x550e Fireware Pro 10.0

[dphoneguy24]

I am new to WatchGuard and am setting up a x550e with Fireware Pro 10.0 Using the wizard for initial setup there is an area to input the DNS from your ISP. I have a static IP address that I have assigned to the external port (E0). When the box restarts, I cannot browse the Internet from my test station on Trusted (E1). I can ping external addresses, but it acts like it is blocking all DNS inquiries to the Internet.

What am I missing?

Thanks,
Dphoneguy24

 

[unclerico]

what is your test station using for primary/secondary DNS addresses? Do you have any policies in place that blocks DNS traffic?

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[dphoneguy24]

I shouldn't have to input the external DNS on my test station or any others should I? Won't the Firebox handle DNS forwarding?

Before I put the Firebox in my network, the router/firewall I had was actually my DNS server for the network (192.168.10.x) and would forward DNS queries to the ISP for anything external.

 

[Knackster]

Is your test station pointing towards the firebox for dns?
On my x750e, it allows dns to pass but it is not a dns server. I believe that the dns entries on the WAN port are there for dns resolution strickly for the firebox proxy's and filters.

Chris
IT Manager
Houston, Texas

 

[dphoneguy24]

Yes, it is pointing towards the firebox for DNS. So, it will not forward DNS? So if that is the case, I need to setup a DNS server on my LAN?

 

[Knackster]

Yes,

Once the dns server is on the LAN, then you can configure the DNS proxy to go from your internal dns server to any-external.

Chris
IT Manager
Houston, Texas