If you have a remote site connecting over a VPN tunnel that does not have a local domain server you can still provide Active Directory Authentication and security over Single Sign On. Simply configure the remote WatchGuard XTM to point back to the local IP address of your Global Catalog server and SSO will pass through. Policies at the remote site can then be secured and security logs maintained to meet compliance.
If you have a WatchGuard issue we will have a solution. Contact Us with Any Questions!