<div>
are you allowing tcp/udp port 3389 through?
</div>


<div>
What type of connection are you using? &nbsp;Are you trying to set up an SSL or other secured connection through the router? Or are you trying to let the remote user through the router to connect to a workstation or server on the office network using remote desktop or a 3rd party remote connection tool?
</div>


<div>
I am trying to set up SSL VPN but there is no domain just a ptp network. We have a remote user trying to log in and access a workstation through the Watchguard&nbsp;<br><br>
</div>


<div>
You should be able to use the semi-automatic setup tools that are enabled when you enable the SSL Mobile VPN. &nbsp;Did you use those tools? &nbsp;Can you describe exactly what you did for your setup? &nbsp;Have you downloaded the Mobile VPN Client and tried to connect? &nbsp;What were the results?<br><br>This is a link to an article on settings up the Mobile VPN with SSL manually. &nbsp;It's probably more complicated than you need, but you might want to take a look at it for some hints or more detailed information:<br><br><a href="https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/mvpn/ssl/configure_fb_for_mvpn_ssl_c.html" rel="ugc">Manually Configure the Firebox for Mobile VPN with SSL (watchguard.com)</a>&nbsp;
</div>


<div>
I manually configured the SSL VPN and downloaded the SSL client to the external workstation. It says connecting and comes right back to the login. I want it to direct her to an internal workstation after she connects. Still trying to figure it out&nbsp;
</div>


<div>
I'm assuming that since you aren't running a domain, you probably don't have any other equipment behind the Watchguard (like an Exchange server or Web server) that uses port 443 to send or receive through the firewall. If I'm correct, then you would just have to add another policy on the Watchguard to redirect incoming communication on port 443 (HTTPS) to the internal workstation. &nbsp;
</div>


<div>
Setup policy and it still refuses to connect
</div>


<div>
There may be a problem with the VPN client installation or setup; it can be a little tricky. &nbsp;Review the instructions and check the client setup:<br><br><a href="https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/mvpn/ssl/mvpn_ssl_client-install_c.html#ConnectClient" rel="ugc">Download, Install, and Connect the Mobile VPN with SSL Client (watchguard.com)</a>&nbsp;
</div>


<div>
I will look again, however I would like to know who I can call for assistance. I would like someone to connect to my system and look at the setup to see what I may be missing. &nbsp;I feel like I am running in circles. &nbsp;So far, I do not feel that Experts Exchange is of benefit to me. &nbsp;I appreciate your responses but I am getting no where. :-(
</div>


<div>
Here is the error I am getting:<br>---------------------------<br>WatchGuard Mobile VPN with SSL<br>---------------------------<br>(SSLVPN authentication failed)<br><br>Could not download the configuration from the server.<br>Do you want to try to connect using the most recent configuration?<br>---------------------------<br>Yes &nbsp; No &nbsp;<br>---------------------------<br><br>I say yes and it goes back to the login
</div>


<div>
Hi, DG. &nbsp;I'm unfortunately not available right now for an online consultation. &nbsp;Assuming your Feature Key and license for your Watchguard is current, though, you have access to Watchguard support. &nbsp;I've worked with them a number of times and have been very happy with the level of response I got and the results.<br><br>The error message you posted above indicates that the problem is with the configuration information from the server. &nbsp;I've had this problem in the past and fixed it by following the instructions below. This process is a little bit complicated, but here are the instructions from the Watchguard firewall tech articles:<br><br><h2>Get the Configuration File from the Firebox</h2>The Mobile VPN with SSL&nbsp;configuration file is in the support.tgz file you can download from your Firebox.<br>To get the Mobile VPN with SSL configuration file, from Firebox System Manager:<br><ol><li>Select the <strong>Status Report</strong> tab and click <strong>Support</strong>.</li><li>Choose a location to save the support.tgz file and click <strong>Retrieve</strong>.</li><li>Extract the contents of&nbsp;support.tgz&nbsp;to a folder on your computer.</li></ol>In the support.tgz file created by Firebox System Manager, the Mobile VPN with SSL configuration file is:<br><a target="_blank" rel="ugc nofollow"></a>Fireware_XTM_Support\support\debug\client.wgssl.<br><br>To get the Mobile VPN with SSL configuration file, from Fireware Web UI:<br><ol><li>Select <strong>System Status &gt;&nbsp;Diagnostics</strong>.</li><li>Click <strong>Download a Support Log File</strong>.</li><li>Extract the contents of the&nbsp;support.tgz&nbsp;file to a folder on your computer.</li></ol>In the support.tgz file created by Fireware Web UI, the Mobile VPN with SSL configuration file is: <br>support\debug\client.wgssl.<br><br><h2>Install and Configure the SSL Client Using the Installation Software and a Configuration File</h2>You must have two files:<br><ul><li>Mobile VPN with SSL VPN client installation software<br>WG-MVPN-SSL.exe (Microsoft Windows) or WG-MVPN-SSL.dmg (macOS)</li><li>Mobile VPN with SSL VPN configuration file<br>sslvpn_client.wgssl</li></ul>For Microsoft Windows:<br><ol><li>Double-click <strong>WG-MVPN-SSL.exe</strong>.<br>The Mobile VPN with SSL client Setup Wizard starts.</li><li>Accept the default settings on each screen of the wizard.</li><li>If you want to add a desktop icon or a Quick Launch icon, select the check box for that option.<br>A desktop or Quick Launch icon is not required. The client icon is added to the Windows Start menu by default.</li><li>Finish and exit the wizard.</li><li>Use one of these three methods to start the client software:<ul><li>From the <strong>Start Menu</strong>, select <strong>All Programs &gt; WatchGuard &gt; Mobile VPN with SSL client &gt; Mobile VPN with SSL client</strong>.<br>The client installer starts.</li><li>Double-click the Mobile VPN with SSL client icon on the desktop.</li><li>Click the Mobile VPN with SSL client icon in the Quick Launch toolbar.</li></ul></li><li>Double-click <strong>sslvpn-client.wgssl</strong> to configure the Mobile VPN with SSL client software.</li></ol>You can find the full article here:<br><br><a href="https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/mvpn/ssl/mvpn_ssl_manual-distribution_c.html" rel="ugc">Manually Distribute and Install the Mobile VPN with SSL Client Software and Configuration File (watchguard.com)</a>&nbsp;<br><br>I hope this helps! &nbsp;Post back if you have any questions after reviewing the above.<br><br><br>
</div>


<div>
<br>I contacted support and they were unable to resolve the SSL VPN issue. Case is still open. I greatly appreciate your efforts and comments. I will close this and wait for them to figure out why it isn’t working.&nbsp;
</div>


<div>
Good luck! &nbsp;If they get your issue resolved and you can document it, it would be great if you come back to this case and describe the solution so that others can see what fixed your problem.<br><br>Deb
</div>


<div>
Make sure you're using the SSL VPN client that matches the Fireware version on the XTM 2. The newest versions of the SSL VPN client don't support the older protocols and the latest Fireware version doesn't support the newer protocols. <br><br>(BTW, the XTM 2 is very old and should be replaced as soon as feasible)<br><br>
</div>


<div>
<div class="content wysiwyg-content fr-view">
Trying to allow a remote user through a Watchguard XTM 2 series firewall. &nbsp;Can't seem to get it to work. &nbsp;Does anyone have a simple step by step configuration?
</div>
</div>



Trying to allow a remote user through a Watchguard XTM 2 series firewall.  Can't seem to get it to work.  Does anyone have a simple step by step configuration?

RDP setup through Watchguard

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Smart Security. Simply Done.

For over 20 years, WatchGuard has pioneered cutting-edge cyber security technology and delivered it as easy-to-deploy and easy-to-manage solutions. With industry-leading network security, secure Wi-Fi, and network intelligence products and services, WatchGuard enables more than 80,000 small and midsize enterprises from around the globe to protect their most important assets.

www.watchguard.com 

WatchGuard

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.

Vulnerabilities

Ransomware is malicious software, designed to block data access in order to extort money. As a form of malware, ransomware is most often used to infiltrate devices through infected emails or links that, in turn, recognize and take advantage of vulnerabilities in the operating system and installed third-party software.

Ransomware

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.

Network Security

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.