WSM User Guide - WatchGuard Technologies

CHAPTER 19Configuring Managed VPN TunnelsWatchGuard® System Manager supplies speed and reliability when you create IPSec VPN tunnelsthrough the drag-and-drop procedure, an automatic wizard, and the use of templates. You can makeIPSec tunnels that use authentication and encryption in minutes. You can be sure that these tunnelsoperate with other tunnels and security policies. From the same interface, you can control and monitorthe VPN tunnels.WatchGuard System Manager also allows you to safely manage Firebox® X Edge devices from a remotelocation. For more information, see the “Managing the Firebox X Edge and Firebox SOHO6” chapter.Steps in making VPNs• Configure a WatchGuard Management Server and Certificate Authority (CA)• Add Fireboxes or Firebox X Edge or SOHO devices to the Management Server• (Dynamic devices only) Configure the Firebox as a managed client• Make VPN resources, which define the networks that can connect through VPN tunnels• Make security templates to set the encryption type and authentication type• Make tunnels between the devicesConfiguring a Firebox as a Managed Firebox ClientTo allow WatchGuard® System Manager to manage a Firebox®, Edge, or SOHO with a dynamic IPaddress, you must enable it as a managed Firebox client. For instructions on how to enable a Firebox asa managed client, see Chapter 16 “Using the Management Server.”Adding VPN ResourcesFor a VPN, you can configure (and put a limit to) the networks that have access through the tunnel. Youcan make a VPN between hosts or networks. To configure the networks that are available through agiven VPN device, you define VPN resources. By default, WatchGuard® System Manager (WSM) adds andUser Guide 237