Cloud Managed Firebox: Lack of information

V3N7UR4

The Watchguard Help Center is a all-world. But there is a lack of info about Cloud Managed Fireboxs.
For instance we start searching on how to Configure MFA for a RADIUS Client here: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/authpoint/resources_radius.html but then we browse to Firebox Mobile VPN with SSL Integration with AuthPoint here https://watchguard.com/help/docs/help-center/en-US/index_CSH.html#17188 and we are redirected to local managed fireboxes setup.

This is just one example. We have many of them. I feel the need for more info/examples/support videos on Cloud Managed Fireboxs

james.carson

Hi @V3N7UR4
Are you getting stuck in any specific item? I'd be happy to help get anything configured.

I'll have the documentation team look into the links you posted.

V3N7UR4

Looking forward for info about integration on VPN's with MFA with AD users.
Have seen some videos but must of them are examples that, as i said, are about managed fireboxes.

james.carson

Hi @V3N7UR4
The Azure AD integration with AuthPoint and a cloud managed firewall is currently being worked on, but isn't fully supported yet. Once that integration is fully done, there will be a document for it in our help center.

My apologies for any delay that may have caused you.

V3N7UR4

Hi @james.carson,
I was talking about local AD not Azure AD.
Never mind...

I already done it with try, fail, try, fail, try success way...
Hope the help center for cloud managed will be improved.

Thanks.

Tristan.Colo

For the RADIUS (For those who find this post and wonder what to do) you have to use the Authentication Domain

Use this article to understand what they are: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/authentication/auth_domains_manage.html?cshid=15061

Use this article to apply to firewall:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/Devices/managed/auth_domains.html

"Authentication Domain" is basically how any and all Authentication integrations happen currently for the Cloud managed firewalls (one of the hundreds of reasons I don't currently use cloud managed since it's another piece that just isn't fully baked in features and I don't get paid to be WG's Guinea pig XD).

That said, @james.carson is there any reason why "AuthPoint" isn't a authentication domain option for the cloud fireboxes so that it is just direct integration like the local managed appliances? Seems like a weird feature to not have on the cloud fireboxes... Eitherway there is something to be said about adding "WG Cloud" as a drop down in the documentation portal if this portal is wanting to be used for device management...

(Good luck to any who use the fully-cloud-managed fireboxes in production rn ... I am waiting until I see less core features in beta before I even think about hocking that portal... )

~T

Tristan Colo