If you do not have a Management Server, we recommend that you specify a strong pre-shared key and change it on a regular basis. We recommend that you configure a certificate instead of a pre-shared key if you have a WSM Management Server. The IKEv1 Aggressive Mode vulnerability described in CVE-2002-1623 affects Mobile VPN with IPSec. In Fireware v12.5.4 to v12.8.x, enable and configure this feature at Subscription Settings > TDR Host Sensor Enforcement.įor more information about Endpoint Enforcement, see About Endpoint Enforcement.įor information about how to enable Endpoint Enforcement for IPSec groups, see Add Users to a Firebox Mobile VPN Group. Before you enable Endpoint Enforcement for Mobile VPN with IPSec groups in the Authentication > Servers configuration, enable and configure Endpoint Enforcement at Subscription Settings > Endpoint Enforcement (Fireware v12.9 or higher).

To limit mobile VPN connections to devices that follow corporate policy, you can use Endpoint Enforcement. If you use a third-party authentication server, follow the instructions in the documentation from the manufacturer. The users in the group can authenticate either to the Firebox or to a third-party authentication server included in your Firebox configuration.įor more information about how to add users to a group for local Firebox authentication, see Add Users to a Firebox Mobile VPN Group. You can enable Mobile VPN with IPSec for a group of users you have already created, or you can create a new user group. Configure the Firebox for Mobile VPN with IPSec

Fritz box vpn android dns