Link to home
Start Free TrialLog in
Avatar of Pangeia
PangeiaFlag for United States of America

asked on

Website blocked from Watchguard XTM505

Our clients  Watchguard XTM505 is blocking them from getting to monster.com hiring website. Starting about two months ago they could no longer get into the employer hiring section of Monster.com. It will let them put in their user name and pswd and then times out. We can get to the website if we bypass the Watchguard and we have put in exceptions into the Webblocker on the Watchguard. We have also put the IP addresses for the website into the firewall > blocked sites exception list. We did try and disable the Webblocker subscription service and still no luck. Any comments on configuring the Watchguard to allow us to finish the login at hiring.monster.com website would be appreciated.
Avatar of jhyiesla
jhyiesla
Flag of United States of America image

Have you checked when you are bypassing the Watchguard if the hiring site at monster.com is really located there?  I've seen way too many sites that make use of third party sites to do the heavy lifting on their web sites. So, although you go to monster.com, the hiring site might actually be at some totally unrelated site that you might be blocking.

I've also seen where some sites, like Facebook, make use of other domains to host their content and just making an allow rule for facbeook.com isn't enough to get many web filtering systems to allow it through successfully.
If we look at the website hiring.monster.com, it has many scripts from the other website. You may need to look, if adding those websites helps. Please see below.

User generated image
Sudeep
Avatar of Pangeia

ASKER

We have put all the above in the exceptions for Webblocker on the Watchguard. We have also put the IP addresses for the websites into the firewall > blocked sites exception list. Still no luck, please let me know if you have any other ideas, thank you.
ASKER CERTIFIED SOLUTION
Avatar of jhyiesla
jhyiesla
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pangeia

ASKER

We will be contacting Watchguard tomorrow and see if they have any suggestions. I will post the update as soon as we know, thank you.
Avatar of Pangeia

ASKER

Here is what Monster came back with:
Monster IP Ranges:  
 
Bedford:

208.71.194.0/24
208.71.195.0/24
208.71.196.0/24
208.71.197.0/24
208.71.198.0/24
208.71.199.0/24
 
South Boston:

63.121.28.0/24
63.121.29.0/24
63.121.30.0/24
63.121.31.0/24

In addition we had to add a new Firewall Policy to the WatchGuard in order to fix the problem with the above IP addresses and subnet.
Avatar of Pangeia

ASKER

Thank you for your help.