When Mobile VPN with SSL is configured with SAML authentication, the Firebox hardcodes ForceAuthn="true" in the SAML AuthnRequest it sends to the IdP. As a result, Entra ID ignores any existing session and forces a full interactive re-authentication on every single VPN connection. Because ForceAuthn="true" is set, no…
I created a user in Firebox-DB and put the user in SSLVPN-Users group. Firebox-DB is ticked in Mobile VPN SSL Configuration -> Authentication -> Authentication Servers. The Firebox-DB User is also ticked in "Users and Groups". I put the Firebox-DB user in the "Allow SSL-VPN-Users" Policy (From field). The SSL-VPN client…
Here is an odd issue I am having. I am currently on business in Mexico and I had to VPN into my offices. We use Geolocation for restricting access. That works properly. I am able to access the vpn using OpenVPN on my phone, but the Watchguard SSLVPN application on my laptop times out with the following error:…
Hi all, We are migrating from OpenVPN to the WatchGuard Mobile VPN with SSL for Windows 12.11.5 mainly so we can use Entra auth going forward. We can install the software through Intune using this command which works fine: WG-MVPN-SSL_12_11_5.exe /autokill /silent /verysilent However it restarts the device, is there a way…
Is it possible to use IKEv2 VPN with an IPv6 address on the external interface? I use IPv4 on the internal interfaces and in my home office and would like to tunnel IPv4 traffic via the IPv6 VPN connection. This is necessary because more and more Internet service providers are using Dual-Stack Lite or Carrier-Grade NAT and…
Sooooo... today I installed -- successfully it said -- the Watchguard SSL VPN connector via my gateway on my Surface Pro X (which, you may recall, uses an ARM-based processor). However, no matter how many times I tried, I was unsuccessful at connecting to my VPN. Using the same network, and the same username/password, my…
I am trying to use Entra for our SSL VPN but the URL settings always use port 4100. When going to https://{Firewall IP or FQDM}/auth/saml all the urls listed include port 4100. I have no idea how to remove port :4100. This prevents the VPN authentication from working.
Hello Since 2nd of October 2026 we see brute force IKEv2 attacks on several boxes. The logs entry are like "",C039XZT123456,db,"FWStatus, (185.x.z.y<->138.226.239.50)IKEv2 IKE_SA_INIT exchange from 138.226.239.50:40044 to 185.14.65.194:4500 failed. Gateway-Endpoint:'WG Default IKEv2 Gateway'. Reason:DH-Group 31 in the KE…
Hi, I've just updated the main certificate on my firebox as the old one was about to expire. The inbuilt Firebox SAML certificate is due to expire at the end of the month. Can I force this to renew now so that I can upload the new one to my SAML app on Entra, or do I have to wait for it to expire and the firebox to…
some of my customers are demanding better muvpn performance , they ask me for tailscale. what can i tell them ?
It looks like you're new here. Sign in or register to get started.