We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

WatchGuard Blocks some wep traffic

uscost
uscost asked
on
Medium Priority
593 Views
Last Modified: 2012-05-06
Watchguard X Firewall

Little by little I am learning about this firewall. Have solved some problems but one is getting the better of me.

Parts of some web traffic is getting blocked by the firewall. I do not see errors in the logs to track it down. Good Example is www.cdw.com and any item, the Product Overview, Tech Spec's etc are triggered on the page like pop-up. The page works fine but you can not see the pop-up/dropdowns etc. Nothing happens, no errors.

Bypass firewall and all works fine.

Proxied HTTP set : Only setting checked are: Remove unkown headers, Log accounting and Require Content type.  
Safe Content: Neither box is checked.
 
Overall the Watchguard is working fine but this has be lost.
Comment
Watch Question

have you tried turning off the pop up blocker?

Disable the pop-up blocker in Internet Explorer 6.x or 7.x

   1. Open Internet Explorer.
   2. Select Tools > Pop-Up Blocker > Turn Off Pop-Up Blocker.

Disable the pop-up blocker in Firefox 2.x

   1. Open Firefox.
   2. Select Tools > Options.
      The Options window appears.
   3. Click the Content icon.
   4. Make sure the Block pop-up windows option is not selected.
   5. Click OK.

Author

Commented:
It is not the PC but the Firewall. Same PC, bypass firewall and no problems. The traffic that it is blocking is not really a pop-up but a drop-down-expand on the page. Since I am clueless about web pages it is hard to say what it is.

Same issue on IE 6, IE 7, Firefox etc. Just bypass firewall and all works.
CERTIFIED EXPERT
Top Expert 2007

Commented:
You might be using webblocker and the category might be blocked; also few things like Javascript and activeX might be blocked too.

Which model of firebox you have also what is the version of WSM software.

I would like to know if you see any entries in traffic monitor when the page is blocked.

Please check and update.

Thank you.

Author

Commented:
Firebox X700
System manager 7.3
Web Blocker - Not Running
Nothing in Traffic Monitor when I try to access items on the web page:

Example Page:
http://www.cdw.com/shop/products/default.aspx?edc=1369512&cm_sp=homepage-_-FeaturedProduct2-_-Ricoh+Aficio

Page looks fine but any of the 4 boxes from Product Overview to Warranty do nothing. As posted, bypass the Firebox and all works fine.
CERTIFIED EXPERT
Top Expert 2007

Commented:
We can configure a packet Filtered-HTTP service as below:
Incoming "Disabled"
Outgoing "enabled and allowed"; from trusted; to public-ip-of-cdw

This would ensure that FB is not blocking any traffic which goes out to cdw website; if you wish you can add more website public IP [as you get after doing nslookup] in the to box; please note FB would not filter any traffic which goes/comes from the configured websites.

Thank you.
Commented:
I was looking more for information about what the firewall was blocking to stop part of that specific web page.

This Question can be killed as I am upgrading the Firewall to a x750e and will redress this issue after the new firewall is placed in production.

Thanks.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.