About Mobile Vpn Client Configuration Files; Configure Global Mobile Vpn With Ipsec Client Settings - Watchguard Firebox X15 User Manual

About Mobile VPN with IPSec

About Mobile VPN Client configuration files

With Mobile VPN with IPSec, the Firebox X Edge administrator controls end-user profiles. You use the Edge
web configuration interface to set the name of the end user and create a client configuration file, or profile,
with the file extension .wgx. The .wgx file contains the shared key, user identification, IP addresses, and
settings that are used to create a secure tunnel between the remote computer and the Edge. This file is
encrypted with a key that is eight characters or greater in length. This key must be known to the administrator
and the remote user. When the remote client imports the .wgx file, this key is used to decrypt the file for use
in the client software.
The Firebox X Edge creates a .wgx file for a user when a Firebox user's account is configured for Mobile VPN..
If you want to lock mobile users profiles and make them read-only, see
IPSec client settings.

Configure global Mobile VPN with IPSec client settings

Some Mobile VPN client settings apply to all Firebox X Edge Mobile VPN with IPSec connections. Select
VPN > Mobile VPN to set these options.
Make the Mobile VPN with IPSec client security policy read-only
Select this check box to make the .wgx file read-only so that the user cannot change the security
policy file.
Virtual Adapter
The default setting is Disabled. Do not change this setting.
Because the Mobile VPN with IPSec client always uses a virtual adapter, you should not change the
Virtual Adapter setting. This setting applies only to Mobile User VPN versions prior to 10.0. Mobile
VPN with IPSec software version 10.0 and later always use a virtual adapter, regardless of the
selection made in this field.
274
Configure global Mobile VPN with
Firebox X Edge e-Series