Rambling through different tech topics and some step-by-step guides while figuring out Cloudflare security.
This guide has three parts. It explains how to install and configure Firebox SSLVPN and IKEv2 with AuthPoint MFA with local users, on prem AD users and Entra ID users. Part 3 – Entra ID User Authentication In this guide, we only configure AuthPoint MFA and Microsoft Entra ID users for Firebox SSLVPN. IKEv2 VPN…
This guide has three parts. It explains how to install and configure Firebox SSLVPN and IKEv2 with AuthPoint MFA with local users, on prem AD users and Entra ID users. Part 2 – on prem Active Directory User Authentication In WatchGuard Cloud, go to Configure > Directories and Domain ServicesClick Add Authentication Domain. Choose WatchGuard…
This guide has three parts. It explains how to install and configure Firebox SSLVPN and IKEv2 with AuthPoint MFA with local users, on prem AD users and Entra ID users. Part 1 – Local User authentication In WatchGuard Cloud, go to Configure > Directories and Domain ServicesClick Add Authentication Domain. Choose WatchGuard Cloud Directory, then…
LDAP is the preferred method for authenticating SSLVPN users against an on‑premises Active Directory server. However, it is also possible to use a Windows NPS RADIUS server to authenticate AD users. The configuration is almost the same as when you set up IKEv2 Mobile VPN to authenticate on‑prem AD users. The only differences are: Install…
The problem with the WatchGuard SSLVPN client is that it always downloads a fresh SSLVPN configuration file from the Firebox every time it connects. So if you change the SSLVPN settings on the Firebox — for example, from Full Tunnel to Split Tunnel — the next time the SSLVPN client connects, it will automatically download…
SSLVPN (OpenVPN) – Easiest & works on most distros. WatchGuard SSLVPN is just OpenVPN under the hood, so Linux support is excellent. Step 1 — Download the SSLVPN .ovpn file from the Firebox Step 2 — Import the client.ovpn file into NetworkManager All other settings come from the .ovpn file and normally require no changes.…