WatchGuard Firebox IKEv2/ISAKMP exploit attempt (CVE-2025-14733)

Arnold Chan@slaz

•updated Sep 12, 2026•0•0•2

Detects anomalous activity on WatchGuard Firebox VPN services, specifically monitoring for frequent daemon restarts or crashes (indicating potential RCE attempts) and high-volume bursts of IKE/ISAKMP negotiation failures (potentially indicating malformed packet attacks).