Contents

Install the WebBlocker Server on Hyper-V

The WebBlocker Server is distributed as a VHD file for installation on Hyper-V for Microsoft Windows Server 2008 R2, 2012, or 2012 R2 (64-bit required). WatchGuard recommends that you use the Microsoft Server Hyper-V Manager to install your WebBlocker Server virtual machine (VM), but you can use another Hyper-V environment.

To install WebBlocker Server on Hyper-V, you must complete these steps:

  1. Deploy the WebBlocker Server VM.
  2. Add a data disk (SCSI or IDE) to use as the WebBlocker Server data disk.
  3. Start the WebBlocker Server VM.
  4. Run the web-based WebBlocker Server Setup Wizard to configure the basic settings for your new WebBlocker Server.

Before You Begin

Before you can install the WebBlocker Server VHD file and set up your WebBlocker Server VM:

  • Install Hyper-V on a server where you can deploy your WebBlocker Server VM.
  • Download the WebBlocker Server VHD file to install WebBlocker Server on your Hyper-V server.
    From the WatchGuard Software Downloads page, download the watchguard-webblocker_[version]_vhd.zip file and extract the watchguard-webblocker_[version].vhd file.
  • If you want to use a DHCP server to get the initial IP address for the WebBlocker Server, you must have a DHCP server configured in the network you choose for the WebBlocker Server virtual machine. You can also manually set a static IP address for the WebBlocker Server.

Install the WebBlocker Server VM

When you install the WebBlocker Server VM, you must allocate the minimum amount of start-up memory for the WebBlocker Server. Dynamic memory allocation is not supported.

To deploy the WebBlocker Server VM:

  1. On your Windows server, open Hyper-V Manager.
  2. In the Hyper-V Manager navigation pane, right-click your Hyper-V server and select New > Virtual Machine.
    The New Virtual Machine wizard appears, with the Before You Begin page selected.
  3. Read the instructions for the wizard and click Next.
    The Specify Name and Location page appears.
  4. In the Name text box, type a descriptive name for this WebBlocker Server.
  5. To store the virtual machine in a folder other than the default folder, select the Store the virtual machine in a different location check box. Click Browse and select the location to store the virtual machine.
  6. Click Next.
    For Server 2012 R2 , the Specify Generation page appears.
  7. (2012 R2) On the Specify Generation page, select Generation 1. Click Next.
    The Assign Memory page appears.
  8. In the Startup memory text box, type the amount of memory to allocate to your WebBlocker Server VM. You must allocate a minimum of 2048 MB. Click Next.
    The Configure Networking page appears.
  9. From the Connection drop-down list, select the virtual network adapter to use for the external interface, Eth0. Click Next.
    The Connect Virtual Hard Disk page appears.
  10. Select Use an existing virtual hard disk.
  11. Click Browse and select the location where you saved the WebBlocker Server VHD file.
  12. Click Next.
    The Summary page appears.
  13. Review the settings you specified for this instance of WebBlocker Server. Click Finish.
    The WebBlocker Server VM appears in the Virtual Machines list.

Add a Hard Disk to the WebBlocker Server VM

After you have deployed your WebBlocker Server VM, you must add a new virtual hard disk to the VM for the WebBlocker Server database. You can add either an IDE or an SCSI virtual hard drive.

Start the WebBlocker Server VM

After you add a virtual hard disk, you can start the WebBlocker Server VM.

  1. From the Virtual Machines list, select your WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Start.
    The WebBlocker Server VM starts.

Find the External IP Address

If the external network has a DHCP server, the WebBlocker Server external interface is automatically assigned an IP address. This is the IP address you use to connect to WebBlocker Server and run the Setup Wizard.

To use the command line to find the IP address for WebBlocker Server:

  1. From the Virtual Machines list, select the WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Connect.
  3. At the login prompt, type wgsupport. Press Enter.
  4. At the passphrase prompt, type readwrite. Press Enter.
    This is the default admin account passphrase. A prompt to change the password appears.
  5. Type the current passphrase (readwrite) for the wgsupport account.
  6. Type the new passphrase to use for the wgsupport account. Press Enter.
  7. Retype the new passphrase. Press Enter.
    The passphrase is changed and WebBlocker Server system information appears.
  8. To show the IP address for the external interface, type ifconfig or ip addr. Press Enter.
    The IP address for the external interface appears.
  9. To log out, type exit. Press Enter.

Set a Static IP Address for the WebBlocker Server

If you do not have a DHCP server, you must set a static IP address for the WebBlocker Server external interface. This is the IP address you use to connect to WebBlocker Server and run the Setup Wizard. To set a static IP address you make a console connection to the WebBlocker Server with the wgsupport credentials and specify the IP address for the Eth0 interface.

The first time you make a console connection to WebBlocker Server, you must change the default password for the wgsupport user.

The command tool that you use to change the IP address is in the /opt/watchguard/webblocker/bin directory. To change the IP address, you must specify this directory, run the wg_ip_addr.sh command, and type the new IP address and default gateway for the interface.

To make a console connection to WebBlocker Server and configure a static IP address:

  1. From the Virtual Machines list, select the WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Connect.
  3. At the login prompt, type wgsupport. Press Enter.
  4. At the passphrase prompt, type readwrite. Press Enter.
    This is the default admin account passphrase. A prompt to change the password appears.
  5. Type the current passphrase (readwrite) for the wgsupport account.
  6. Type the new passphrase to use for the wgsupport account. Press Enter.
  7. Retype the new passphrase. Press Enter.
    The passphrase is changed and WebBlocker Server system information appears.
  8. To set the static IP address for WebBlocker Server, at the command line, type:

/opt/watchguard/webblocker/bin/wg_ip_addr.sh -i <IP address> -m <mask> -g <gateway>

For example, to configure WebBlocker Server with a static IP address of 203.0.113.201/24 and a gateway of 203.0.113.1, type:

/opt/watchguard/webblocker/bin/wg_ip_addr.sh -i 203.0.113.201 -m 24 -g 203.0.113.1

  1. Press Enter.

For more information about console connections to WebBlocker Server, see Console Access to the WebBlocker Server.

Run the WatchGuard WebBlocker Server Setup Wizard

After your WebBlocker Server VM is set up and powered on, you can connect to the WebBlocker Server, run the Setup Wizard, and complete the initial configuration. For more information, see Run the WebBlocker Server Setup Wizard.

See Also

Install the WebBlocker Server on VMware

Give Us Feedback  ●   Get Support  ●   All Product Documentation  ●   Technical Search