WatchGuard
JSCM Group Management
CYCLOPS BLINK MALWARE INVADES WATCHGUARD ...

February 23, 2022 – The CSIA, National Security Agency, and FBI released a Joint Cyber Security Announcement today indicating that Cyclops Blink has been deployed to WatchGuard protected devices. This particularly insidious malware is thought to emanate from Sandworm, also known as Voodoo Bear, and said to originate from the Russian Main Center for Special Technologies.

CYCLOPS BLINK MALWARE INVADES WATCHGUARD PROTECTED SMEs
WatchGuard Policies
JSCM Group Management
Deploying a WatchGuard DPI Certificate on a Mac

Follow these steps to install a WatchGuard DPI certificate on a Mac.  This is for use in HTTPS Inspection.

WatchGuard Policies
JSCM Group Management
WatchGuard Deep Packet Inspection (DPI)

The problem with HTTPS websites is it can cause you to get infected with root kits, malware, or ransomware such as Cryptowall and Locky.

WatchGuard UTM Services
JSCM Group Management
WatchGuard WebBlocker Actions

This video shows you an easy and effective way to manage WatchGuard WebBlocker policies.

WatchGuard Mobile VPN
JSCM Group Management
Setting Up a WatchGuard SSL VPN

This video shows you how to configure the WatchGuard SSL VPN and use it with mobile clients.

,

AuthPoint Policies

,
AuthPoint Policies

One of the newest updates in AuthPoint allows you to create policies for access. This allows you to control the type of multi-factor authentication requirements for different groups of users, based on the resource they are logging into. You can also use the policies to set priorities on logins, based on their order.

, ,

New Firmware Release

, ,
New Firmware Release

WatchGuard recently released new firmware for their T- and M- series devices. This is a maintenance release to address known issues. JSCM Group has tested this firmware and found no significant issues.

,

Firebox System Manager (FSM) Tips and Tricks

,
Firebox System Manager (FSM) Tips and Tricks

Firebox System Manager (FSM) is one of the tools available through WatchGuard System Manager (WSM). FSM is a live monitoring tool that can be used for troubleshooting or diagnostic purposes. If using this tool, there are several tips and tricks to be aware of to make usage much more effective.

,

Firebox Administrator Accounts

,
Firebox Administrator Accounts

One of the most important steps to take when securing your firewall is to ensure logins to the device are protected. Given that all WatchGuard firewalls use the same default credentials, it is imperative that these be updated on every device before it is deployed.

, ,

Restore a Firewall’s Backup during Firmware Downgrade

, ,
Restore a Firewall’s Backup during Firmware Downgrade

WatchGuard’s process for restoring a backup has changed in the last few years, making rolling back a simpler process. Being able to restore a backup is important if you are running into an issue potentially related to a firmware upgrade.

, ,

Controlling SSLVPN Traffic

, ,
Controlling SSLVPN Traffic

In order to best secure your SSLVPN, it is recommended that you first reconfigure the default policy that is created.  You will be able to control the user’s access based on the authentication group or account they are connected to the VPN with.

,

Cloud Visibility Reporting and Alerts

,

Cloud Visibility has recently added new features, including the ability to send email alerts.  When configuring Cloud Visibility for your firewall, scheduling email alerts and recurring reports can help you stay aware of important events happening on your network.

(888) 897-9680

Charlotte, NC - HQ • Columbia, SC • Raleigh, NC • Kansas City, MO • Philadelphia, PA