Solved

VPN to SBS2011 through Watchguard firewall

Posted on 2013-01-29
6
418 Views
Last Modified: 2014-10-21
Hi I have a  Watchguard XTM 2 Series HW model XP3e6 connected to an SBS2011 server and need to get a VPN connection to the SBS2011 domain. I have tried setting up the Watchgaurd mobile SSL VPN. But when I try to connect externally  it is like the watchguard is not answring on the IP address.
I have the RWW and outlook working ok.
I would prefer the watchgaurd to pass port 1723 to the server so the VPN can be made directly to the Network as we only have 1 mobile user who needs this.

Any help would be great
0
Comment
Question by:tim_henley
  • 3
6 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 38831641
If RWW/RWA and or OWA is set up then it is using port 443/SSL and thus you cannot have the router, at the same IP address, accepting SSL VPN connections.

The Watchguard VPN is a more secure VPN option but in this case I could see using the Windows VPN option.
You need to forward port 1723 and enable GRE (protocol 47, not port 47).  I have not done so on the newer Watchguards but on the older units (8-10 years ago) as I recall you created a rule to forward TCP (protocol 6) on port 1723 to the server's IP, and a second to forward Protocol 47 to the same IP, again using port 1723.  I am sure others can provide better details.

However, why do you need a VPN?  The only reason would be file access and any shared files can be published on the RWA web page and accessed through SSL which is more secure that allowing full access to the corporate site from an unknown and unmanaged remote computer and site.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 38831651
PS- you may find the following link helpful regarding configuring the Watchguard.
0
 

Author Comment

by:tim_henley
ID: 38831780
We have an application that requires a mapped drive on the server to work.
Thanks for that but there was no link
Cheers
Tim
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 500 total points
ID: 38831863
My Appologies:
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Watchguard_Firewall/Q_27404928.html

Mapped drive makes sence.
Keep in mind, most applications such as Quickbooks or other apps using databases like Access will not work over a VPN, or if they do, they can result in data coruption due to the slow link.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now