Monitor Networks on Fireboxes and FireClusters

Applies To: Cloud-managed Fireboxes, Locally-managed Fireboxes

On the Networks page, you can view the network list, ARP table, DHCP leases, and the routes that are configured on your Firebox.

This page is only available when your cloud-managed Firebox, or locally-managed Firebox with cloud reporting, is connected to WatchGuard Cloud.

To monitor networks on cloud-managed Fireboxes and locally-managed Fireboxes with cloud reporting:

  1. Select Monitor > Devices.
  2. Select a Firebox.
    The Device Summary page for the selected Firebox opens.
  3. Select Live Status > Networks.
    The Networks page opens. The page refreshes automatically every 30 seconds.

Screen shot of WatchGuard Cloud, Live Status, Networks


The Networks tab displays an overview of each network, including this information:


The name of the network. To view network details, click the name. For more information, see Network Details.


The type of network (for example, Internal, External, or Guest).


The Firebox interface that enables the network connection.


The number of devices on the network.


The SSID name if wireless is enabled for the network, or the column is empty if it is disabled.

Address Resolution Protocol Requests

Address Resolution Protocol (ARP) is a protocol that associates the IP address with the MAC address of a network device.

Screen shot of WatchGuard Cloud Live Status Networks, ARP tab

The ARP tab displays this information about the devices that have responded to an ARP request from the Firebox:

IP Address

The IP address of the computer that responds to the ARP request.

HW Type

The type of Ethernet connection that the IP address uses to connect.


If the hardware address of the IP resolves, it is marked as a complete ARP entry (0×2 ) or a complete static ARP entry (0×6). If the ARP entry is incomplete, the flag displays 0×0.

MAC Address

The MAC address of the network interface card that is associated with the IP address.


The interface on the Firebox where the hardware address for that IP address was found.

DHCP Leases

A DHCP lease is a temporary assignment of an IP address to a device on the network.

Screen shot of WatchGuard Cloud, Live Status, Networks DHCP

The DHCP tab displays this information about the DHCP client leases for the Firebox:


The Firebox interface that the client is connected to.

IP Address

The IP address for the lease.


The host name. If there is not an available host name, this is empty.

MAC Address

The MAC address of the network interface card that is associated with the IP address.


The time when the client requested the lease.


The time when the lease expires.

Configured Routes

On the Routes tab, you can monitor the routes configured on your Firebox.

Screen shot of WatchGuard Cloud, Live Status, Networks Routes


The destination IP address for the route.


The interface to which packets for this route will be sent (for example eth0 for interface 0).


For an IPv4 route, the IP address of the gateway the route uses.


The flags set for each route. Some of the more common flags include:

  • U indicates a route that is up
  • H indicates a route to a host
  • G indicates an IPv4 route that uses an external gateway or an IPv6 route that uses the next hop


The routing metric, or cost for the route. A lower number indicates a lower cost, and higher route priority.

See Also

Add a Cloud-Managed Firebox to WatchGuard Cloud

Firebox Default Networks

Configure Firebox Network DHCP Settings

Configure Firebox Routes

Add a Locally-Managed Firebox to WatchGuard Cloud

Add a Device to WatchGuard Cloud

Firebox Management in WatchGuard Cloud