<div>
There is no known incompatibility; can you provide more details as to if there is just one client connection from behind FBIII/1000 to FBX750e using PPTP; also what do the logs indicate at both boxes.<br />
With multiple outbound connections to the same VPN Server sometimes there can be problem due to NAT coming into picture, we use 1-1 NAT in such cases.<br />
<br />
On FBIII/1000 is there pre-configured Outgoing policy or specific policies to allow outbound access.<br />
<br />
Please provide more details.<br />
<br />
Thank you.
</div>


<div>
Actually there is a known compatibility with this model.<br />
<br />
From the watchguard rep:<br />
<br />
BUG17143: NATed PPTP client behind WFS FBX cannot connect to &nbsp;remote Fireware. BUG24180: Multiple outbound PPTP connections from behind WFS &nbsp;fails. <br />
<br />
<br />
It's really bizarre and only happens with certain devices. Like I can use PPTP, with multiple connections to different firewalls and multiple connection to the same firewall device without problems. But certain Cisco models and this particular model I get a problem. I guess there is a solution if I upgrade the fireware on this device, however this is an older firebox and no longer has live security, so that is out of the question. <br />
<br />
It's ridiculous. Anyways, I found somewhat of a solution, I used one of my global IPs to create a 1 to 1 NAT (not ideal to waste a global IP just so I can connect through PPTP to this offsite firewall) and it works. However, this only works for my one IP address. <br />
<br />
I would like to enable this for a range of REAL BASE IP addresses, this tutorial shows that you can do this, but I just cant seem to get it to work.<br />
<br />
<a href="http://watchguard.custhelp.com/cgi-bin/watchguard.cfg/php/enduser/std_adp.php?p_faqid=2016&p_created=1226959890" rel="ugc">http://watchguard.custhelp.com/cgi-bin/watchguard.cfg/php/enduser/std_adp.php?p_faqid=2016&p_created=1226959890</a><br />
<br />
I have the 1 to 1 Mapping in 1-to-1 NAT setup in the following way.<br />
<br />
interface : external<br />
number of hosts to NAT: 10<br />
NAT base 122.103.xx.xx<br />
real base 10.0.94.105<br />
<br />
<br />
and I have added the dynamic NAT exceptions for the range of <br />
10.0.94.105-10.0.94.115 to external<br />
<br />
If I attempt to connect to the 750e firewall's pptp vpn from my workstation with IP 10.0.94.105 it works fine. However if I try to connect from another engineer's workstation with an IP of 10.0.94.109 it doesn't work. What does &quot;number of hosts to NAT&quot; with a value of 10 mean. Doesn't this mean NAT the NAT base to the range of IP address of 10.0.94.105-10.0.94.115?<br />
<br />
If I can get this thing to work for the range that would be perfect. I need to allow multiple users to connect to this offsite firewall to help service that office. So I cannot just have it set to only 1 single internal IP. If that's the case, everytime a different user wants to connect to the VPN, they will have to change our master firewall real base IP address to theirs and reflash the firewall.<br />
<br />
any help would be greatly appreciated.<br />

</div>


<div>
Thank you for the update; if appears that bug17143 is for FBX model and not FBIII/1000 which you have.<br />
<br />
As the remote end is having FBX750e, you have option to use SSL and IPSec; have you tried these options.<br />
<br />
For 1-1 NAT, you are correct, when you say 10; then you should have 122.103.xx.y1-y10 addresses and 10.0.94.105-114 would get 1-1 NATted.<br />
If you try to access the internet from any machine 105 or higher you should 122.103.x.y [relevant IP]; if this works, then PPTP should also work.<br />
Can you check if the machines are actually getting 1-1 NATted by FBIII/1000.<br />
<br />
Please check and update.<br />
<br />
Thank you.
</div>


<div>
I totally misunderstood how 1to1 nat worked on watchguard. I thought it was able to do some amazing magic and line up one global IP to several internal IP addresses. I only have one free global IP to use, so this will not work when I put hosts of 10, as I only have one global IP to use. <br />
Yeah I am trying to configure teh firewall to run using SSL or IPSEc, having problems on those too. Wow, the new cisco device I just bought and configured had built in wizards for all the VPN settings, it took me a whole 3 minutes and no troubleshooting. Watchguard is proving to be more of a challenge.<br />
In regards to the bug, I wouldn't be surprised you are correct. The rep at watchguard that I always deal with is useless. I think she doesn't even know her own product. She is good for diagnosis purposes however, she says somethingi ridiculous stupid or incorrect and it gets me thinking from different angles and I am usually able to solve the problem. You are hands down the most helpful and knowledgeable person I know on this watchguard subject.<br />
&nbsp;<br />
Is PPTP a fading method for VPN? should I stop worrying about it and just configure it to use SSL and/or IPSEC?<br />

</div>


<div>
SSL is the most preferred method for VPN these days given the flexibility and less configuration overhead; however PPTP continues to be the choice of VPN for clients who do not want to install any third party software [which is the case with both PPTP and SSL], you can use Windows PPTP with the inbuilt network connect.<br />
Many vendors implement SSL with IPSec, so they all compliment each other.<br />
<br />
As you are running version 10.x you get wizards on WG as well to configure VPN [I usually do not use wizards on most products and prefer manually configuring options as this gives me more flexibility; a personal choice :)], though not sure how user friendly are the wizards.<br />
<br />
Please advice if you need help with configuring IPSec or SSL.<br />
<br />
Thank you.
</div>


<div>
Hello DPK WAL,<br />
<br />
Yes I would like help setting up the SSL VPN to see if this solves my problems. I am using 10.2 but I do not see any wizard for setting up SSL VPN, just the quick setup wizard which I believe just configures the device from an empty state. Cisco has a wizard to setup your VPN servers automatically, but I do not know where this is in the watchguard software? <br />
<br />
if you could help me get SSL working that would be great!<br />
<br />

</div>


<div>
<div class="content wysiwyg-content">
Hi Experts <br />
<br />
I am getting problem to connect VPN to one of my client. Recently I replace the watchguard X750e firewall to my client. I am using Firebox III/1000 WFS v7.5.0. There is no problem when I try to connect other clients using wtchguard,cisco and sonicwall. But I can't connect to Firebox X750e<br />
<br />
And there is no problem to connect &nbsp; X750e VPN from outside. It only gives problem when I tried to connect from &nbsp;Firebox III/1000 WFS v7.5.0. I test with Firebox X 5 edge there is no problem.<br />
do anybody have any idea what I have to configure on &nbsp;Firebox III/1000 WFS v7.5.0 to get connection with X750e VPN.<br />
<br />
Thanks <br />

</div>
</div>


Hi Experts 

I am getting problem to connect VPN to one of my client. Recently I replace the watchguard X750e firewall to my client. I am using Firebox III/1000 WFS v7.5.0. There is no problem when I try to connect other clients using wtchguard,cisco and sonicwall. But I can't connect to Firebox X750e

And there is no problem to connect   X750e VPN from outside. It only gives problem when I tried to connect from  Firebox III/1000 WFS v7.5.0. I test with Firebox X 5 edge there is no problem.
do anybody have any idea what I have to configure on  Firebox III/1000 WFS v7.5.0 to get connection with X750e VPN.

Thanks 


PPTP connection Problem

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.