Install the IPSec Mobile VPN Client Software

Compatibility

For information about IPSec Mobile VPN Client operating system compatibility, go to IPSec Mobile VPN Client Requirements.

Before You Start

The installation process consists of two parts: install the client software on the remote computer, and import the end-user profile into the client. Before you start the installation, make sure you have the following installation components:

  • The WatchGuard IPSec VPN client installation file (Windows or macOS). The WatchGuard IPSec IPSec VPN client v12.00 and higher has different installers for Windows 32-bit and 64-bit platforms.
  • An end-user profile with a file extension of .wgx or .ini
  • Passphrase
  • A cacert.pem and a .p12 file (if you use certificates to authenticate)
    For information about how to create the certificate, go to Use Certificates for Mobile VPN with IPSec Tunnel Authentication.
  • User name and password

For instructions to generate the end-user profile, go to Generate Mobile VPN with IPSec Configuration Files.

Write the passphrase down and keep it in a secure location. You must use it during the final steps of the installation procedure.

Install the Client

To install the client on a Windows computer:

  1. Copy the Mobile VPN installation file (.zip) for the client OS to the remote computer and extract the contents of the file. Do not run the installation software from a CD or other external drive.
  2. Copy the end user profile (the .wgx or .ini file) to the same location on the remote (client or user) computer.
    If you use certificates to authenticate, copy the cacert.pem and .p12 files to the root directory.
  3. Double-click the .exe file you extracted in Step 1. This starts the WatchGuard Mobile VPN Installation wizard. You must restart your computer when the installation wizard completes.

To install the client on a macOS computer:

In Fireware v12.9.4 or higher, WatchGuard IPSec Mobile VPN Client for macOS v4.70 does not include firewall functionality.

  1. Copy the Mobile VPN disk image file (.dmg) to the remote computer. Do not run the installation software from a CD or other external drive.
  2. Copy the end user profile (the .wgx or .ini file) to the same location on the remote (client or user) computer.
    If you use certificates to authenticate, copy the cacert.pem and .p12 files to the root directory.
  3. Double-click the Mobile VPN installation file.
  4. Double-click the Watchguard Mobile VPN.pkg icon to start the WatchGuard Mobile VPN Installer.

For detailed instructions written for WatchGuard IPSec Mobile VPN Client end-users, go to End-User Instructions for IPSec Mobile VPN Client Installation.

To configure pre-logon VPN connections for Windows users, go to Connect the IPSec VPN Client Before Windows Log In in the WatchGuard Knowledge Base.

The WatchGuard Mobile VPN with IPSec client can have multiple profiles. For example, if you plan to migrate mobile VPN users to a different authentication method, you can configure the WatchGuard Mobile VPN with IPSec client with two different profiles so users can authenticate with either authentication method during the transition.

Related Topics

Troubleshoot Mobile VPN with IPSec

Use the macOS or iOS Native IPSec VPN Client

Use Mobile VPN with IPSec with an Android Device