r/WatchGuard

Is anyone else having Authpoint login issues

For reasons, I need to configure two public IPs from the same provider on the same physical uplink. The addresses are in different subnets and each has its own gateway.

I cannot find any way in Fireware to define two separate gateways on a single physical External interface. Maybe I’m just blind.

Adding the second address as a Secondary Network does not solve the problem because it inherits the interface’s existing gateway. Meanwhile, pfSense lets you slap multiple gateways onto one interface and use policy routing. I assumed that, for roughly €3K per year, a €10K appliance could manage the same trick.

Yes, I know the workarounds:

“Don’t use a secondary IP.” “Put a switch in front and waste two physical Firebox interfaces on the same ISP uplink.” “Move the services to another port.” (it is not about services) “Ditch the Firebox and use pfSense.”

What I actually want to know is: what is the native, clean Fireware method for configuring two public IPs - with their respective gateways - on the same physical WAN interface, without wasting another physical port or putting another router/switch in front?

There's a new sheriff in town! (Me)

Most of you have probably either read a post from me or had me comment on your post, but if you don't know or want to know.

10+ year Gold Partner for 10+ years in a row 501 MSP.

Hey everyone,

So we are in the process (final stages really) of evaluating WatchGuard EDR/CloudDR/MDR. We are moving away from Huntress (EDR/ITDR/SOC/ISPM).

So far the migration has been pretty simple. But I am having a hard time trying to compare Huntress and WG.

From my understanding, CloudDR is mostly an ISMP (ISH) replacement, but will also do SOME ITDR. It will do ShadowIT and some Office 365 investigations. We plan to do this for all customers.

For MDR, we are planning to use Total MDR for a handful of our larger customers that deal with compliance.

I'm having a hard time understanding where ITDR comes into play. I see that CloudDR can do some remediations. But you have to set it up manually.

I also see that MDR can also do remediation. But it doesn't appear to be automated, unless I'm misunderstanding.

For anyone that understands both products, what am I missing?

The full WG package will end up costing us more that Huntress. But it does seem that we will have better protection, and I'm really looking forward to this. But since Office 365 remediation is so important, I don't want to get this wrong and have a gap in protection.

Thanks for all of your input! =)

Sorry if obvious, or maybe it's a new code thing but

Just remove "/wizard/" from the URL on a defaulted / NIB WG.

.#TheMoreYouKnow

Hi all. I'm struggling to find where in my Firebox I can pull the site visits/traffic logs for one particular source IP. WG documentation hasn't helped. Any ideas? TIA.