WatchGuard Firebox System 4.6 User Guide

CHAPTER 19Preparing a Host forRemote User VPNRemote user virtual private networking (RUVPN) establishes a secure connectionbetween an unsecured remote host and a protected network over an unsecurednetwork. RUVPN connects an employee on the road or working from home to trustedand optional networks behind a Firebox using a standard Internet dial-up connectionwithout compromising security.The WatchGuard Firebox System offers two types of RUVPN:• Remote User PPTP – Uses the Point-to-Point Tunneling Protocol. This type ofRUVPN is included with the basic WatchGuard package and supports up to 50concurrent sessions per Firebox. It works with any Firebox encryption level.• Mobile User VPN – Uses Internet Protocol Security (IPSec). This type of RUVPNis an optional feature of the WatchGuard package. It also requires that the Fireboxbe approved and upgraded to strong or medium encryption level.RUVPN requires configuration of both the Firebox and the end-user remote hostcomputers. This section describes how to configure a remote host for Remote UserVPN with PPTP. For information on configuring the Firebox, see “Configuring theFirebox for Remote User VPN” on page 133.For information on configuring a remote host for Mobile User VPN, see the MobileUser VPN brochure provided with Mobile User VPN licenses. You can download acopy from the LiveSecurity Service Web site.Preparing the client computersEvery computer used as a Remote User VPN with PPTP remote host must first beprepared with the following:• Operating system software• Device drivers• Internet service provider accountUser Guide 141