Watchguard Firewall Blocking web portal

We have recently deployed watchguard firewalls through out our network.  They seem to work great, but I have ran into various weird issues.  The issue I am having today is that no one in our network is able to access a company portal that is on the web being hosted off site.  However, I can access that portal from anywhere else, including my home.  The portal is https and uses both Java and Active X.  When I attempt to access it from our network by entering in my credentials it times out and I get a page can not be displayed message.  When I access it from anywhere else, it goes right to the page it should go to.  So far, I have set the proxi settings to allow everything, that did not work so I have disabled Http proxy but I still can't access the page.  I don't see anything being denied in the system manager either.  I Also, I disconnected the firewall and connected my pc directly to the ISP circuit and it worked.  I am 98% sure its the firewall.  Please help.
rivera2419Asked:
Who is Participating?
 
dpk_walConnect With a Mentor Commented:
As I understand the website is on the internet and when you are behind firewall you cannot access it; are you using HTTP proxy service for outbound internet access; if yes; create filteredHTTP [from packet filters; add HTTP service, I call it filtered based on old naming conventions] service as below:
Connections are enabled; from Any-trusted; to public-ip-address-of-website

I think proxy is not allowing Java or other things causing you to see just the blank page.

If the website is hosted on the internal network then I would ask you to use internal IP address rather than using FQDN or website name.

Please implement and update.

Thank you.
0
 
rivera2419Author Commented:
Thank you, I did create a filtered http service, which allows me to by pass all the firewall settings like web blocker, howerver I still get the same result.  I am starting to think it might be an internal dns issue and not the firewall.  Do you think it can still be the watchguard?
0
 
dpk_walCommented:
I am not sure; it can be a DNS issue. But if you can resolve the name for microsoft server from CLI as below, then I do not see any problem with DNS server:

c:\>nslookup update.microsoft.com <server-ip>

here <server-ip> is the IP address of your DNS server.

If you get IP address resolved then DNS is working fine.

Also, enable logging on the HTTP service you created and see if you get allows from the internal machine to the windows update server.

Please check and update.

Thank you.
0
 
rivera2419Author Commented:
It is a dns issue.  When I set up my pc with my ISP's dns server it works fine.
0
 
dpk_walCommented:
Good to know you found the root cause for problem. :)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.