{"id":355,"date":"2026-04-23T18:11:50","date_gmt":"2026-04-23T15:11:50","guid":{"rendered":"https:\/\/mangen.kitabara.org\/?p=355"},"modified":"2026-04-23T18:11:50","modified_gmt":"2026-04-23T15:11:50","slug":"how-to-configure-firebox-sslvpn-mobilevpn-to-do-both-full-tunnel-and-split-tunnel","status":"publish","type":"post","link":"https:\/\/mangen.kitabara.org\/index.php\/how-to-configure-firebox-sslvpn-mobilevpn-to-do-both-full-tunnel-and-split-tunnel\/","title":{"rendered":"How to configure Firebox SSLVPN mobilevpn to do both Full tunnel and Split tunnel."},"content":{"rendered":"\n

The problem with the WatchGuard SSLVPN client is that it always downloads a fresh SSLVPN configuration file from the Firebox every time it connects<\/strong>. So if you change the SSLVPN settings on the Firebox \u2014 for example, from Full Tunnel<\/strong> to Split Tunnel<\/strong> \u2014 the next time the SSLVPN client connects, it will automatically download the new configuration and start using it.<\/p>\n\n\n\n

One way to avoid this is:<\/strong><\/p>\n\n\n\n

    \n
  1. First configure Split Tunnel<\/strong> SSLVPN on the Firebox.<\/li>\n\n\n\n
  2. Download and install the OpenVPN Community client<\/a><\/strong>.<\/li>\n\n\n\n
  3. Download the Split Tunnel .ovpn file<\/strong> from the Firebox and import it into the OpenVPN client. <\/a><\/li>\n\n\n\n
  4. After that, change the SSLVPN configuration on the Firebox from Split Tunnel<\/strong> back to Full Tunnel<\/strong>.<\/li>\n\n\n\n
  5. Now install the WatchGuard SSLVPN client<\/strong> and connect normally.<\/li>\n<\/ol>\n\n\n\n
    \n
    \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
    \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
    <\/div>\n\n\n\n

    With this setup:<\/strong><\/p>\n\n\n\n

      \n
    • WatchGuard SSLVPN clients<\/strong> will always use the Full Tunnel<\/strong> configuration (because they download the config automatically).<\/li>\n\n\n\n
    • OpenVPN clients<\/strong> will continue using the Split Tunnel<\/strong> configuration (because they use the static .ovpn file you imported).<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

      The problem with the WatchGuard SSLVPN client is that it always downloads a fresh SSLVPN configuration file from the Firebox every time it connects. So if you change the SSLVPN settings on the Firebox \u2014 for example, from Full Tunnel to Split Tunnel \u2014 the next time the SSLVPN client connects, it will automatically download…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,4,2],"tags":[],"class_list":["post-355","post","type-post","status-publish","format-standard","hentry","category-sslvpn","category-vpn","category-watchguard"],"_links":{"self":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/comments?post=355"}],"version-history":[{"count":3,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/355\/revisions"}],"predecessor-version":[{"id":360,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/355\/revisions\/360"}],"wp:attachment":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/media?parent=355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/categories?post=355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/tags?post=355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}