Help! Anyone a Watchguard X700 Guru?

[neil_cardiff]

If so, can you give me a hand - for some reason my IPSEC VPN's have gone down!!!

Can you email me or let me know so I can email you?

Thanks

Neil

[JamieBeeston]

neil_cardiff said:

If so, can you give me a hand - for some reason my IPSEC VPN's have gone down!!! Can you email me or let me know so I can email you? Thanks Neil

Dont use watchguard, and I;ll tell you why.

In my experience (both supporting them, and with clients using them) they used to suffer from unexpected hardware / config failiures. They Fireboxes 3 would always need a reboot, and they were a pita to VPN with non WG devices.

If you can, move to Cisco / Checkpoint.

Sorry its not much use to you.

J

[pdV6]

Have a WG Firebox X15 Edge here and it seems as stable as a stable thing so far. Our VPN basically hasn't gone down since installing it (which is more than could be said for the previous setup using ISA Server)

[JamieBeeston]

pdV6 said:

Have a WG Firebox X15 Edge here and it seems as stable as a stable thing so far. Our VPN basically hasn't gone down since installing it (which is more than could be said for the previous setup using ISA Server)

I should have prefaced by saying i've not touched WG in 3 yrs or so due to reasons detailed above

J

[rsvmilly]

This is worrying as our new IT company has specified Watchguard X700

[neil_cardiff]

JamieBeeston said:

pdV6 said: Have a WG Firebox X15 Edge here and it seems as stable as a stable thing so far. Our VPN basically hasn't gone down since installing it (which is more than could be said for the previous setup using ISA Server) I should have prefaced by saying i've not touched WG in 3 yrs or so due to reasons detailed above J

jamie,

What X series did you use - I've a III/700 box, which seems to have lost its VPN ability!

Neil

[neil_cardiff]

rsvmilly said:

This is worrying as our new IT company has specified Watchguard X700

Get rid of the blasted things. I shat myself when I found you had to install the shitty software to manage them.

Whatever happened to good old telnet and IP tables?

Neil

[JamieBeeston]

neil_cardiff said:

[quote=rsvmilly] Whatever happened to good old telnet and IP tables? Neil

It turned into SSH (and that abysmal PDM Web Management Thing Cisco use )

[Podie]

Horrid, horrid things... as Beesty says, get a Cisco jobbie in there quick.

[neil_cardiff]

Podie said:

Horrid, horrid things... as Beesty says, get a Cisco jobbie in there quick.

Yup,

I've figured out why it fell over. I reinstalled the Watchguard SW onto my desktop machine from the old IT chappies machine, and then carried on merrirly adding a rule for some administration stuff.

Uploaded the image, and poof...everything fell over. Can see t'interweb but no VPN's...

Gah...cuee lots of headscratching, and finally after quite a few hours, reinstalling the hard drive (luckily I'd rebuilt the old machine, but kept the hard drive) and brought it back up.

Remoted back into the old machine, connected, uploaded a backup FW config, and poof.... everything works...

Seems the installation holds the VPN license keys!!!!!!!!!

What a crock of shit!!!

Anyway all up now, but speaking to my old boss who I've farmed out work of this nature to for our other office, and we're gonna replace them post haste - rather than the plan we had to replace them upon a server upgrade...

Gahhh!!!

Oh, and I inherited these - and a fookin' weirdly setup network...private public IP's internally anyone???

[neil_cardiff]

Podie said:

get a Cisco jobbie in there quick.

Replacing them with Zywalls

[neil_cardiff]

Gah!!!

Now I've more probs - machines with a 192.168.1.0/24 subnet can't ping certain machines on the other side of the VPN - yet the 212.134.82.192/26 sunbet machines can!

OOoooooooooooohhhhhh!!!!!!