Edge X15 connection issues

[GoingGrey]

Hi,

We have recently bought a Watchguard Firebox Edge X15 for our small office of around 15 users.

We have a small network with a 2003 server and an exchange 2003 server. The external internet connection is made via a static IP address. I configured the X15 and plugged it into the network and all seemed well. However, after a while the unit appeared to 'freeze' and stop any incoming or outgoing connections. The only way to clear the problem is to log on to the box and reboot it. The X15 will then run for anything between 5 minutes and half a day before stopping again. The status screens and the log don't appear to show any problems.

I've reset the unit, updated the firmware, open and closed ports all to no avail.

I'm pretty new to watchguard equipment and any help/advise would be much appreciated.

 

[dput]

It may be a bad power supply in the unit. I would suggest that you contact WatchGuard.

Dan

 

[GoingGrey]

Cheers Dan,

I did wonder whether it was a faultly unit. We also bought an X5w for a remote office at the same time as the X15. I tried the X5 instead and although the problem wasn't as bad the X5 still froze! Router also seems fine so I can only assume it's some sort of config issue with the watchguard units?

I'm talking to Watchguard support - no pearls of wisdom as yet!

Many thanks, Ian

 

[pankajchawla]

Do you get the logs like "nat pool exausted" when this happens in the logging part?

If yes then one of the machene in your network is making lots of outbound connection ie through sopyware or any other malware. You may want to scan your network for the same.

If this is not the case try with updating the sw to the latest version otherwise could be a hardware problem....

 

[relisys]

Any solution to this - I have exactly the same problem with two X15 boxes - no NAT pool exhausted logging messages either.

Cheers! Relisys

 

[GoingGrey]

No real fix as yet. Unfortunately Watchguard don't seem to have any idea either! The X15 has been replaced by Watchguard but still does the same thing.

I've got an ongoing case logged with them for the X5W. The X5W is only connected to my home network (1 desktop, 1 laptop) and I still have the same problem.

The only resolution i've found for the X15 is to give it a seperate external IP address and just have it authenticating mobile clients. That works with no problems. As soon as I start routing SMTP and HTTP traffic through it the problem starts again.

Let me know if you make any progress!
Cheers, Ian

 

[relisys]

Sadly I need it for a BOVPN

I am currently awaiting Watchguards second level support team to call me. Do you still have an incident reference number that I can reference - I'd like to think that with 3/4 boxes doing the same thing that maybe they could solve both our problems!!!!

Cheers! Relisys

 

[GoingGrey]

Sounds good to me.
Ticket numbers are 972118 and 983222 which is ongoing.

Currently they are waiting for me to plug a switch in between the X5W and my router. I've tried this previously with the X15 and know it doesn't make any difference!!

I'll keep trying at my end too.

Good luck, Ian

 

[pankajchawla]

Ian,

Placing a hub or a switch between the WG and router synchronize the speed and duplex of the communicating devices. Although the watchguard is autosensing box in but still it lacks in some cases or boxes rather.

You can try to connect only one machine directly to the WG and see how that goes.

Regards
Pankaj

 

[relisys]

I have tried this also, to no avail.

Relisys

 

[stevescottys]

It's a bad Watchguard. I had the same issue with 2 - X15. I contacted Watchguard and they said to do a bunch of test that had no positive results. You need to get it replaced for it to work properly.

The 2 replacements I installed worked without any issue....Looks like a bad batch.

 

[GoingGrey]

Hi Steve,
I've had one X15 replaced with no improvement. Also have an identical problem with an X5W!?

 

[relisys]

Steve,

Do you have an incident number so that I can highlight that these were replaced? Trying to speed up the process of finalising the useless tests Watchguard are making me carry out.

Cheers! Relisys