[vpn-help] WatchGuard XTM 505 and IPSec-VPN

Ryan B. Boulo ryan at nfmc.org
Mon Aug 5 10:48:52 CDT 2013


You need to upgrade the firewall to version 11.7.3

Link to upgrade notes:
http://www.watchguard.com/support/release-notes/xtm/11/en-US/EN_ReleaseNotes_FirewareXTM_11_7_2/index.html#cshid=XTM/en-US/upgrade_simple.html


From: Tommy Farnsworth [mailto:tommy.farnsworth at icloud.com]
Sent: Friday, August 02, 2013 7:04 PM
To: vpn-help at lists.shrew.net
Subject: [vpn-help] WatchGuard XTM 505 and IPSec-VPN

I am sort of new to VPNs, but am learning.

I have a WatchGuard XTM 505 with 11.6.3 firmware and Management software 11.6.
I set up a Mobile VPN using IPSec.
Clients are using the Shrewsoft VPN client.

All of the clients connected fine and it seems to work with one major problem, they all get connected after an hour or so on connection. When this happens it causes a loss of work on their part and they have to reconnect.  Is there a way to keep the connection open longer?

In the WG unit there is a setting for ConnectionMode which can be manual, Automatic, or Variable. The default is manual.
I set up a second MobileVPN with IPSec to duplicate the original one as I don't want to do anything to mess up what they already have, as they do get some work done and are dependent on it.
In this duplicate one I set the ConnectionMode to Automatic and then regenerated the .wgx files that are then imported into the ShrewSoft VPN client.

With this new connection I can connect to the VPN, but it never really gets all the way. I get assigned an IP from the correct pool, but I can't ping the host that I should be able to.
I can run the original profile and it works fine. I can't see anything that is different about these other than the one setting of the ConnectionMode. I have changed the ConnectionMode back to manual on this second profile and still no connect.

If anyone has any ideas on this I'd be thankful and happy to try them. I'm not clear on where logs are, so if you need logs, let me know where I can find them and I'll go over them myself also.

Thanks,

~ Tommy



________________________________
Confidentiality Statement:
As stated in North Florida Medical Centers, Inc (NFMC) Notice of Information Practices, to comply with the Privacy Rule in Title II of HIPAA, NFMC will maintain the privacy of patient's health information, including implementing reasonable and appropriate physical, administrative, and technical safeguards to protect the information. The attached information is CONFIDENTIAL and is protected under the Privacy Act of 1974. It is intended for the use of the addressee(s) identified above. This material must be destroyed appropriately when its use is no longer required. If the reader of this message is not the intended recipient(s) or the employee or agent responsible for delivering the attached information to the intended recipient(s), the reader should notify NFMC immediately and return the original message to the address identified via U.S. Mail. Please note that any dissemination, distribution or copying of this communication is strictly prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20130805/56651ff4/attachment.html>


More information about the vpn-help mailing list