WatchGuard Firebox System 4.6 User Guide

Configuring debugging options4 Enter the remote client username and password.These are assigned when you add the user to the pptp_users group. See “Using Remote UserPPTP” on page 146.5 Click Connect.Running Remote User PPTPWhen first starting the remote host (before connecting to the ISP or to the Firebox),the user may be prompted for a name, password, and possibly even a domain. Thesevalues are what Windows assumes the remote host uses to connect to the networkbehind the Firebox. However, if Windows finds a discrepancy, it displays a loginprompt for the network with the name, password, and domain that would be used ifthe remote host were at an office connecting directly to the LAN.Remote User PPTP is usually set up such that the remote machines usenonpublic IP addresses from the range used behind a Firebox. If the “UseDefault Gateway on Remote Network” parameter is enabled, and you try tobrowse the Internet during a Remote User PPTP session, the Fireboxtransmits the private address as the source IP address in the packetheader. Because the remote host was assigned an address from a privateaddress pool, a public Web site will not know how to route the returntraffic, and will ignore your request. Therefore, browse the Internet beforeor after you are connected to the Firebox, but not during a Remote UserPPTP session.If simultaneous access to the Internet and a private network is required,contact WatchGuard Support for alternative solutions.Configuring debugging optionsWatchGuard offers a selection of debugging options that you can set to gatherinformation and help with future troubleshooting.For information on how to enable logging for IPSec, see “Debugging Mobile UserVPN” on page 140. For information on how to enable logging for PPTP, see“Debugging Remote User VPN (PPTP)” on page 140.User Guide 147