Photogregor
Technical User
Hi,
on W7 computer I installed SSLVPN-Client (11.3.5), then I did SSLVPN-Configuration on the Firebox (x750e, 11.3.4), chose "Routed VPN Traffic" as it is determined by our customer and left all other settings as default. Client connects fine and user is authenticated by radius (SBS 2011) without problems. I can see the SSLVPN-connection details on the Firebox and ipconfig on the client shows 192.168.113.2 as IP address of TAP device. Setup of SSL VPN on Firebox created three roules, an any-rule ("Allow SSLVPN-Users") and two other rules called "WatchGuard SSLVPN" and "WatchGuard Authentication". So far everything seems to be ok.
But I cannot ping internal subnet (192.168.1.0/24). Even cannot ping 192.168.113.254, which is reported as Firebox-DHCP-Server by ipconfig. In Traffic Monitor I can see that traffic from client gets blocked. There seems to be missing another rule. I'm searching for a solution now for hours, could someone guide me into the right direction please?
Additional information: Clients IP address is 192.168.1.115, it is member of the SBS-2011-Domain.
Thanks and regards,
Stefano
on W7 computer I installed SSLVPN-Client (11.3.5), then I did SSLVPN-Configuration on the Firebox (x750e, 11.3.4), chose "Routed VPN Traffic" as it is determined by our customer and left all other settings as default. Client connects fine and user is authenticated by radius (SBS 2011) without problems. I can see the SSLVPN-connection details on the Firebox and ipconfig on the client shows 192.168.113.2 as IP address of TAP device. Setup of SSL VPN on Firebox created three roules, an any-rule ("Allow SSLVPN-Users") and two other rules called "WatchGuard SSLVPN" and "WatchGuard Authentication". So far everything seems to be ok.
But I cannot ping internal subnet (192.168.1.0/24). Even cannot ping 192.168.113.254, which is reported as Firebox-DHCP-Server by ipconfig. In Traffic Monitor I can see that traffic from client gets blocked. There seems to be missing another rule. I'm searching for a solution now for hours, could someone guide me into the right direction please?
Additional information: Clients IP address is 192.168.1.115, it is member of the SBS-2011-Domain.
Thanks and regards,
Stefano