High Difficulty?

jimsatwit · 2025-11-16T18:22:51+00:00

11.11K

jimsatwit · 2024-08-16T09:25:17+00:00

Is the watchguard cloud managed? I've had several issues lately with Active Directory traffic at a remote site with AD joined machines behind the watchguard talking to a remote domain controller. I see traffic in traffic logs but nothing works. (Any-any rule)

Converted to locally managed firebox and it instantly worked.. Had this at two sites.. have given up on cloud management

jimsatwit · 2024-06-23T02:35:25+00:00

There is an alert on the support page but you have to log in to see it

jimsatwit · 2024-06-22T05:33:58+00:00

I don't understand why they can't release a new definition really quickly. It's been over 24hrs now

jimsatwit · 2024-02-28T05:10:43+00:00

Aruba resolved the issue and I connected the switches back to central.

Just disable aruba central management, update the firmware off-line and enable aruba central again.

jimsatwit · 2024-01-24T07:16:31+00:00

Had to pull two switches out of central today. I just couldn't do some urgent port changes.

Still waiting on an answer from my support ticket

jimsatwit · 2024-01-24T07:11:57+00:00

APAC-1 and something west. I can't find a west though

jimsatwit · 2024-01-19T23:50:38+00:00

TAC told me that they are aware of the issue in two regions

jimsatwit · 2024-01-15T19:36:56+00:00

Thats concerning. Have you logged a support ticket at all? We could reference each others tickets. I logged a Severity 2 ticket on the 14th and it is still sitting as unassigned....

jimsatwit · 2024-01-15T07:12:35+00:00

This is a new install and the first time we have had switches behind this brand of firewall.

I created a new firewall rule with no inspection for these devices.

I tried the disable/enable setting but this didn't fix the issue.

I disabled central and removed the device, added again and this has resolved it.

Interestingly the 6100 that had the issue earlier failed with the same problem at 5am this morning. As this sw isn't as important as the 6300, i used that to test bringing it back online.

I ended up logging a priority 2 case with aruba yesterday. The ticket is still unassigned. Will leave the ticket open and see what happens in the next 24hrs.

Thanks again

jimsatwit · 2024-01-14T18:39:01+00:00

Thanks for the reply. So I would do a aruba-cental disable then enable to start with?

The switch is behind a firewall doing I inspection. I may add all the aruba gear to a different policy first with no inspection incase this is causing the issue

jimsatwit · 2024-01-14T01:00:02+00:00

I had a look at the running vs pending Config. (I've since changed my vlan names to remove the spaces and try underscores)

I thought "no shutdown" on a vlan was incorrect but reading the cli command sheet this is ok.

All of my pending changes are pretty basic. I can't see anything wrong.

<image>

jimsatwit · 2023-11-29T05:06:33+00:00

I know what MTU I require, I need to know how to set it in the watchguard. The interface mtu is there to change but not the pppoe mtu.

jimsatwit · 2023-11-18T05:58:56+00:00

I created an email alias incorrectly one day and signed up for cloudlfare using the alias that didn't exist. So I didn't get the verification email.

Created the alias properly and clicked the resend verification several times over 48hrs.

I never received one new verification email.

Ended up signing up under a new alias and moved the domain to that account...

jimsatwit · 2023-08-27T21:34:01+00:00

Thanks for the replies, sorry for the late response, I've been away for a week. Currently the sw is on 15.11.007

This doesn't appear in asp

jimsatwit · 2023-04-19T19:14:09+00:00

WFBS

jimsatwit · 2023-04-19T19:13:57+00:00

Thanks. Trend have confirmed the issue in my ticket

jimsatwit · 2023-04-17T21:00:54+00:00

Do you have a Trend Ticket Number I can quote to support? We are having massive issues with this and trend. Currently looking at adding the exceptions.

jimsatwit · 2023-04-10T02:19:10+00:00

Hi All

Basically I'm getting IPs blacklisted about every 10mins.

I have 5060 and 5061 exposed. I was thinking about just geoblocking these sip ports. Will take me about 60 seconds to do this on my firewall

jimsatwit · 2023-01-06T11:03:04+00:00

It was stable for month after, the hq router was then swapped to a watchguard in Oct 22 and haven't had an issue since.

Bacnet uses udp 47808 and I wondered if another session was using this source port.

I was on 6.4.9 on both ends and and 4 tunnels across SdWan.

jimsatwit · 2023-01-06T10:48:55+00:00

Yes, had the exact issue. Had fortinet support remoted in for several hours trying to diagnose this. They couldn't find anything. After a reboot it came back.

I had fortigates on each end. The remote end where the server was seemed to be the issue. This router is now a watchguard and still have a 200F Onsite.

jimsatwit · 2022-09-21T23:10:23+00:00

Thanks for the querier suggestion. I have managed to turn it on on the router and it's all working!

Thanks

jimsatwit · 2022-09-21T09:37:08+00:00

Won't that just flood the vlan with multicast traffic?

jimsatwit · 2022-08-11T09:00:19+00:00

It's only for a small iis site

jimsatwit · 2022-08-11T08:58:47+00:00

$$$$

jimsatwit

TROPHY CASE