Link to home
Start Free TrialLog in
Avatar of BeGentleWithMe-INeedHelp
BeGentleWithMe-INeedHelpFlag for United States of America

asked on

Watchguard low end router firewall issues - I don't know what I am doing. Can we set up remote session?

I inherited a network with 2 watchguard boxes - 1 at main office(xtm21?) , 1 at remote site (X10e).  There's a VPN between them.  Things were good for a while, but now I am backing up 3 PCs using shadow protect continuous incrementals from the remote office to the home office.  Not sure if that's the issue, but the remote office WIRED devices get DHCP from the local watchguard.  But can't ping the router, can't get on the web, can't do anything.  Wireless devices (via a Ubiquiti Picostation) can get DHCP from the watchguard, and get on the web, ping the watchguard, etc..  The wired and wireless access point are all going through an unmanaged netgear switch into 1 port on the watchguard.

is there some setting in watchguard that says that mac address of that device used too much data and will only get an IP address?

Is there a place in watchguard UI to show that someone was cut off for using too much data?

Can I hire people through EE to help with this or for points, can we set up a remote session for you to see the UI / tell me / show me what needs to be done?

I will likely reboot this firewall and restore the wired devices.... but the problem will likely return when they start trying to send bvackup data.

and again, the problem isn't just with the vpn, it's with general web access from the wired devices (which are being backed up... so is it a wired issue or a too much data issue).  wired and wireless are all going into the same single port on the watchguard, so it's not 1 port is locked / 1 is unlocked...

Watchguard support sucks as far as I am concerned! faster / better answers from other users!
Avatar of BeGentleWithMe-INeedHelp
BeGentleWithMe-INeedHelp
Flag of United States of America image

ASKER

ok, just mindlessly looking at the watchguard interface (is it me or the unit or poor design - it takes 5 - 10 seconds for each page to load).

On blocked site page, it lists 192.168.2.151, 1 of the wired machines saying it was blocked because of ip scan attack and will be released in the next 20 min.  I have it pinging the router and www.google.com and failing ping 192.168.2.1 -t.  is that enough to get it blocked!?

how to remove it from blocked site page and keep local machines from getting on there?
under firewall, there's 'blocked sites'  I added the subnets 192.168.1.0/24 and 192.168.2.0/24 to the blocked sites exception page. is that all?

I accidentaly put them on the blocked site page and locked my self out.  went in from the web to fix that.  I cause my own problems!
ASKER CERTIFIED SOLUTION
Avatar of Rob Williams
Rob Williams
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial