Watchguard XTM21 - PPTP Passthrough

Posted on 2011-10-19
Last Modified: 2013-11-16
Hi all,

Watchguard XTM21 Firewall, we've confugured PPTP 1723 and GRE 47 to route through to our SBS server on and when I try to vpn into it from an xp client, I get denied according to the watchguard logs.

I have forwarded smtp 25 to the server no problem. Is there a passthrough option I need to enable for PPTP?

I can vpn into the sbs server locally without a problem.
Question by:unrealone1
    LVL 32

    Accepted Solution

    Assuming that your PPTP server is fully functional and it is WG which is preventing traffic [as evident from your post that you see denies in WG logs].

    Use the predefined PPTP policy and also configure 1-1 NAT instead of using static NAT.
    For 1-1 NAT you MUST have additional public IP other than the external interface IP. Please note that if you only have one additional IP and are using the additional IP for static NAT [where you can forward multiple port/protocol combination to different internal hosts], then you would need to remove static NAT and only configure 1-1 NAT [where the connection from specific IP would only go to single internal host].

    From the PPTP clients connect to this additional public IP for establishing the tunnels.

    Please check and update.

    Thank you.
    LVL 1

    Author Closing Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Suggested Solutions

    Hi All,  Recently I have installed and configured a Sonicwall NS220 in the network as a firewall and Internet access gateway. All was working fine until users started reporting that they cannot use the Cisco VPN client to connect to the customer'…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now