Watchguard Firebox X20E, User Manual

Page: 236 / 310

Configuring IPSec Mobile User VPN
224 Firebox X Edge e-Series
5
Click Finish .
The Remove Shared Component window can appear. During the initial installation of ZoneAlarm, some
files were installed that can be shared by other programs on the system. Click
Yes to All to completely
remove all of these files.
6
The Install window appears and tells you to restart the computer. Click OK to restart.
Using IPSec MUVPN on a Firebox X Edge e-Series Wireless network
You must protect your wireless network from unauthorized access because the signal can go out of
your building. If you do not protect your network, unauthorized users can break into your network or
make use of your Internet connection.
Some wireless network cards cannot use the stronger Wi-Fi Protected Access (WPA or WPA2) encryp-
tion and instead use weaker Wired Equivalent Privacy (WEP) to secure the data that goes through the
airwaves.
You can increase the security of your wireless trusted or optional network users when you make the
wireless computer users authenticate as IPSec MUVPN clients. This makes the Firebox® X Edge e-Series
restrict traffic through the firewall unless the wireless computer has connected using an IPSec MUVPN
tunnel.
To make sure wireless computers authenticate as IPSec MUVPN clients:
1
To connect to the System Status page, type https:// in the browser address bar, and the IP
address of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2
Select Network > Trusted or Network > Optional and go to the Wireless tab.
3
Select the check box Require encrypted MUVPN connections for wireless clients .
4
Click Submit .
Troubleshooting Tips
You can get more information about the IPSec MUVPN client from the WatchGuard® web site:
http://www.watchguard.com/support
This section includes the answers to some frequently asked questions about the IPSec MUVPN client:
My computer hangs immediately after installing the IPSec MUVPN client.
This can be caused by one of two problems:
•
The ZoneAlarm® personal firewall software application is stopping usual traffic on the local
network.
•
The IPSec MUVPN client is active and cannot create VPN tunnels.
When the IPSec MUVPN client is not in use, ZoneAlarm and the MUVPN client must be set to be not
active.
From the Windows desktop system tray:
1
Restart your computer.
2
Right-click the MUVPN client icon and select Deactivate Security Policy .
The MUVPN client icon with a red bar appears to show that the security policy is not active.