WatchGuard Firebox System 4.6 User Guide

Configuring shared servers for RUVPN• The IP addresses of the DNS and WINS servers in the trusted network thatperform IP address lookup on host alias names.• The usernames and passwords of those authorized to connect to the Firebox usingRUVPN.• For Mobile User VPN, you will also need:- Mobile User VPN license key- Target Firebox upgraded to strong or medium encryptionConfiguring shared servers for RUVPNRUVPN clients rely on shared Windows Internet Name Server (WINS) and DomainName System (DNS) server addresses. For information on configuring these servers,see “Entering WINS and DNS server addresses” on page 39.Adding remote access usersThe Firebox configuration file automatically includes two Firebox User groups calledpptp_users and ipsec_users. When a remote host connects and creates a tunnel,Policy Manager authenticates the username against the list of members for the groupassociated with the tunnel type. In other words, an incoming PPTP tunnel wouldauthenticate against the pptp_users group.Once authenticated, the Policy Manager then adds the remote client IP address to thegroup. Use the Firebox User group to configure services for incoming and outgoingRUVPN traffic.Because of the way Windows holds the username and password for subsequentlogins, one option to reduce end-user confusion is to assign the same RUVPN loginand password as those used for Windows NT login and password. This method,however, is less secure than using multiple passwords.RUVPN users must be added as Firebox users even if another authenticationmethod is used internally.Adding a member to built-in RUVPN user groupsThe process to add a member to the built-in RUVPN user groups is the same for bothPPTP and IPSec. The example below is for pptp_users. From Policy Manager:1 Select Setup => Authentication.2 Click the Firebox Users tab. To add a new user, click the Add button beneath theUsers list.There is also a button to access the Setup Firebox User dialog box from within the Mobile UserVPN wizard.3 Enter the username and password.Firebox usernames are case sensitive.134