?
Solved

VPN to SBS2011 through Watchguard firewall

Posted on 2013-01-29
6
Medium Priority
?
450 Views
Last Modified: 2014-10-21
Hi I have a  Watchguard XTM 2 Series HW model XP3e6 connected to an SBS2011 server and need to get a VPN connection to the SBS2011 domain. I have tried setting up the Watchgaurd mobile SSL VPN. But when I try to connect externally  it is like the watchguard is not answring on the IP address.
I have the RWW and outlook working ok.
I would prefer the watchgaurd to pass port 1723 to the server so the VPN can be made directly to the Network as we only have 1 mobile user who needs this.

Any help would be great
0
Comment
Question by:tim_henley
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
6 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 2000 total points
ID: 38831641
If RWW/RWA and or OWA is set up then it is using port 443/SSL and thus you cannot have the router, at the same IP address, accepting SSL VPN connections.

The Watchguard VPN is a more secure VPN option but in this case I could see using the Windows VPN option.
You need to forward port 1723 and enable GRE (protocol 47, not port 47).  I have not done so on the newer Watchguards but on the older units (8-10 years ago) as I recall you created a rule to forward TCP (protocol 6) on port 1723 to the server's IP, and a second to forward Protocol 47 to the same IP, again using port 1723.  I am sure others can provide better details.

However, why do you need a VPN?  The only reason would be file access and any shared files can be published on the RWA web page and accessed through SSL which is more secure that allowing full access to the corporate site from an unknown and unmanaged remote computer and site.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 38831651
PS- you may find the following link helpful regarding configuring the Watchguard.
0
 

Author Comment

by:tim_henley
ID: 38831780
We have an application that requires a mapped drive on the server to work.
Thanks for that but there was no link
Cheers
Tim
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 2000 total points
ID: 38831863
My Appologies:
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Watchguard_Firewall/Q_27404928.html

Mapped drive makes sence.
Keep in mind, most applications such as Quickbooks or other apps using databases like Access will not work over a VPN, or if they do, they can result in data coruption due to the slow link.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses
Course of the Month12 days, 19 hours left to enroll

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question