Solved

VPN to SBS2011 through Watchguard firewall

Posted on 2013-01-29
6
441 Views
Last Modified: 2014-10-21
Hi I have a  Watchguard XTM 2 Series HW model XP3e6 connected to an SBS2011 server and need to get a VPN connection to the SBS2011 domain. I have tried setting up the Watchgaurd mobile SSL VPN. But when I try to connect externally  it is like the watchguard is not answring on the IP address.
I have the RWW and outlook working ok.
I would prefer the watchgaurd to pass port 1723 to the server so the VPN can be made directly to the Network as we only have 1 mobile user who needs this.

Any help would be great
0
Comment
Question by:tim_henley
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
6 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 38831641
If RWW/RWA and or OWA is set up then it is using port 443/SSL and thus you cannot have the router, at the same IP address, accepting SSL VPN connections.

The Watchguard VPN is a more secure VPN option but in this case I could see using the Windows VPN option.
You need to forward port 1723 and enable GRE (protocol 47, not port 47).  I have not done so on the newer Watchguards but on the older units (8-10 years ago) as I recall you created a rule to forward TCP (protocol 6) on port 1723 to the server's IP, and a second to forward Protocol 47 to the same IP, again using port 1723.  I am sure others can provide better details.

However, why do you need a VPN?  The only reason would be file access and any shared files can be published on the RWA web page and accessed through SSL which is more secure that allowing full access to the corporate site from an unknown and unmanaged remote computer and site.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 38831651
PS- you may find the following link helpful regarding configuring the Watchguard.
0
 

Author Comment

by:tim_henley
ID: 38831780
We have an application that requires a mapped drive on the server to work.
Thanks for that but there was no link
Cheers
Tim
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 500 total points
ID: 38831863
My Appologies:
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Watchguard_Firewall/Q_27404928.html

Mapped drive makes sence.
Keep in mind, most applications such as Quickbooks or other apps using databases like Access will not work over a VPN, or if they do, they can result in data coruption due to the slow link.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The problem of the system drive in SBS 2003 getting full continues to be an issue, even though SBS 2008 and SBS 2011 are both in the market place.  There are several solutions to this, including adding additional drive space or using third party uti…
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question