FireCloud Network Access: Now Available
FireCloud Network Access is now generally available. You can add an entire internal network or subnet to FireCloud as a single network resource. Users can then reach the hosts in it without a separate private resource for each one.
Why network resources
Moving from a traditional SSL VPN model to a full zero-trust architecture is not a simple switch. Many customers still rely on legacy applications, foundational network access patterns, and operational processes that are not yet ready for app-by-app zero-trust enforcement.
With FireCloud Network Access, you can reduce reliance on broad VPN access today while creating a practical migration path toward a broader zero-trust architecture over time. Your network resources can now be assigned to access rules for specific user groups.
If you already use FireCloud private resources
Network resources work alongside your private resources with the same gateways and access rules. Users connect with the same FireCloud Connection Manager they have today. Their traffic passes through a FireCloud point of presence (PoP), where TLS inspection and security services can be applied.
How it works
- Make sure the gateway is up to date: the latest Virtual Gateway or the latest Fireware on a Firebox Gateway.
- In WatchGuard Cloud, go to Configure > FireCloud > Resources and click Add Resource. Select the gateway and enter the address range, for example 10.10.10.0/24. If users reach hosts by name, add the internal DNS server.
- Add the network resource to an access rule for the user groups that need it.
What you need to know
- Gateways: Network resources run on a Virtual Gateway or a Firebox Gateway, not on the Server Gateway.
- Ranges and rules: Network resources support private ranges (RFC 1918), and each access rule can include one network resource.
- Private resources: A network resource covers the subnet. To control access by port or protocol, or when a customer has overlapping internal networks, your access can be configured by adding individual private resources.
Have Questions?
Refer to the FireCloud release notes and the Add Resources in FireCloud page in the Help Center for configuration details. For questions, contact your WatchGuard Account Manager or use standard support channels.