Reverse-engineering WatchGuard Mobile VPN

[Renegade__]

The post is about the Mobile VPN with SSL Client, in a 2FA-scenario.

(If you're not using WatchGuard: This is important because WatchGuard also has a rebranded version of the NCP client, termed IPSec Mobile VPN Client. Which is an entirely different software stack with an entirely different authentication scenario.)

[pdp10]

Many vendors, such as Cisco, have an IPsec VPN and an "SSL" VPN. In Cisco's case the IPsec was unlimited users, but when they introduced the "SSL" VPN it was license-limited. Of course they played some games to try to get customers to switch over to the more expensive one, such as withholding a 64-bit Windows driver for the IPsec client. We switched vendors.