Solved

Watchguard Firewall Blocking web portal

Posted on 2008-06-13
5
1,273 Views
Last Modified: 2013-11-16
We have recently deployed watchguard firewalls through out our network.  They seem to work great, but I have ran into various weird issues.  The issue I am having today is that no one in our network is able to access a company portal that is on the web being hosted off site.  However, I can access that portal from anywhere else, including my home.  The portal is https and uses both Java and Active X.  When I attempt to access it from our network by entering in my credentials it times out and I get a page can not be displayed message.  When I access it from anywhere else, it goes right to the page it should go to.  So far, I have set the proxi settings to allow everything, that did not work so I have disabled Http proxy but I still can't access the page.  I don't see anything being denied in the system manager either.  I Also, I disconnected the firewall and connected my pc directly to the ISP circuit and it worked.  I am 98% sure its the firewall.  Please help.
0
Comment
Question by:rivera2419
  • 3
  • 2
5 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
ID: 21784769
As I understand the website is on the internet and when you are behind firewall you cannot access it; are you using HTTP proxy service for outbound internet access; if yes; create filteredHTTP [from packet filters; add HTTP service, I call it filtered based on old naming conventions] service as below:
Connections are enabled; from Any-trusted; to public-ip-address-of-website

I think proxy is not allowing Java or other things causing you to see just the blank page.

If the website is hosted on the internal network then I would ask you to use internal IP address rather than using FQDN or website name.

Please implement and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 21867219
Thank you, I did create a filtered http service, which allows me to by pass all the firewall settings like web blocker, howerver I still get the same result.  I am starting to think it might be an internal dns issue and not the firewall.  Do you think it can still be the watchguard?
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 21867934
I am not sure; it can be a DNS issue. But if you can resolve the name for microsoft server from CLI as below, then I do not see any problem with DNS server:

c:\>nslookup update.microsoft.com <server-ip>

here <server-ip> is the IP address of your DNS server.

If you get IP address resolved then DNS is working fine.

Also, enable logging on the HTTP service you created and see if you get allows from the internal machine to the windows update server.

Please check and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 22051603
It is a dns issue.  When I set up my pc with my ISP's dns server it works fine.
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22056381
Good to know you found the root cause for problem. :)
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now