Microsoft Intune Integration with Mobile VPN with SSL

Microsoft Intune is a cloud-based endpoint management tool that organizations can use to manage users and devices. The Intune Company Portal app enables members of an organization to download and install organization-approved apps.

This document describes how to configure Microsoft Intune to make the WatchGuard Mobile VPN with SSL client available to devices in your organization through Company Portal.

Contents

• Microsoft Intune Integration with Mobile VPN with SSL
• • Contents
  • Integration Summary
  • Before You Begin
  • Configure Microsoft Intune
  • • Create an .intunewin File
    • Add a Group in Microsoft Intune
    • Add the App in Microsoft Intune
  • Test the Integration

Before You Begin

Before you begin these procedures, make sure that you:

• Download the Mobile VPN with SSL client. For more information, go to Download the Client Software.
• Have a global administrator or user management administrator account to log in to Microsoft Intune.
• Create a user in Microsoft Intune or synchronize an on-premises Active Directory user to Microsoft Entra ID and assign the user an Intune Plan 1 license.
• Download the Microsoft Win32 Content Prep Tool from GitHub as a .ZIP file and extract the contents to your computer.
• Enroll your Windows devices in Microsoft Intune.

Configure Microsoft Intune

To configure Microsoft Intune, you must:

1. Create an .intunewin File.
2. Add a Group in Microsoft Intune.
3. Add the App in Microsoft Intune.

Create an .intunewin File

To add the Mobile VPN with SSL client as an app in Microsoft Intune, you must first use the Microsoft Win32 Content Prep Tool to convert the WatchGuard Agent installer to the .intunewin format.

To create an .intunewin file:

1. On your computer, create a new folder and copy the Mobile VPN with SSL client to the folder. In our example, we name the folder Mobile VPN with SSL Client.
2. Create a new folder for the output. This is the folder where the intunewin is created when the process completes. In our example, we name the folder Mobile VPN with SSL Output.
3. From a Command Prompt window, go to the folder you extracted the contents of the Microsoft Win32 Content Prep Tool .ZIP file to.
4. Run the IntuneWinAppUtil.exe file with no parameters.
   
5. Type the path of the source folder you created in Step 1. In our example, we type:
   C:\Users\<username>\Documents\Mobile VPN with SSL Client
6. Press Enter.
7. Type the file name of the Mobile VPN with SSL client executable. In our example, we type:
   WG-MVPN-SSL_12_10_4.exe
8. Press Enter.
9. Type the path of the output folder you created in Step 2. In our example, we type:
   C:\Users\<username>\Documents\Mobile VPN with SSL Client Output
10. Press Enter.
11. Type N.
12. Press Enter.
    The .intunewin file is created in the output folder.

Add a Group in Microsoft Intune

When you add the Mobile VPN with SSL client as an app in Microsoft Intune in the next section, you can assign the app to user groups. Create a group of users that you want to assign the Mobile VPN with SSL client to.

To add a group in Microsoft Intune:

1. Log in to Microsoft Intune as an administrator.
2. Select Groups > All Groups > New Group.
   The New Group page opens.
3. In the Group Name text box, type a group name.
4. Click No Members Selected.
5. Select the users you want to assign the Mobile VPN with SSL client to, then click Select.
6. Keep the default values for all other settings.

7. Click Create.
   The group is created in Microsoft Intune.

Add the App in Microsoft Intune

When you add an app to Intune, you define the details shown for the app in Company Portal and configure settings such as device requirements, detection rules, and user assignments.

To add the Mobile VPN with SSL client app in Microsoft Intune:

1. Log in to Microsoft Intune as an administrator.
2. Select Apps > All Apps > Add.
   The Select App Type page opens.
3. From the App Type drop-down list, select Windows App (Win32).

4. Click Select.
   The Add App page opens.
5. Click Select App Package File.
   The App Package File page opens.
6. From the App Package File drop-down list, select the .intunewin file you created in Create an .intunewin File.

7. Click OK.
   The Add App page opens with additional tabs.
8. On the App Information page, in the Publisher text box, type a name. In our example, we type WatchGuard Mobile VPN with SSL.

8. Click Next.
   The Program page opens.
9. In the Install Command text box, enter the Mobile VPN with SSL client executable file name followed by the silent and verysilent parameters. In our example, we type: 
   "WG-MVPN-SSL_12_10_4.exe" /silent /verysilent
10. In the Uninstall Command text box, enter this command:
    “C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\unins000.exe” /silent /verysilent

11. Click Next.
    The Requirements page opens.
12. From the Operating System Architecture drop-down list, select one or more operating system architectures, depending on the devices used at your organization. In our example, we select 64-bit.
13. From the Minimum Operating System drop-down list, select the minimum operating system used at your organization. In our example, we select Windows 10 1607.

14. Click Next.
    The Detection Rules page opens.
15. From the Rules Format drop-down list, select Manually Configure Detection Rules.
16. Click Add.
    The Detection Rule page opens.
17. From the Rule Type drop-down list, select File.
18. In the Path text box, type
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL
19. In the File or Folder text box, type
    wgsslvpnc.exe
20. From the Detection Method drop-down list, select File or Folder Exists.

21. Click OK.
22. To open the Assignments page, click Next three times.
23. On the Assignments page, select an assignment type. In our example, we select Add Group from the Available For Enrolled Devices section.
24. Select the group you created in Add a Group in Microsoft Intune, then click Select.

25. Click Next.
26. Click Create.
    The Intune package uploads.

Test the Integration

To test the integration:

1. On your Windows device, install the Company Portal from the Microsoft Store.
2. Open the Company Portal and log in with the Microsoft Entra ID user.

3. Select the published app, then click Install.
   Wait a few moments. After the installation completes, the computer might restart.
4. Verify that you can connect to the VPN. For more information about how to connect to the VPN, go to Connect to Your Private Network.