- #Watchguard mobile vpn app for mac how to#
- #Watchguard mobile vpn app for mac for mac#
- #Watchguard mobile vpn app for mac mac osx#
- #Watchguard mobile vpn app for mac install#
From the Key Group drop-down list, select Diffie-Hellman Group 2.When the SA Life is set to 8 hours, the Shrew Soft VPN and WatchGuard XTM IPSec Mobile VPN clients rekey after 8 hours, but the VPN client on the OSX or iOS device uses the smaller rekey value of 1 hour. If you plan to use this VPN profile for all supported VPN clients, set the SA Life to 8 hours. If this profile is only used for connections by VPN client on Mac OSX or iOS devices, set the SA Life to 1 hour to match the client setting.
#Watchguard mobile vpn app for mac mac osx#
The VPN client on the Mac OSX or iOS device is configured to rekey after 1 hour.
In the Phase 1 Settings section, click Advanced. From the Encryption drop-down list, select one of these options:. From the Authentication drop-down list, select either SHA-1 or MD5. Select Use the passphrase of the end user profile as the pre-shared key. In the Firebox IP Addresses section, type the primary external IP address or domain name to which Mobile VPN users in this group can connect. Type and confirm the Passphrase to use for this tunnel. For more information, see Configure the External Authentication Server. If you use Active Directory as your authentication server, the users must belong to an Active Directory security group with the same name as the group name you configure for Mobile VPN with IPSec. If you create a Mobile VPN user group that authenticates to an external authentication server, make sure you create a group on the server that has the same name as the name you added in the wizard for the Mobile VPN group. Make sure that this method of authentication is enabled. You can authenticate users to the XTM device (Firebox-DB) or to a RADIUS, VASCO, SecureID, LDAP, or Active Directory server. From the Authentication Server drop-down list,, select an authentication server. Make sure the name is unique among VPN group names, as well as all interface and VPN tunnel names. You can type the name of an existing group, or the name for a new Mobile VPN group. In the Name text box, type the name of the authentication group your Mac OSX or iOS VPN users belong to. The Mobile VPN with IPSec Settings page appears. It is very important to configure the settings on your XTM device to match the settings required by the VPN client on the Mac OSX or iOS device. Many of the VPN tunnel configuration settings in the VPN client on the Mac OSX or iOS device are not configurable by the user. If you are an end-user, please scroll down to the iOS and OSX configurations. This section is meant for QUBYTE IT Support personnel, or your own IT technician, who can configure the WatchGuard Firewall accordingly. This does not work because the VPN client uses main mode, and the XTM device uses aggressive mode for Phase 1 VPN negotiations. You cannot use a certificate for VPN tunnel authentication between the native VPN client and an XTM device. 
SHA2 is not supported on the VPN client on iOS devices. In the Mobile VPN with IPSec settings on the XTM device, do not use SHA2 in the Phase 1 and Phase 2 settings.
#Watchguard mobile vpn app for mac how to#
For information about how to configure the VPN client on an Android device, see Use Mobile VPN with IPSec with an Android Device. You can use the same Mobile VPN with IPSec profile for VPN connections from iOS and Android devices. For a Mac OSX device, you must manually configure the settings in the native VPN client. This app can import a Mobile VPN with IPSec profile into the native VPN client on the iOS device.
#Watchguard mobile vpn app for mac install#
For more information, see Install the IPSec Mobile VPN Client Software.įor an iOS device, you can install the WatchGuard Mobile VPN app for iOS.
#Watchguard mobile vpn app for mac for mac#
To do this, you must configure the VPN settings on your XTM device to match those on the iOS or Mac OSX device.įor IPSec VPN connections from a Mac OSX device, you can also use the WatchGuard IPSec VPN Client for Mac OSX.
You can use this client to make an IPSec VPN connection to an XTM device. Apple iOS devices (iPhone, iPad, and iPod Touch) and Mac OSX 10.6 and higher devices include a native Cisco IPSec VPN client.
0 kommentar(er)
