Solved

VPN to SBS2011 through Watchguard firewall

Posted on 2013-01-29
6
425 Views
Last Modified: 2014-10-21
Hi I have a  Watchguard XTM 2 Series HW model XP3e6 connected to an SBS2011 server and need to get a VPN connection to the SBS2011 domain. I have tried setting up the Watchgaurd mobile SSL VPN. But when I try to connect externally  it is like the watchguard is not answring on the IP address.
I have the RWW and outlook working ok.
I would prefer the watchgaurd to pass port 1723 to the server so the VPN can be made directly to the Network as we only have 1 mobile user who needs this.

Any help would be great
0
Comment
Question by:tim_henley
  • 3
6 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 38831641
If RWW/RWA and or OWA is set up then it is using port 443/SSL and thus you cannot have the router, at the same IP address, accepting SSL VPN connections.

The Watchguard VPN is a more secure VPN option but in this case I could see using the Windows VPN option.
You need to forward port 1723 and enable GRE (protocol 47, not port 47).  I have not done so on the newer Watchguards but on the older units (8-10 years ago) as I recall you created a rule to forward TCP (protocol 6) on port 1723 to the server's IP, and a second to forward Protocol 47 to the same IP, again using port 1723.  I am sure others can provide better details.

However, why do you need a VPN?  The only reason would be file access and any shared files can be published on the RWA web page and accessed through SSL which is more secure that allowing full access to the corporate site from an unknown and unmanaged remote computer and site.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 38831651
PS- you may find the following link helpful regarding configuring the Watchguard.
0
 

Author Comment

by:tim_henley
ID: 38831780
We have an application that requires a mapped drive on the server to work.
Thanks for that but there was no link
Cheers
Tim
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 500 total points
ID: 38831863
My Appologies:
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Watchguard_Firewall/Q_27404928.html

Mapped drive makes sence.
Keep in mind, most applications such as Quickbooks or other apps using databases like Access will not work over a VPN, or if they do, they can result in data coruption due to the slow link.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The problem of the system drive in SBS 2003 getting full continues to be an issue, even though SBS 2008 and SBS 2011 are both in the market place.  There are several solutions to this, including adding additional drive space or using third party uti…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question