About FireCloud Virtual Gateways

Applies To: FireCloud Total Access

With FireCloud Total Access, you can set up a FireCloud Virtual Gateway to give users access to local resources on the company network without a VPN.

To do this, you must:

  • Install a FireCloud Gateway on your network (the Gateway establishes a connection between FireCloud and your network).
  • Configure a private resource for each local resource that you want to allow remote FireCloud users to have access to on your network, such as a printer or an SMB share.
  • Add your private resources to FireCloud access rules to give users access to those resources.

When you deploy a FireCloud Gateway, you must have ports TCP 443 and UDP 4501 open for the Gateway to connect to FireCloud. The Gateway uses port 443 to authenticate to FireCloud and port 4501 to establish the tunnel that FireCloud uses to connect users to the private resources behind the Gateway.

You can install FireCloud Virtual gateways on Hyper-V, VMware, and Proxmox hypervisors.

Configure a Virtual Gateway

To configure a FireCloud Virtual Gateway

  1. Log in to WatchGuard Cloud.
  2. From the navigation menu, select Configure > FireCloud. If you have a Service Provider account, you must select an account from Account Manager.
  3. On the Configuration page, click the Private Resources widget.
  4. Click Add FireCloud Gateway.
  5. Select Virtual Gateway.
  6. Click Next.
  7. Enter a Name for your Gateway.
  8. For IP Address Configuration, select whether you want to give the Gateway a static or DHCP IP address.
  9. If you use a static IP address:
    1. In the Network IP Address text box, enter the static IP address that you will assign the FireCloud Gateway.
    2. In the Network Gateway text box, enter the IP address of the default gateway for your network.
    3. Enter the IP address of a DNS Server, such as the public Google DNS server 8.8.8.8.
  10. Click Next.
  11. Select the type of environment you want to deploy the FireCloud Gateway on, either Hyper-V, VMware ESXi, or Proxmox.

    For Hyper-V, FireCloud supports only Hyper-V generation 1 virtual machines.

  12. Click Next.
  13. Click Download Gateway Files. When the download completes, extract the files from the downloaded .zip folder. You will have a .ISO file and either an .OVA file (ESXi and Proxmox) or a .VHDX file (Hyper-V).
  14. Complete the steps to deploy the FireCloud Gateway in your selected environment. Leave the WatchGuard Cloud tab open so that you can test the connection to the Gateway after setup.

Deploy a FireCloud Virtual Gateway on Hyper-V

To deploy a FireCloud Virtual Gateway on Hyper-V:

  1. Log in to the Hyper-V server.
  2. Open the Hyper-V console.
  3. Select New > Virtual Machine.
    The New Virtual Machine Wizard opens.
  4. Name the virtual machine. Click Next.
  5. Select Generation 1. Click Next.
  6. Assign memory to the machine. We recommend at least 512 MB.
  7. Click Next.
  8. For Configure Networking, from the Connection drop-down list, select your network adapter that provides Internet access to your virtual machine. Click Next.
  9. For Connect Virtual Hard Disk, select Use an existing virtual hard disk.
  10. Click Browse and select the hard disk image file (.VHDX) you downloaded.
  11. Click Next.
  12. Click Finish.
  13. After the virtual machine is created, right click the virtual machine and select Settings.
  14. For Hardware, select the DVD Drive.
  15. For the DVD drive media, select Image file.
  16. Click Browse and select the image file (.ISO) you downloaded.
  17. Click Apply, then click OK.
  18. Power up the virtual gateway from the mounted .ISO file (this is the DVD drive you added).
  19. In WatchGuard Cloud, click Test Connection to make sure that the FireCloud Gateway can connect to WatchGuard Cloud.
  20. Click Finish.
  21. After you deploy the FireCloud Gateway, the next step is to configure the private resources that you want to give remote users access to. For detailed steps to configure private resources, go to Add Private Resources in FireCloud.

Deploy a FireCloud Virtual Gateway on ESXi

To deploy a FireCloud Virtual Gateway on ESXi:

  1. In a new browser tab, go to https://ESXi_Host/UI and connect to the VMware host client. Replace ESXi_Host with the FQDN or IP address of your ESXi host.
  2. Upload the .ISO file to the data store.
  3. Create and deploy a virtual machine from the downloaded .OVA file.
  4. Edit the settings for your virtual machine and add a CD/DVD drive device.
  5. Associate the CD/DVD drive you added with the .ISO file you uploaded to the data store.
  6. Power on the virtual machine from the mounted .ISO file (this is the CD/DVD drive you added). Wait for the Gateway to install and connect to FireCloud.
  7. In WatchGuard Cloud, click Test Connection to make sure that the FireCloud Gateway can connect to WatchGuard Cloud.
  8. Click Finish.
  9. After you deploy the FireCloud Gateway, the next step is to configure the private resources that you want to give remote users access to. For detailed steps to configure private resources, go to Add Private Resources in FireCloud.

Deploy a FireCloud Virtual Gateway on Proxmox

To deploy a FireCloud Virtual Gateway on Proxmox:

  1. Connect to ProxMox.
  2. Go to Datacenter > Storage.
  3. Select Local and click Edit.
    The Edit Directory window opens.
  4. From the Content drop-down list, select Disk Image and Import.
  5. Click OK.
  6. For your server, go to local > Import. This is local, not local-vm.
  7. Click Upload and select the Virtual Gateway file.
  8. In ProxMox, double-click the Virtual Gateway file.
  9. Click Import.
  10. For your server, go to local > ISO images. This is local, not local-vm.
  11. Click Upload and select the .ISO image for the Virtual Gateway.
  12. Select the Virtual Gateway and go to Hardware.
  13. Click Add > CD/DVD Drive.
    The Add window opens.
  14. Select Use CD/DVD disc image file (iso).
  15. From the Storage drop-down list, select local.
  16. From the ISO image drop-down list, select the Virtual Gateway .ISO file that you uploaded.
  17. Click Add.
  18. Power on the Virtual Gateway.

Related Topics

About FireCloud Gateways

Add Private Resources in FireCloud