x5 edge using x700 webblocker?

[teletubby5e]

I am connecting an x5 via manual ipsec bovpn to our x700 using the 'any' service. is there a way that I can use the web blocking function of the x700?

thanks, jeff

 

[pankajchawla]

While defining routing policy in the fb x 700. make it as
local network-0.0.0.0/24 and actual remote private network
On the edge side make the routing policy as
actual private network and 0.0.0.0/24
This will work

Let me know

 

[teletubby5e]

sorry. i am not getting it yet. this is the first vpn i have had to create. are you saying to create a static route under the networking section, or to create the routing policy under incoming and outgoing of the 'any' service? i will try that tonight and let you know.

here is what i have :

a private network behind x5 is 192.168.111.0/24

and routes across the tunnel

to a private network behind x700 which is 172.16.0.0/12

thanks again! jeff

 

[teletubby5e]

okay i see where to edit the routing policy for the tunnel in the x700, i will set it as instructed and post results in here. thanks.

 

[teletubby5e]

thanks.

it takes 0.0.0.0/0 on both sides to make it work.

when i open up the browser, i get the java applet, and then it authenticates. but then i cannot ping anything outside of the trusted network on the x700.

i can telnet to everything on our internal network and see network shares etc. just no external traffic like web and email.

i am looking at the rules in the x700 now. any ideas?

 

[teletubby5e]

tech support gave me this link as well.

https://www.watchguard.com/support/advancedfaqs/edge71-fb73_defgtwy.asp

 

[pankajchawla]

This is the link which will work in your case.

 

[pankajchawla]

Change the ANY service of the vpn tunnel, make incoming from the private network of the edge to trusted and external.