Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Watchguard Firewall Blocking web portal

Posted on 2008-06-13
5
Medium Priority
?
1,315 Views
Last Modified: 2013-11-16
We have recently deployed watchguard firewalls through out our network.  They seem to work great, but I have ran into various weird issues.  The issue I am having today is that no one in our network is able to access a company portal that is on the web being hosted off site.  However, I can access that portal from anywhere else, including my home.  The portal is https and uses both Java and Active X.  When I attempt to access it from our network by entering in my credentials it times out and I get a page can not be displayed message.  When I access it from anywhere else, it goes right to the page it should go to.  So far, I have set the proxi settings to allow everything, that did not work so I have disabled Http proxy but I still can't access the page.  I don't see anything being denied in the system manager either.  I Also, I disconnected the firewall and connected my pc directly to the ISP circuit and it worked.  I am 98% sure its the firewall.  Please help.
0
Comment
Question by:rivera2419
  • 3
  • 2
5 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 1500 total points
ID: 21784769
As I understand the website is on the internet and when you are behind firewall you cannot access it; are you using HTTP proxy service for outbound internet access; if yes; create filteredHTTP [from packet filters; add HTTP service, I call it filtered based on old naming conventions] service as below:
Connections are enabled; from Any-trusted; to public-ip-address-of-website

I think proxy is not allowing Java or other things causing you to see just the blank page.

If the website is hosted on the internal network then I would ask you to use internal IP address rather than using FQDN or website name.

Please implement and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 21867219
Thank you, I did create a filtered http service, which allows me to by pass all the firewall settings like web blocker, howerver I still get the same result.  I am starting to think it might be an internal dns issue and not the firewall.  Do you think it can still be the watchguard?
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 21867934
I am not sure; it can be a DNS issue. But if you can resolve the name for microsoft server from CLI as below, then I do not see any problem with DNS server:

c:\>nslookup update.microsoft.com <server-ip>

here <server-ip> is the IP address of your DNS server.

If you get IP address resolved then DNS is working fine.

Also, enable logging on the HTTP service you created and see if you get allows from the internal machine to the windows update server.

Please check and update.

Thank you.
0
 

Author Comment

by:rivera2419
ID: 22051603
It is a dns issue.  When I set up my pc with my ISP's dns server it works fine.
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22056381
Good to know you found the root cause for problem. :)
0

Featured Post

The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Screencast - Getting to Know the Pipeline
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses

575 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question