User's Manual
Table Of Contents
- WatchGuard® Firebox® X Edge User Guide
- Certifications and Notices
- Declaration of Conformity
- Notice to Users
- WatchGuard Firebox Software
- End-User License Agreement
- Copyright, Trademark, and Patent Information
- Limited Hardware Warranty
- Abbreviations Used in this Guide
- CHAPTER 1 Introduction to Network Security
- CHAPTER 2 Installing the Firebox® X Edge
- CHAPTER 3 Configuration and Management Basics
- CHAPTER 4 Changing Your Network Settings
- Using the Network Setup Wizard
- Configuring the External Network
- Configuring the Trusted Network
- Configuring the Optional Network
- Enabling the optional network
- Changing the IP address of the optional network
- Using DHCP on the optional network
- Setting optional network DHCP address reservations
- Configuring the optional network for DHCP relay
- Using static IP addresses for optional computers
- Adding computers to the optional network
- Requiring encrypted connections
- Making Static Routes
- Viewing Network Statistics
- Registering with the Dynamic DNS Service
- Enabling the WAN Failover Option
- Enabling External Modem Failover
- CHAPTER 5 Setting up the Firebox X Edge Wireless
- CHAPTER 6 Configuring Firewall Settings
- CHAPTER 7 Configuring Logging
- CHAPTER 8 Configuring WebBlocker
- CHAPTER 9 Configuring Virtual Private Networks
- CHAPTER 10 Configuring the MUVPN Client
- CHAPTER 11 Managing the Firebox® X Edge
- Viewing Current Sessions and Users
- About User Authentication
- Adding or Editing a User Account
- About Seat Licenses
- Selecting HTTP or HTTPS for Firebox Management
- Changing the HTTP Server Port
- Setting up VPN Manager Access
- Updating the Firmware
- Activating Upgrade Options
- Enabling the Model Upgrade Option
- Configuring Additional Options
- Viewing the Configuration File
- APPENDIX A Firebox®X Edge Hardware
- Index
Frequently Asked Questions
User Guide 119
This issue can be resolved with Dynamic DNS. For information, see
“Registering with the Dynamic DNS Service” on page 62.
How do I get a static external IP address?
You get the external IP address for your computer or network from
your ISP or an administrator. Many ISPs use dynamic IP addresses to
make their networks easier to configure and easier to use with many
users. Most ISPs can give you a static IP address as an option.
How do I troubleshoot the connection?
If you can ping the trusted interface of the remote Firebox X Edge
and the computers on the remote network, the VPN tunnel is up.
The configuration of the network software or the applications are
possible causes of other problems.
Why is ping not working?
If you cannot ping the local interface address of the remote Firebox
X Edge, follow these steps:
1 Ping the external address of the remote Firebox X Edge.
For example, at Site A, ping 68.130.44.15 (Site B). If the ping packet does
not come back, make sure the external network settings of Site B are
correct. (Site B must be configured to respond to ping requests on that
interface.) If the settings are correct, make sure that the computers at
Site B haveInternet access. If this procedure does not solve the problem,
talk to a service person at your ISP.
2 If you can ping the external address of each Firebox X Edge, try
to ping a local address in the remote network.
From Site A, ping 192.168.111.1. If the VPN tunnel is up, the remote
Firebox X Edge sends the ping back. If the ping does not come back,
make sure the local configuration is correct. Make sure that the local
DHCP address ranges for the two networks connected by the VPN tunnel
do not use any of the same IP addresses. The two networks connected by
the tunnel must not use the same IP addresses.
How do I obtain a VPN upgrade license key?
You can purchase a license key for an upgrade from a reseller or
from the WatchGuard Web site:
http://www.watchguard.com/sales/buyonline.asp
Is the Firebox X Edge compabtible with WatchGuard
System Manager?
Yes. The default Firebox X Edge configuration is compatible with
WatchGuard System Manager v7.3. To configure the Edge for use
with WSM v7.0, v7.1, and v7.2, browse to the VPN Manager Access