The virtual IP addresses cannot be used for anything else on your network.

To use the native IPSec VPN client to make a connection to your Firebox, you must configure the VPN settings on your Firebox to match those on the iOS or macOS device.

For more information, see Install the IPSec Mobile VPN Client Software.

Make sure the name is unique among VPN group names, as well as all interface and VPN tunnel names.

Make sure that the method of authentication you select is enabled.

If you use Active Directory as your authentication server, the users must belong to an Active Directory security group with the same name as the group name you configure for Mobile VPN with IPSec.

For more information, see Configure the External Authentication Server.

If this profile is only used for connections by VPN clients on macOS or iOS devices, set the SA Life to 1 hour to match the client setting.

When the SA Life is set to 8 hours, WatchGuard IPSec Mobile VPN clients rekey after 8 hours, but the VPN client on the macOS or iOS device uses the smaller rekey value of 1 hour.

SHA2 is not supported for Phase 2 for Mobile VPN with IPSec connections from macOS and iOS devices.

The VPN client on the macOS or iOS device does not support split tunneling.

To add an IP address or a network IP address to the virtual IP address pool, select Host IP or Network IP, type the address, and click Add.

If FireCluster is configured, you must add two virtual IP addresses for each Mobile VPN user.

For example, if you specify the DNS server 10.0.2.53 in the Network DNSWINS settings, mobile VPN clients use 10.0.2.53 as a DNS server.

For example, if you specify example.com as the domain name and 10.0.2.53 as the DNS server, mobile clients use example.com for unqualified domain names and 10.0.2.53 as the DNS server.

Make sure the name is unique among VPN group names, as well as all interface and tunnel names.

The number of IP addresses in the virtual IP address pool should be the same as the number of Mobile VPN users.

If a FireCluster is configured, you must add two virtual IP addresses for each Mobile VPN user.

Watchguard Mobile Vpn App For Mac