SSLVPN Login with Firebox-DB User not possible

VGBH
VGBH
edited April 8 in Firebox - VPN Mobile User

I created a user in Firebox-DB and put the user in SSLVPN-Users group. Firebox-DB is ticked in Mobile VPN SSL Configuration -> Authentication -> Authentication Servers. The Firebox-DB User is also ticked in "Users and Groups".
I put the Firebox-DB user in the "Allow SSL-VPN-Users" Policy (From field).
The SSL-VPN client version is 2026.2.0.
User name field: Firebox-DB\user

2026-04-08 14:21:55 Primary admd Authentication of Firewall user [user@Firebox-DB] from 10.10.10.10 was accepted msg_id="1100-0004" Event
2026-04-08 14:21:55 Primary sslvpn Mobile VPN with SSL user user logged in. Virtual IP address is 0.0.0.0. Real IP address is 10.10.10.10. msg_id="2500-0000" Event
2026-04-08 14:21:55 Primary sslvpn sslvpn_event, add entry, entry->virtual_ip=0.0.0.0, entry->real_ip=10.10.10.10, dropin_mode=0 Debug
2026-04-08 14:21:56 Secondary sslvpn Mobile VPN with SSL user user logged in. Virtual IP address is 0.0.0.0. Real IP address is 10.10.10.10. msg_id="2500-0000" Event
2026-04-08 14:21:56 Secondary sslvpn sslvpn_event, add entry, entry->virtual_ip=0.0.0.0, entry->real_ip=10.10.10.10, dropin_mode=0 Debug
2026-04-08 14:21:58 Primary Allow 10.10.10.10 20.20.20.20 https/tcp 55184 443 Internet-Fiber Firebox Allowed 44 64 (WatchGuard SSLVPN-00) proc_id="firewall" rc="100" msg_id="3000-0148" tcp_info="offset 6 S 2209399070 win 61690" geo_src="DEU" geo_dst="DEU" Traffic
2026-04-08 14:21:59 Primary admd Authentication of Firewall user [user@Firebox-DB] from 10.10.10.10 was rejected, invalid credentials or user doesn't exist msg_id="1100-0005" Event

What am I doing wrong? I also tried different passwords.

There is also AuthPoint configured. AuthPoint Authentication Server is set as default.

Comments

  • james.carson
    james.carson

    Hi @VGBH
    Without being able to see your user configured in Firebox-DB, this looks like the password is incorrect.

    -If you're using Policy Manager, make sure the user is being created and the password is being set in Setup -> Authentication -> Authentication Servers, in the Firebox-DB tab.

    -If you're using WebUI, make sure the user is being created and the password is being set in Authentication -> Servers, Firebox-DB.

    -Make sure that the user is a member of the SSLVPN-Users group, or if you specified a different group, add the user to that group.

    If you still can't get the user to authenticate, please consider creating a support case by clicking the support center link at the top right of this page.

  • raymondhelms
    raymondhelms

    fnaf games said:

    I created a user in Firebox-DB and put the user in SSLVPN-Users group. Firebox-DB is ticked in Mobile VPN SSL Configuration -> Authentication -> Authentication Servers. The Firebox-DB User is also ticked in "Users and Groups".
    I put the Firebox-DB user in the "Allow SSL-VPN-Users" Policy (From field).
    The SSL-VPN client version is 2026.2.0.
    User name field: Firebox-DB\user

    2026-04-08 14:21:55 Primary admd Authentication of Firewall user [user@Firebox-DB] from 10.10.10.10 was accepted msg_id="1100-0004" Event
    2026-04-08 14:21:55 Primary sslvpn Mobile VPN with SSL user user logged in. Virtual IP address is 0.0.0.0. Real IP address is 10.10.10.10. msg_id="2500-0000" Event
    2026-04-08 14:21:55 Primary sslvpn sslvpn_event, add entry, entry->virtual_ip=0.0.0.0, entry->real_ip=10.10.10.10, dropin_mode=0 Debug
    2026-04-08 14:21:56 Secondary sslvpn Mobile VPN with SSL user user logged in. Virtual IP address is 0.0.0.0. Real IP address is 10.10.10.10. msg_id="2500-0000" Event
    2026-04-08 14:21:56 Secondary sslvpn sslvpn_event, add entry, entry->virtual_ip=0.0.0.0, entry->real_ip=10.10.10.10, dropin_mode=0 Debug
    2026-04-08 14:21:58 Primary Allow 10.10.10.10 20.20.20.20 https/tcp 55184 443 Internet-Fiber Firebox Allowed 44 64 (WatchGuard SSLVPN-00) proc_id="firewall" rc="100" msg_id="3000-0148" tcp_info="offset 6 S 2209399070 win 61690" geo_src="DEU" geo_dst="DEU" Traffic
    2026-04-08 14:21:59 Primary admd Authentication of Firewall user [user@Firebox-DB] from 10.10.10.10 was rejected, invalid credentials or user doesn't exist msg_id="1100-0005" Event

    What am I doing wrong? I also tried different passwords.

    There is also AuthPoint configured. AuthPoint Authentication Server is set as default.

    Hello, the likely issue is AuthPoint being set as the default Authentication Server. Your logs show the Firebox-DB authentication succeeds, but ADMD subsequently rejects the credentials.

    Temporarily set Firebox-DB as the default authentication server and test again. Also verify that the SSL VPN address pool has available IPs—the virtual_ip=0.0.0.0 indicates the VPN session isn't receiving an address.

Categories