Install the WebBlocker Server on Hyper-V

The WebBlocker Server is distributed as a VHD file for installation on Hyper-V for Microsoft Windows Server and Hyper-V Server. WatchGuard recommends that you use the Microsoft Server Hyper-V Manager to install your WebBlocker Server virtual machine (VM), but you can use another Hyper-V environment.

For information about Hyper-V for Microsoft Windows Server and Hyper-V Server system requirements, see the Operating System Requirements page of the WebBlocker Server Release Notes.

To install WebBlocker Server on Hyper-V, you must complete these steps:

  1. Deploy the WebBlocker Server VM.
  2. Add a data disk (SCSI or IDE) to use as the WebBlocker Server data disk.
  3. Start the WebBlocker Server VM.
  4. Run the web-based WebBlocker Server Setup Wizard to configure the basic settings for your new WebBlocker Server.

Before You Begin

Before you can install the WebBlocker Server VHD file and set up your WebBlocker Server VM:

  • Install Hyper-V on a server where you can deploy your WebBlocker Server VM.
  • Download the WebBlocker Server VHD file to install WebBlocker Server on your Hyper-V server.
    On the WatchGuard Software Downloads page, click Firebox and XTM, click WebBlocker Server, download the watchguard-webblocker_[version]_vhd.zip file and extract the watchguard-webblocker_[version].vhd file.
  • If you want to use a DHCP server to get the initial IP address for the WebBlocker Server, you must have a DHCP server configured in the network you choose for the WebBlocker Server virtual machine. You can also manually set a static IP address for the WebBlocker Server.

Install the WebBlocker Server VM

When you install the WebBlocker Server VM, you must allocate the minimum amount of start-up memory for the WebBlocker Server. Dynamic memory allocation is not supported.

To deploy the WebBlocker Server VM:

  1. On your Windows server, open Hyper-V Manager.
  2. In the Hyper-V Manager navigation pane, right-click your Hyper-V server and select New > Virtual Machine.
    The New Virtual Machine wizard opens, with the Before You Begin page selected.
  3. Read the instructions for the wizard and click Next.
    The Specify Name and Location page opens.
  4. In the Name text box, type a descriptive name for this WebBlocker Server.
  5. To store the virtual machine in a folder other than the default folder, select the Store the virtual machine in a different location check box. Click Browse and select the location to store the virtual machine.
  6. Click Next.
    The Specify Generation page opens.
  7. On the Specify Generation page, select Generation 1. Click Next.
    The Assign Memory page opens.
  8. In the Startup memory text box, type the amount of memory to allocate to your WebBlocker Server VM. You must allocate a minimum of 2048 MB. Click Next.
    The Configure Networking page opens.
  9. From the Connection drop-down list, select the virtual network adapter to use for the external interface, Eth0. Click Next.
    The Connect Virtual Hard Disk page opens.
  10. Select Use an existing virtual hard disk.
  11. Click Browse and select the location where you saved the WebBlocker Server VHD file.
  12. Click Next.
    The Summary page opens.
  13. Review the settings you specified for this instance of WebBlocker Server. Click Finish.
    The WebBlocker Server VM shows in the Virtual Machines list.

Add a Hard Disk to the WebBlocker Server VM

After you have deployed your WebBlocker Server VM, you must add a new virtual hard disk to the VM for the WebBlocker Server database. You can add either an IDE or an SCSI virtual hard drive.

If you choose to add an SCSI virtual hard drive, for the most flexibility, make sure to add a dynamically expanding hard disk.

  1. From the Virtual Machines list, right-click your WebBlocker Server VM and select Settings.
    The Settings page for your WebBlocker Server VM opens.
  2. Select Add Hardware > SCSI Controller and click Add.
    The SCSI Controller page opens.
  3. Select Hard Drive and click Add.
    The Hard Drive page opens.
  4. In the Media section, select Virtual hard disk and click New.
    The New Virtual Hard Disk Wizard opens, with the Before You Begin page selected.
  5. Read the instructions for the wizard and click Next.
    The Choose Disk Format page opens.
  6. Select VHDX. Click Next.
    The Choose Disk Type page opens.
  7. Select Dynamically expanding. Click Next.
    The Specify Name and Location page opens.
  8. In the Name text box, type a descriptive name for this virtual hard disk.
  9. To specify a location for the hard disk other than the default location, click Browse and select a location.
  10. Click Next.
    The Configure Disk Size page opens.
  11. Select Create a new blank virtual hard disk.
  12. In the text box, type the size for the virtual hard disk in GB.
    Specify a minimum of 40 GB.
  13. Click Next.
    The Summary page opens.
  14. Review the settings you specified for the hard disk. Click Finish.
    The wizard completes and the Hard Drive page in the WebBlocker Server VM Settings opens.
  15. Click OK.
    The Settings dialog box closes.
  1. From the Virtual Machines list, right-click your WebBlocker Server VM and select Settings.
    The Settings page for your WebBlocker Server VM opens.
  2. Select Hardware > IDE Controller 0 and click Add.
    The IDE Controller page opens.
  3. From the IDE Controller 0 list, select Hard Drive and click Add.
    The Hard Drive page opens.
  4. Select Virtual hard disk and click New.
    The New Virtual Hard Disk Wizard opens, with the Before You Begin page selected.
  5. Read the instructions for the wizard and click Next.
    The Choose Disk Format page opens.
  6. Select VHD or VHDX. Click Next.
    If you select VHDX, the installation process might take longer to complete than if you select VHD. The Choose Disk Type page opens.
  7. Select Dynamically expanding. Click Next.
    The Specify Name and Location page opens.
  8. In the Name text box, type a descriptive name for this virtual hard disk.
  9. To specify a location for the hard disk other than the default location, click Browse and select a location.
  10. Click Next.
    The Configure Disk Size page opens.
  11. Select Create a new blank virtual hard disk.
  12. In the text box, type the size for the virtual hard disk in GB.
    Specify a minimum of 40 GB.
  13. Click Next.
    The Summary page opens.
  14. Review the settings you specified for the hard disk. Click Finish.
    The wizard completes and the Hard Drive page in the WebBlocker Server VM Settings opens.
  15. Click OK.
    The Settings dialog box closes.

Start the WebBlocker Server VM

After you add a virtual hard disk, you can start the WebBlocker Server VM.

  1. From the Virtual Machines list, select your WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Start.
    The WebBlocker Server VM starts.

Find the External IP Address

If the external network has a DHCP server, the WebBlocker Server external interface is automatically assigned an IP address. This is the IP address you use to connect to WebBlocker Server and run the Setup Wizard.

To use the command line to find the IP address for WebBlocker Server:

  1. From the Virtual Machines list, select the WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Connect.
  3. At the login prompt, type wgsupport. Press Enter.
  4. At the passphrase prompt, type readwrite. Press Enter.
    This is the default admin account passphrase. A prompt to change the password opens.
  5. Type the current passphrase (readwrite) for the wgsupport account.
  6. Type the new passphrase to use for the wgsupport account. Press Enter.
  7. Retype the new passphrase. Press Enter.
    The passphrase is changed and WebBlocker Server system information opens.
  8. To show the IP address for the external interface, type ifconfig or ip addr. Press Enter.
    The IP address for the external interface opens.
  9. To log out, type exit. Press Enter.

Set a Static IP Address for the WebBlocker Server

If you do not have a DHCP server, you must set a static IP address for the WebBlocker Server external interface. This is the IP address you use to connect to WebBlocker Server and run the Setup Wizard. To set a static IP address you make a console connection to the WebBlocker Server with the wgsupport credentials and specify the IP address for the Eth0 interface.

The first time you make a console connection to WebBlocker Server, you must change the default password for the wgsupport user.

The command tool that you use to change the IP address is in the /opt/watchguard/webblocker/bin directory. To change the IP address, you must specify this directory, run the wg_ip_addr.sh command, and type the new IP address and default gateway for the interface.

To make a console connection to WebBlocker Server and configure a static IP address:

  1. From the Virtual Machines list, select the WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Connect.
  3. At the login prompt, type wgsupport. Press Enter.
  4. At the passphrase prompt, type readwrite. Press Enter.
    This is the default admin account passphrase. A prompt to change the password opens.
  5. Type the current passphrase (readwrite) for the wgsupport account.
  6. Type the new passphrase to use for the wgsupport account. Press Enter.
  7. Retype the new passphrase. Press Enter.
    The passphrase is changed and WebBlocker Server system information opens.
  8. To set the static IP address for WebBlocker Server, at the command line, type:

/opt/watchguard/webblocker/bin/wg_ip_addr.sh -i <IP address> -m <mask> -g <gateway>

For example, to configure WebBlocker Server with a static IP address of 203.0.113.201/24 and a gateway of 203.0.113.1, type:

/opt/watchguard/webblocker/bin/wg_ip_addr.sh -i 203.0.113.201 -m 24 -g 203.0.113.1

  1. Press Enter.

For more information about console connections to WebBlocker Server, go to Console Access to the WebBlocker Server.

Run the WatchGuard WebBlocker Server Setup Wizard

After your WebBlocker Server VM is set up and powered on, you can connect to the WebBlocker Server, run the Setup Wizard, and complete the initial configuration. For more information, go to Run the WebBlocker Server Setup Wizard.

Related Topics

Install the WebBlocker Server on VMware