WSM User Guide - WatchGuard Technologies

Managing Devices with the Management Serverwhen you add this device to the Management Server configuration.A Firebox can be a client of only one Management Server.The Firebox protecting the Management Server automatically monitors all ports used by the Management Serverand will forward any connection on these ports to the configured Management Server. The Firebox protecting theManagement Server is configured to do this when you run the Management Server Setup Wizard.If you did not use the Management Server Setup Wizard on the Management Server, or, if you skipped the “GatewayFirebox” step in the wizard, configure the gateway Firebox to forward TCP ports 4110, 4112, and 4113 to theprivate IP address of the Management Server.13 Click OK.When you save the configuration to the Firebox, the Firebox is enabled as a managed client. The managed Fireboxclient tries to connect to the IP address of the Management Server on TCP port 4110. Management connections areallowed from the Management Server to this managed Firebox client.Configuring a Firebox X Edge as a Managed Client1 To connect to the Firebox X Edge System Status page, type https:// in the browser address bar,and the IP address of the Edge trusted interface.The default URL is: https://192.168.111.12 From the navigation bar, select Administration > WSM Access.The WatchGuard Management Access page appears.3 Select the Enable remote management check box.4 From the Management Type drop-down list, select WatchGuard System Manager.5 To put the Firebox X Edge into the control of WatchGuard System Manager centralized Edgemanagement, click the Use Centralized Management check box. Do not select the UseCentralized Management check box if you are using WatchGuard System Manager only to manageVPN tunnels.When the Firebox X Edge is under centralized management, access to the Firebox X Edge configuration pagesis set to read-only. The only exception is access to the WSM Access configuration page. If you disable theremote management feature, you get read-write access to the Firebox X Edge configuration pages again.6 Type a status passphrase for your Firebox X Edge and then type it again to confirm in the correctfields.7 Type a configuration passphrase for your Firebox X Edge and then type it again to confirm in thecorrect fields.These passphrases must match the passphrases you use when you add the device to the Management Server or theconnection will fail.User Guide 211