Skip to content
CityNA's profile

New Contributor

 • 

2 Messages

Friday, September 13th, 2013 10:00 AM

Port traffic being blocked?

My setup is I have Comcast Business Class at two remote sites.  Passthrough is enabled on the Comcast gateway and behind that I have a Watchguard XTM device at each location. 

 

In order to access the XTM device remotely under certain circumstances I need to get traffic through on ports 4105, 4117 and 4118 which currently isn't happening. 

 

My first thoughts is these ports are being blocked.  I contacted Comcast Technical Support and other than pointing me to a link on the help site to a list of the only ports they claim to be blocking they were of no help.  Basically got the standard "the problem isn't on our end" which as we all know is the common response when someone has a) no idea what you are talking about or b) no desire to help with the situation.

 

Anyway, curious if anyone has any clues or suggestions?  Maybe it's a setting on the gateway?  Doesn't seem to me I should need to setup port forwarding if the gateway is enabled for passthrough. 

Accepted Solution

Retired Employee

 • 

1.9K Messages

11 years ago

Welcome CityNA.  Our Tier 2 group verified the gateway setup & checked the listed ports. The listed ports are not blocked in the gateway.  Since there is a static assigned to your Watchguard all inbound traffic destined for your network will be routed to the Watchguard. Remote access via IP: xxx.xxx.xxx.105 ports 4105,4117-4118 are passed directly to the CPE device  For your set-up port forwarding thru the gateway is not needed as the static IP provides a direct route to the Watchguard.  Also here is a link to the blocked ports on the Comcast network. 

 

Thank You

New Contributor

 • 

2 Messages

11 years ago

Thanks for the explanation.  That makes perfect sense and it appears we may have something at the Watchguard that is somehow preventing access. 

 

If you will allow some feedback about service:

 

I appreciate the explanation.  It would be better if Tier 1 wasn't so quick to say "it's not on our end" and try to end the call.  I made the call at the request of Watchguard support who are obviously SME's on this equipment and this was the problem they were experiencing.

 

Thank you for your time.