Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

VPN to SBS2011 through Watchguard firewall

Posted on 2013-01-29
6
435 Views
Last Modified: 2014-10-21
Hi I have a  Watchguard XTM 2 Series HW model XP3e6 connected to an SBS2011 server and need to get a VPN connection to the SBS2011 domain. I have tried setting up the Watchgaurd mobile SSL VPN. But when I try to connect externally  it is like the watchguard is not answring on the IP address.
I have the RWW and outlook working ok.
I would prefer the watchgaurd to pass port 1723 to the server so the VPN can be made directly to the Network as we only have 1 mobile user who needs this.

Any help would be great
0
Comment
Question by:tim_henley
  • 3
6 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 38831641
If RWW/RWA and or OWA is set up then it is using port 443/SSL and thus you cannot have the router, at the same IP address, accepting SSL VPN connections.

The Watchguard VPN is a more secure VPN option but in this case I could see using the Windows VPN option.
You need to forward port 1723 and enable GRE (protocol 47, not port 47).  I have not done so on the newer Watchguards but on the older units (8-10 years ago) as I recall you created a rule to forward TCP (protocol 6) on port 1723 to the server's IP, and a second to forward Protocol 47 to the same IP, again using port 1723.  I am sure others can provide better details.

However, why do you need a VPN?  The only reason would be file access and any shared files can be published on the RWA web page and accessed through SSL which is more secure that allowing full access to the corporate site from an unknown and unmanaged remote computer and site.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 38831651
PS- you may find the following link helpful regarding configuring the Watchguard.
0
 

Author Comment

by:tim_henley
ID: 38831780
We have an application that requires a mapped drive on the server to work.
Thanks for that but there was no link
Cheers
Tim
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 500 total points
ID: 38831863
My Appologies:
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Watchguard_Firewall/Q_27404928.html

Mapped drive makes sence.
Keep in mind, most applications such as Quickbooks or other apps using databases like Access will not work over a VPN, or if they do, they can result in data coruption due to the slow link.
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question