Add a FireCluster to WatchGuard Cloud
Applies To: Locally-managed Fireboxes
To enable WatchGuard Cloud on a FireCluster, you add both Fireboxes to your WatchGuard Cloud account as a cluster.
Before You Begin
Make sure the FireCluster has a license for Total Security Suite or Basic Security Suite.
- For an active/active cluster, both members must have a license
- For an active/passive cluster, only one member must have a license
Fireboxes activated by a Service Provider appear in the Service Provider inventory in WatchGuard Cloud. Before you can add a Firebox or FireCluster to WatchGuard Cloud you must allocate the device to the Subscriber account. For more information, see Firebox Allocation.
Make sure your FireCluster runs Fireware v12.4 or higher. If necessary, upgrade your FireCluster before you add it to WatchGuard Cloud.
For an active/passive FireCluster, make sure that you know the device serial numbers. To add the second member of an active/passive FireCluster, you must specify the serial number of the second member.
Make sure you have administrative access to the FireCluster. To enable WatchGuard Cloud on the FireCluster you must copy a Verification Code from your WatchGuard Cloud account and use Policy Manager or Fireware Web UI to paste it into the configuration of the FireCluster.
Add a FireCluster
To add a FireCluster to WatchGuard Cloud:
- Log in to your WatchGuard Cloud Subscriber account.
- Click Add Device.
A list of activated devices appears.
- Click Add FireCluster.
- Select the Name of the first cluster member from the list.
- Specify the second cluster member.Tip!
- For an active/active FireCluster, select the second member from the list.
- For an active/passive FireCluster, type the serial number of the second member.
- Click Add FireCluster.
The Verification Code page opens.
- To copy the Verification Code, click Copy Code.
- Open the FireCluster configuration in Policy Manager or Fireware Web UI and paste the Verification Code to enable WatchGuard Cloud. For more information, see Enable WatchGuard Cloud on the FireCluster.
- Click Done.
The FireCluster is added to the list of devices.
Enable WatchGuard Cloud on the FireCluster
To connect a locally managed Firebox or FireCluster to WatchGuard Cloud, you must open the Firebox configuration in Policy Manager or Fireware Web UI and enable WatchGuard Cloud.

- Open the device configuration in Fireware Web UI.
- Select System > WatchGuard Cloud.
- Select the Enable WatchGuard Cloud check box.
If your Firebox requires a Verification Code to register with WatchGuard Cloud, the Verification Code text box appears.
- If required, in the Verification Code text box, paste the Verification Code you copied from WatchGuard Cloud.
In Fireware v12.5.3 and higher, the Verification Code is required only for Firebox T10, T30, T50, T70, M200, M300, M400, M500, M440, M4600, and M5600, and for any active/passive FireCluster. If the Firebox does not require a Verification Code to register, the Verification Code text box does not appear and you do not have to paste the code.
- Click Save.
The Firebox connects to WatchGuard Cloud to register. After successful registration, the WatchGuard Cloud Registration Status updates to Registered.

- Open the device configuration in Policy Manager.
- Select Setup > WatchGuard Cloud.
- Select the Enable WatchGuard Cloud check box.
- Click OK.
- Select File > Save > To Firebox.
- Type the Administrator Passphrase.
If the Firebox requires a Verification Code to register with WatchGuard Cloud, the Register Firebox dialog box opens.
- If required, in the Verification Code text box, paste the Verification Code you copied from WatchGuard Cloud.
In Fireware v12.5.3 and higher, the Verification Code is required only for Firebox T10, T30, T50, T70, M200, M300, M400, M500, M440, M4600, and M5600, or for any active/passive FireCluster. If the Firebox does not require a Verification Code to register, the Register Firebox dialog box does not appear and you do not have to paste the code.
- Click OK.
Verify the FireCluster Connection to WatchGuard Cloud
After you enable WatchGuard Cloud on a Firebox, verify the FireCluster status in WatchGuard Cloud.
To see device connection status from WatchGuard Cloud:
- Log in to your WatchGuard Cloud Subscriber account.
- Select Monitor > Devices.
- Select the FireCluster.
The Device Summary shows the connection status of both cluster members.
The expected status of cluster members depends on the cluster type:
Active/Passive FireCluster
Only the cluster master connects to WatchGuard Cloud. The status of the cluster master is Connected. The status of the backup master is Never Connected or Not Connected.
Active/Active FireCluster
Both cluster members connect to WatchGuard Cloud. The status of both members is Connected.
On the Device Summary page, other status information for cluster members is the same as for a non-clustered Firebox. For more information, see WatchGuard Cloud Device Summary.
For information about how to see the WatchGuard Cloud status on the FireCluster, seeWatchGuard Cloud Status on the Firebox.