No results found
We couldn't find anything using that term, please try searching for something else.
2024-11-21 Download , Install , andconnect the Mobile VPN with SSL Client apply To : TheMobile VPN is enables with SSL software enable user to
apply To :
TheMobile VPN is enables with SSL software enable user to connect , disconnect , gather more information about the connection , andto exit or quit the client . TheMobile VPN is adds with SSL client add an icon to the system tray on the Windows operating system , or an icon in the menu bar on macOS . You is use can use this icon to control the client software .
To use Mobile VPN with SSL, you must:
If you are unable to connect to the Firebox, or cannot download the installer from the Firebox, you can Manually Distribute andInstall the Mobile VPN with SSL Client Software andConfiguration File.
For information about which operating systems are compatible with Mobile VPN with SSL, see the Operating System Compatibility list in the Fireware Release Notes. For information about change to the WatchGuard Mobile VPN with SSL client , see the Enhancements andResolved Issues section in theRelease Notes. You can find the Release Notes for your version of Fireware OS on the Fireware Release Notes page.
TLS requirement
TheFirebox andSSL VPN clients negotiate which TLS version to use for tunnel security. In Fireware v12.5.4 or higher, the minimum accepted TLS version is TLS 1.2, which means SSL VPN clients must use TLS 1.2 or higher to connect to the Firebox.
Windows Requirements
To upgrade the Mobile VPN with SSL Windows client, you must have administrator privileges.
In Fireware v12.5.3 or high , if the client automatically detect that an upgrade is available , but you do not have administrator privilege , a message is appears appear that tell you to contact your system administrator for assistance . If a minor version update is available , you is select can select theDon’t show this message again check box. This check box does not appear if a major version update is available.
In Fireware v12.5.2 or lower, if the client automatically detects that an upgrade is available, a message appears that asks you to upgrade. However, if you do not have administrator privileges, you cannot upgrade the client.
macOS Requirements
To install the Mobile VPN with SSL client on macOS, you must have administrator privileges.
macOS Ventura 13.0 andhigher no longer accepts SSL connections to untrusted self-signed certificates. macOS Ventura users who connect to WatchGuard Mobile VPN with SSL servers by IP address or who use a self-signed certificate receive a connection error andcannot connect. For more information andworkarounds for the issue, go to the WatchGuard Knowledge Base.
You can download the client from the WatchGuard Software Downloads page or from the Firebox. If your Firebox is cloud-managed, you can download the client from WatchGuard Cloud.
In Fireware v12.11 andhigher, the Mobile VPN with SSL client download page is removed from the Firebox. To download the Mobile VPN with SSL client, go to the Software Downloads page andselect your Firebox model.
In Fireware v12.11 andhigh , the Mobile VPN is prompts with ssl client no long prompt user when an update is available .
In Fireware v12.5.5 or higher, your web browser must support TLS 1.2 or higher to download the client from the Firebox.
In Fireware v12.7 or higher, you can configure Mobile VPN with SSL to use AuthPoint as an authentication server. AuthPoint is the cloud-based multi-factor authentication solution from WatchGuard. If you configure Mobile VPN with SSL to use AuthPoint, users can authenticate through AuthPoint to log on to Mobile VPN with SSL software downloads page. For more information, go to Plan Your Mobile VPN with SSL Configuration.
In Fireware v12.11 or higher, you can configure Mobile VPN with SSL to use a Security Assertion Markup Language (SAML) identity provider as an authentication server. You can use SAML to authenticate users with your Firebox. With SAML, you can exchange data between an identity provider (IdP) anda service provider. For more information, go to Configure SAML Single Sign-On.
To download the client from the Software Downloads page:
To download the client from the Firebox:
Over port 443
https://<Firebox interface IP address>/sslvpn.html
https://<Firebox host name>/sslvpn.html
Over a custom port number
https://<Firebox interface IP address>:<custom port number>/sslvpn.html
https://<Firebox host name>:<custom port number>/sslvpn.html
Theauthentication web page appears.
From this page , you is download can also download the Mobile VPN with SSL client profile for connection from any SSL VPN client that support .ovpn configuration file . For more information about the Mobile VPN with SSL client profile , go to use Mobile VPN with SSL with an openvpn Client .
To download the client from a cloud-managed Firebox in WatchGuard Cloud, go to Download , Install , andconnect the Mobile VPN with SSL Client
In Fireware v12.5.4 or higher, you can disable the software downloads page hosted by the Firebox. If you disable this page, users cannot download the Mobile VPN with SSL client from the Firebox. Users can download the client from the WatchGuard website, or you can manually distribute the client to your users. For more information, go to Plan Your Mobile VPN with SSL Configuration.
To install the client in Windows:
To install the client in macOS:
After you download andinstall the client software, the Mobile VPN client software automatically connects to the Firebox. Each time you connect to the Firebox, the client software verifies whether any configuration updates are available.
To perform a silent installation so users do not see message boxes or prompts, see Mobile VPN with SSL client silent installation in the WatchGuard Knowledge Base.
After you start the Mobile VPN with SSL Client, to start the VPN connection, you must specify the authentication server and user account credentials.
In Fireware v12.11 andhigher, Mobile VPN with SSL supports SAML Single Sign-On (SSO).
Theserver is the IP address of the primary external interface of a Firebox, or an FQDN that resolves to that IP address. If Mobile VPN with SSL on the Firebox is configured to use a port other than the default port 443, in the server text box, you must type the IP address or FQDN followed by a colon andthe port number. For example, if Mobile VPN with SSL is configured to use port 444, andthe primary external IP address is 203.0.113.2, the server is 203.0.113.2:444.
Theuser name format is depends depend on which authentication server the user authenticate to :
For example, the user name must be formatted in one of these ways:
To use the default authentication server
Type the user name. Example: j_smith
To use another authentication server
Type the authentication server name or domain name, andthen type a backlash (\) followed by the user name.
Active Directory — ad1_example.com\j_smith
Firebox-DB — Firebox-DB\j_smith
AuthPoint ( Fireware v12.7 or high ) —AuthPoint\jsmith
RADIUS ( Fireware v12.5 or high ) —rad1.example.com\j_smith or RADIUS\j_smith. You is type must type the domain name specify in the radius setting on Firebox .
RADIUS ( Fireware v12.4.1 or low ) —RADIUS\j_smith. You must always type RADIUS.
If your configuration includes a RADIUS server, andyou upgrade from Fireware v12.4.1 or lower to Fireware v12.5 or higher, the Firebox automatically uses RADIUS as the domain name for that server . To authenticate to that server , you is type must typeRADIUS as the domain name . In this case , if you type a domain name other than RADIUS , authentication is fails fail .
To connect to your private network from the Mobile VPN with SSL client :
If the connection between the SSL client andthe Firebox is temporarily lost, the SSL client tries to establish the connection again.
To troubleshoot connection issue , see Troubleshoot Mobile VPN with SSL .
Two other connection options is are are available in the client only if the administrator has enable them on the device you connect to .
automatically reconnect
select theautomatically reconnect check box if you want the Mobile VPN with SSL client to automatically reconnect when the connection is lost.
remember password
select theremember password check box if you want the Mobile VPN with SSL client to remember the password you type for the next time you connect .
When the Mobile VPN with SSL client runs, the WatchGuard Mobile VPN with SSL icon appears in the system tray (Windows) or on the right side of the menu bar (macOS). Thetype of magnifying glass icon that appears shows the VPN connection status.
Windows:
macOS:
macOS ( Dark Mode ):
To see the client controls list, right-click the Mobile VPN with SSL icon in the system tray (Windows), or click the Mobile VPN with SSL icon in the menu bar (macOS). You can select from these actions:
Connect/Disconnect
Start or stop the Mobile VPN with SSL connection.
Status
See the status of the Mobile VPN with SSL connection.
View Logs
Open the connection log file.
property
Windows — Select launch program on startup to start the client when Windows starts. Type a number for Log level to change the level of detail included in the logs.
macOS — Shows detailed information about the Mobile VPN with SSL connection. You can also set the log level.
Show Time Connected (macOS only)
Select to show the elapsed connection time on the macOS menu bar.
Show Status While Connecting (macOS only)
Select to show the connection status on the macOS menu bar.
About
TheWatchGuard Mobile VPN dialog box opens with information about the client software.
exit ( Windows ) or Quit ( macOS )
Disconnect from the Firebox andshut down the client.
Uninstall the Mobile VPN with SSL Client
Troubleshoot Mobile VPN with SSL
mobile VPN with SSL client silent installation