server-ip>

here <server-ip> is the IP address of your DNS server.

If you get IP address resolved then DNS is working fine.

Also, enable logging on the HTTP service you created and see if you get allows from the internal machine to the windows update server.

Please check and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 22051603
It is a dns issue.  When I set up my pc with my ISP's dns server it works fine.
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22056381
Good to know you found the root cause for problem. :)
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
Suggested Courses

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question