Contents

Install the WebBlocker Server on VMware

The WebBlocker Server is distributed as an OVA file for installation on VMware ESXi 5.x–6.x (64-bit required). WatchGuard recommends that you use the VMware vSphere Client to provision and install the OVA file.

Before You Begin

Before you can deploy the WebBlocker Server OVA file and set up your WebBlocker Server VM:

  • Configure an ESXi host where you can deploy your WebBlocker Server VM.
  • Download the WebBlocker Server OVA file to install WebBlocker Server on your ESXi host.
    From the WatchGuard Software Downloads page, download the watchguard-webblocker_[version].ova file.
  • If you want to use a DHCP server to get the initial IP address for WebBlocker Server, you must have a DHCP server configured in the network you choose for the WebBlocker Server virtual machine. You can also manually set a static IP address for the WebBlocker Server.

Install the WebBlocker Server Virtual Machine

To deploy the WebBlocker Server VM:

  1. Open VMware vSphere Client and connect to your ESXi host.
  2. Select File > Deploy OVF template.
  3. Browse to the location of the watchguard-webblocker_[version].ova file you downloaded from the Software Downloads page. Click Next.
  4. On the OVF Template Details page, click Next.
  5. Click Accept to accept the End User License Agreement. Click Next.
  6. In the Name text box, type a descriptive name for your WebBlocker Server VM. Click Next.
  7. Select an option for disk provisioning. Click Next.
    You can select any of the options to provision your disk, but WatchGuard recommends that you select Thick Provision Lazy Zeroed. This is the default option, provides more predictable performance, and enables the VM to increase the disk size as necessary.
  8. On the Network Mapping page, select the destination network for the virtual machine. Click Next.
    If you want to use DHCP to get the WebBlocker Server IP address, make sure you select a network with a DHCP server.
  9. Verify your settings and click Finish.
    Your new WebBlocker Server VM appears in the vSphere Client.

When you deploy the OVF template to install the WebBlocker Server VM, the template automatically configures the amount of system memory for the VM. If you manually change the system memory value in the VM settings, make sure to specify a value of 2GB or higher.

Find the External IP Address

If the external network has a DHCP server, the WebBlocker Server external interface is automatically assigned an IP address. This is the IP address you use to connect to WebBlocker Server and run the Setup Wizard.

To use the command line to find the IP address for WebBlocker Server:

  1. From the Virtual Machines list, select the WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Connect.
  3. At the login prompt, type wgsupport. Press Enter.
  4. At the passphrase prompt, type readwrite. Press Enter.
    This is the default admin account passphrase. A prompt to change the password appears.
  5. Type the current passphrase (readwrite) for the wgsupport account.
  6. Type the new passphrase to use for the wgsupport account. Press Enter.
  7. Retype the new passphrase. Press Enter.
    The passphrase is changed and WebBlocker Server system information appears.
  8. To show the IP address for the external interface, type ifconfig or ip addr. Press Enter.
    The IP address for the external interface appears.
  9. To log out, type exit. Press Enter.

Set a Static IP Address for the WebBlocker Server

If you do not have a DHCP server, you must set a static IP address for the WebBlocker Server external interface. This is the IP address you use to connect to WebBlocker Server and run the Setup Wizard. To set a static IP address you make a console connection to the WebBlocker Server with the wgsupport credentials and specify the IP address for the Eth0 interface.

The first time you make a console connection to WebBlocker Server, you must change the default password for the wgsupport user.

The command tool that you use to change the IP address is in the /opt/watchguard/webblocker/bin directory. To change the IP address, you must specify this directory, run the wg_ip_addr.sh command, and type the new IP address and default gateway for the interface.

To make a console connection to WebBlocker Server and configure a static IP address:

  1. From the Virtual Machines list, select the WebBlocker Server VM.
  2. Right-click the WebBlocker Server VM and select Connect.
  3. At the login prompt, type wgsupport. Press Enter.
  4. At the passphrase prompt, type readwrite. Press Enter.
    This is the default admin account passphrase. A prompt to change the password appears.
  5. Type the current passphrase (readwrite) for the wgsupport account.
  6. Type the new passphrase to use for the wgsupport account. Press Enter.
  7. Retype the new passphrase. Press Enter.
    The passphrase is changed and WebBlocker Server system information appears.
  8. To set the static IP address for WebBlocker Server, at the command line, type:

/opt/watchguard/webblocker/bin/wg_ip_addr.sh -i <IP address> -m <mask> -g <gateway>

For example, to configure WebBlocker Server with a static IP address of 203.0.113.201/24 and a gateway of 203.0.113.1, type:

/opt/watchguard/webblocker/bin/wg_ip_addr.sh -i 203.0.113.201 -m 24 -g 203.0.113.1

  1. Press Enter.

For more information about console connections to WebBlocker Server, see Console Access to the WebBlocker Server.

Run the WebBlocker Server Setup Wizard

After your WebBlocker Server VM is set up and powered on, you can connect to WebBlocker Server to run the Setup Wizard and complete the configuration. For more information, see Run the WebBlocker Server Setup Wizard.

See Also

Install the WebBlocker Server on Hyper-V

Give Us Feedback  ●   Get Support  ●   All Product Documentation  ●   Technical Search