SETUP SSL VPN WATCHGUARD PRO
SETUP SSL VPN WATCHGUARD MAC

Any time you make a change to the SSL VPN settings, it clears all of the users from the group that allows SSL VPN access. Here's a particularly annoying bug I discovered yesterday. So, you have to be really careful to make sure everything is there before you click 'save' to make sure you're actually doing what you think you are. Sometimes it displays the whole page, but doesn't propagate all of the settings. It's all Flash, which looks real purty, but kind of sucks when it comes to actually, you know, WORKING. Second, the web management interface is extremely wonky. (By the way, it works just fine on Windows SSL VPN clients, so I know it's not a config error on the firewall.) How something this basic got by their QA department is totally beyond me. Watchguard has confirmed that this is a bug, but they cannot commit to a time frame for a fix. It then will respond to DNS requests for internal hosts only - that is to say, it breaks name resolution for anything outside the VPN. The moment you establish the tunnel, it overwrites your DNS settings with the nameserver for the secure network. It connects up just fine, but split DNS is broken. I really wanted to love it, because it's a lot of promised functionality for a great price, but I'm extremely disappointed in this purchase.ДЇirst of all, the SSL VPN does not work correctly on a Mac.

SETUP SSL VPN WATCHGUARD MAC

Do not buy Watchguard if you need Mac support. Well, here we are a few weeks later, and I'm reporting in as promised.ДЄnd the verdict is. That being said, I'm happy to report I have no coexistence issues. I do find myself disappointed that a standard hasn't developed for delivering an SSL/TLS VPN that would permit use of a single, possibly OS integrated, client. VPN delivered over TCP 443 are really quite convenient as some places (companies, hotels, etc) limit outbound ports, including UDP/TCP 5 preventing IPSEC negotiation. I'm still trying to pin this down as it's a pain for my clients. The biggest issue I have is that the NetExtender client doesn't always correctly set the appropriate DNS server or search domain, so name resolution doesn't always work as expected. They're all effective with few to no issues.

SETUP SSL VPN WATCHGUARD PRO

I can't speak to the WatchGuard SSLVPN solution, but I use Cisco Anењњonnect SSLVPN, SonicWALL NetExtender SSLVPN (both with their SMB SSLVPN appliances and their firewalls), and SonicWALL's Aventail Connect with their enterprise SSLVPN appliances all on a weekly basis with my 2009 17' MacBook Pro running Snow Leopard.

Setup ssl vpn watchguard