WSM User Guide - WatchGuard Technologies

VPN Scenarios• You make tunnels between two or more Firebox devices.• You give different routing policies to different tunnels.• Client units have dynamic or static public IP addresses.• You have a large number of tunnels to make.With WatchGuard System Manager you can configure, manage, and monitor all WatchGuard devicesacross a company. You can configure VPN tunnels between two remote devices easily, using the defaultsettings that WSM gives you. You do not have to know about the Internet security of branch offices andremote users. Remote devices connect to the Management Server, and WSM does all the work. If youuse certificates for tunnel authentication, you can configure the Management Server as a certificateauthority to create certificates automatically.VPN ScenariosThis section gives three different types of companies and the VPN solutions that best fit each one.Large company with branch offices: WatchGuard System ManagerLarge Company with VPNs to Branch OfficesGallatin Corporation has a head office with approximately 300 users in Los Angeles. It has branch officesof approximately 100 users each in Sacramento, San Diego, and Irvine. All locations have high-speedaccess to the Internet and employees at all locations must have secure connections to all other locations.This company usesa WatchGuard Firebox® at each location and WatchGuard® System Manager to connectthe locations to each other. Each office connects to all other offices. All users at each office haveaccess to the shared records at all the other locations. The Management Server is behind the Firebox at234 WatchGuard System Manager