Evil_TTL> show | s

WatchGuard GUI Quick Start Wizard

Category:WatchGuard -> XTM

Web Setup Wizard is automatically started by accessing the web page of a newly purchased WatchGuard firewall for the first time. To do so follow the connection diagram.


When done, make sure the computer is configured to use DHCP. Open a web browser and type

Login screen example:


The default password for admin is readwrite

On the next screen you can do one of two things:

  1. Create a new device configuration. Select this option to create a new configuration.
  2. Restore a backup image. Select this option to restore a backup image saved from this device. A backup image is an encrypted and saved copy of the image from the device. The backup image includes the device operating system, configuration file, licenses, and certificates.



Since I didn’t have any configuration files I chose the first one to start with.

By clicking next three options will appear to help you set the external interface IP address:

  • DHCP
  • PPPoE
  • Static


Select this option if your ISP assigns IP addresses through DHCP (Dynamic Host Configuration Protocol). DHCP is an Internet protocol that computers on a network use to get IP addresses and other information such as the default gateway.  When you connect to the Internet, a computer configured as a DHCP server automatically assigns you an IP address. It could be the same IP address you had before, or it could be a new one.

You can configure these options for DHCP:

Select Obtain an IP automatically if you want to use DHCP to assign an IP address to the device.

To manually assign an IP address to the external interface, and use DHCP just to give this assigned address to your device, select Use IP address. Type the IP address in the adjacent field.

IP addresses assigned by a DHCP server have a one-day lease by default, which means the IP address is valid for one day. To change the lease time, select the Leasing Time check box. Select the lease time from the adjacent drop-down list.

If your ISP or external DHCP server requires a client identifier, such as a MAC address, type this information in the Client text box.

To specify a host name for identification, type it in the Host Name text box.


Select this option if you want to assign the IP address through PPPoE (Point-to-Point Protocol over Ethernet). If the PPPoE server requires you to type a user name and passphrase to connect, make sure you type the user name and password in the wizard. PPPoE adds some of the features of Ethernet and PPP to a standard dial-up connection.

If you want to use PPPoE to assign the external interface IP address,  you must configure PPPoE connection and authentication settings.

Select Obtain an IP address automatically if your ISP assigns an IP address when you connect.

Select Use IP address if your ISP assigned you a permanent IP address. Type the IP address supplied by your Internet Service Provider in the adjacent text box.

Type the User Name and Password you use for PPPoE authentication. Frequently, ISPs use the email address format for user names, such as user@example.com.


Select this option if you want to assign a static IP address. A static IP address is an IP address that always stays the same. If you have a web server, FTP server, or other Internet resource that must have an address that cannot change, you can get a static IP address from your ISP. You must configure a static IP address manually. You must know your IP address information to complete the wizard.

A static IP address is an IP address that always stays the same. If your Internet Service Provider has assigned you a static IP address, they provide the necessary information for you to configure your external interface. 

IP Address
This is the permanent network address assigned to you by your ISP.

Subnet Mask
After the IP address, you must type or select the subnet mask. The subnet mask defines what subnet your network address belongs to. You must type the subnet mask in slash notation. This table below shows common subnet masks and their equivalents in slash notation.

This is the IP address of your Internet router or the gateway device at your ISP.

Network mask  Slash equivalent    

The whole process is mere next-next-finish type and not time consuming at all.

By privilege15