Locking Down an End-User Profile | WatchGuard Technologies V10.0

Locking Down an End-User Profile

Locking Down an End-User Profile

You can use the advanced settings to lock down the end-user profile so that users can see some set- tings but not change them, and hide other settings so that users cannot change them. We recommend that you lock down all profiles so that users cannot make changes to their profile.

1On the Mobile User VPN tab, click Advanced.

The Advanced Export File Preferences dialog box appears.

2To give mobile users only read-only access to their profiles, select the Make the security policy read-only in the MUVPN Client check box.

The Mobile VPN client always uses a virtual adapter, so you should not change the virtual adapter settings on this dialog box. The Mobile VPN client does not operate without a virtual adapter.

18	Mobile User VPN

Image 20

Contents

WatchGuardMobile VPN with IPSec Administrator Guide Address About Mobile VPN Client Configuration Files Before You Begin Select the Enable Muvpn for this account check box Enabling Mobile VPN for a Firebox User Account Configuring Global Mobile VPN Client Settings Get the user’s .wgx file Distributing the Software and Profiles Distributing the Software and Profiles End-user profile Distributing the Software and Profiles Mobile User VPN Before You Begin Configuring the Firebox for Mobile VPN Select a user authentication server Configuring the Firebox for Mobile VPN Configuring the external authentication server Modifying an Existing Mobile VPN Profile Adding Users to a Firebox Mobile VPN Group Confirm Use a certificate Phase2 Settings Defining advanced Phase 1 settings Configuring Wins and DNS Servers Allowing Internet access through Mobile VPN tunnels Locking Down an End-User Profile On the Mobile User VPN tab, click Advanced Seeing details on an Mobile VPN policy Configuring Policies to Filter Mobile VPN TrafficAdd individual policies Saving the Profile to a Firebox Using the Any PolicyRe-creating End-User Profiles Additional Mobile VPN Topics Making outbound IPSec connections from behind a Firebox Global VPN settings Adding feature keysTerminating IPSec connections Seeing the number of Mobile VPN licenses Mobile VPN Client Installation and Connection Installing the Mobile VPN with IPSec Client Window AutoStart No Autostart Select Configuration Profile ImportImporting the end-user profile Selecting a certificate and entering the PIN Connecting the Mobile VPN ClientUninstalling the Mobile VPN client Start All Programs WatchGuard Mobile VPN Mobile VPN Monitor Disconnecting the Mobile VPN clientControlling connection behavior Seeing Mobile VPN Log Messages Mobile User VPN client icon Securing Your Computer with the Mobile VPN Firewall Enabling the link firewall Enabling the desktop firewall Configuration Firewall SettingsAbout the desktop firewall Defining friendly networks Creating firewall rules General tab Local tab Remote tab