WatchGuard ML3AE8 Firebox M200 Network Security User Guide
- June 6, 2024
- Watchguard
Table of Contents
WatchGuard ML3AE8 Firebox M200 Network Security
Activate Your Firebox
- Go to www.watchguard.com/activate
- Log in to your WatchGuard account, or create a new account.
If you create a new account, return to www.watchguard.com/activate after you finish the account creation process. - Type the serial number for your device.
- During activation, select your setup method:
- RapidDeploy QuickStart – Automatically download and apply a QuickStart configuration file to your device, pre-configured with security settings recommended by WatchGuard.
- Classic Activation – Use the Web Setup Wizard to create a basic configuration file for your device.
- Use the setup directions in this guide that match the method you selected.
RapidDeploy QuickStart Setup
Connect Your Firebox and Power it On
Make sure the computers on your network are configured to use DHCP. When you
install your Firebox, it will assign an IP address on the
10.0.1.0/24 network.
Connect to the Web UI
-
A. Go to https://10.0.1.1:8080
-
B. You can safely ignore any certificate warnings you see because the device uses a self-signed certificate.
-
C. Log in with the user account admin and the Admin (readwrite) passphrase you set during activation.
Your device has a basic configuration:- Allows outbound TCP, UDP, and ping traffic
- Blocks all unrequested traffic from the external network
- Includes optimized security settings
- Uses licensed security services to protect the trusted and optional networks
Classic Activation Setup
Connect Your Firebox and Power it On
Make sure your computer is configured to use DHCP. When you connect to the
Firebox, it will assign an IP address on the 10.0.1.0/24
network.
Connect to the Web UI
-
A. Go to https://10.0.1.1:8080
-
B. You can safely ignore certificate warnings, because the device uses a self-signed certificate.
-
C. Log in with the user name admin and the passphrase readwrite.
-
D. Follow the directions in the Web Setup Wizard to create a basic configuration file for a new device. Click More Information if you have questions.
-
E. When the Wizard completes, log in to the Web UI with the admin user account and the Admin (readwrite) passphrase you set during the Wizard.
-
F. Install the Firebox in your network.
Your device has a basic configuration:- Allows outbound FTP, Ping, DNS, TCP, and UDP connections
- Blocks all unrequested traffic from the external network
- Inspects outgoing FTP, HTTP, and HTTPS traffic
- Uses licensed security services to protect the trusted and optional networks
Next Steps
Congratulations! You have finished basic setup of your Firebox. You can use
the Web UI to view and edit your configuration and to manage and monitor your
Firebox. Or, you can download and install WatchGuard System Manager (WSM) and
use Policy Manager and the WSM suite of management and monitoring tools. Here
are some recommendations to help you get started:
Verify your Internet connectivity
- With your Firebox installed in your network, make sure that your users can successfully browse the Internet.
Get the latest software
To upgrade the Firebox OS:
- Log in to Fireware Web UI.
- Select System > Upgrade OS.
To get the latest version of WSM, WatchGuard Dimension, VPN clients, and other software for your Firebox:
- Go to www.watchguard.com/support and click Download Software.
- Find the software downloads page for your Firebox model and select the software you want to install.
Explore the features and functions of your Firebox
Browse the Web UI or the tools in WatchGuard System Manager and click Help on
any page or dialog box to learn more about the management, monitoring, and
security features of your Firebox.
About the Device Status Lights
RJ45 interfaces
Interfaces 0 – 7 are RJ45 Ethernet interfaces that support link speeds of 10,
100, or 1000 Mbps. Each RJ45 interface has a pair of indicators. The right
indicator shows the interface connection status. The left indicator shows
interface activity.
| Indicator | Indicator color | Interface Status |
|---|---|---|
| Connection (right) | Yellow | Link at 1000 Mbps |
| Green | Link at 100 Mbps | |
| Not lit | Link at 10 Mbps, or no link | |
| Activity (left) | Yellow, blinks | Power on, network activity |
| Not lit | Power off, no connections |
- Storage – When there is activity on the SD card, the storage indicator is yellow.
- Arm/Disarm – When the device is armed and ready to pass traffic, this indicator is green. When the device is powered on, but not ready to pass traffic, this indicator is red.
- Power– The power indicator on the left front of the device is green when the device is powered on.
Reset the Firebox to Factory-Default Settings
If you ever need to, you can restore your Firebox to its factory-default
settings. For example, if you do not know your administrator account
passphrase or you want to start over with RapidDeploy QuickStart, you can
reset your device. Make sure you back up your device configuration before you
reset your device in case you want to restore it in the future.
For more information, see the Hardware Guide for your Firebox, available at:
www.watchguard.com/help/documentation/hardware.asp