\n\t\t\t\tTest that the users get a Push notification to the AuthPoint MFA app. <\/p>\n\n\n\n\n\n\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\t<\/div>\n\n\n\n
Your Firebox must be connected to WatchGuard Cloud before you continue. <\/p>\n\n\n
\n
\n\t\t\t\n\t\t\t\tTo use AuthPoint as an authentication server on a Firebox running Fireware 12.7 or higher, you must add a Firebox resource in AuthPoint.<\/p>\n\n\n\n
Add a Firebox Resource in AuthPoint<\/p>\n\n\n\n
\nIn WatchGuard Cloud, go to Resources<\/strong>.<\/li>\n\n\n\nClick Add Resource<\/strong>.<\/li>\n\n\n\nFrom the Type<\/strong> list, select Firebox<\/strong>.<\/li>\n\n\n\nIn Name<\/strong>, type a descriptive name for this resource.<\/li>\n\n\n\nFrom the Firebox<\/strong> drop\u2011down list, select the Firebox device you want to connect to AuthPoint.<\/li>\n\n\n\nYou do not<\/strong> need to enable MS\u2011CHAPv2 for IKEv2 VPN if the user is a local AuthPoint user<\/strong>.<\/li>\n<\/ul>\n\n\n\n
\n\t\t\t\n\t\t\t\t\n
\n\t\t\t\n\t\t\t\t<\/div>\n\n\n\n
After you add the Firebox resource, the AuthPoint authentication server is automatically enabled<\/strong> on the Firebox.<\/p>\n\n\n\nConfigure Zero Trust Authentication Policies<\/strong><\/p>\n\n\n\nTo create an authentication policy:<\/p>\n\n\n\n
\nGo to WG Cloud > Configure > Zero Trust<\/strong>.<\/li>\n\n\n\nClick Add Policy<\/strong>.<\/li>\n\n\n\nEnter a name for the policy.<\/li>\n\n\n\n In the Target<\/strong> section, choose the groups this policy applies to.<\/li>\n\n\n\nYou can select more than one group.<\/li>\n\n\n\n In this example, select the Mobilevpn\u2011User<\/strong> group you created earlier.<\/li>\n\n\n\nIn the Resources<\/strong> section, select the Firebox resource.<\/li>\n\n\n\nIn the Action<\/strong> section, choose Allow<\/strong>.<\/li>\n\n\n\nSelect Password and Push<\/strong>.<\/li>\n\n\n\nClick Save<\/strong>.<\/li>\n<\/ul>\n\n\n\n
\n\t\t\t\n\t\t\t\t\n
\n\t\t\t\n\t\t\t\t<\/div>\n\n\n\n
Configure Firebox SSLVPN \/ IKEv2 to Use AuthPoint<\/strong><\/p>\n\n\n\nIn the Firebox settings for SSLVPN<\/strong> and\/or IKEv2<\/strong>, do the following:<\/p>\n\n\n\n\nEnable the AuthPoint as Authentication Server<\/strong>.<\/li>\n\n\n\nAdd the AuthPoint group name<\/strong> in the Users and Groups<\/strong> section.<\/li>\n<\/ul>\n\n\n\n\n\n\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\t<\/div>\n\n\n\n
If you have multiple authentication servers and AuthPoint is not<\/strong> the default server, you must log in with: AuthPoint\\user1<\/strong><\/p>\n\n\n\nFinal Result<\/strong><\/p>\n\n\n\nWhen you connect with SSLVPN or IKEv2, you should receive an MFA Push notification<\/strong> on your mobile device.<\/p>\n\n\n\n<\/p>\n","protected":false},"excerpt":{"rendered":"
This guide has three parts. It explains how to install and configure Firebox SSLVPN and IKEv2 with AuthPoint MFA with local users, on prem AD users and Entra ID users. Part 1 – Local User authentication In WatchGuard Cloud, go to Configure > Directories and Domain ServicesClick Add Authentication Domain. Choose WatchGuard Cloud Directory, then…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,14,5,10,4,2],"tags":[],"class_list":["post-396","post","type-post","status-publish","format-standard","hentry","category-authentication","category-authpoint","category-ikev2","category-sslvpn","category-vpn","category-watchguard"],"_links":{"self":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/comments?post=396"}],"version-history":[{"count":104,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/396\/revisions"}],"predecessor-version":[{"id":723,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/396\/revisions\/723"}],"wp:attachment":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/media?parent=396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/categories?post=396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/tags?post=396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/06\/AuthPoint-UserTypes-1.png\")