WatchGuard now supports Remote Access Points! This method of configuration allows for quick deployments of multiple RAP’s using the WatchGuard Cloud Access Point Sites that store configuration settings. The infrastructure requirements for this implementation are WatchGuard Cloud supported access point models, and a Cloud Managed Firebox.
A Remote Access Point is useful when work from home users have multiple devices that need to connect back to the office network via VPN. In a typical Mobile VPN, only the laptop or desktop with the specific Mobile VPN client would be able to connect. When utilizing a Mobile VPN with IKEv2, only one user can connect from each external IP address as well. With a Remote Access Point using an Access Point VPN, the access point has a Branch-Office Virtual Private Network (BOVPN) between it and the cloud managed Firebox. This allows home users to simply connect to the access point SSID, and they have a BOVPN connection to the data center or corporate office.
WatchGuard has a full configuration guide for this set-up, listed below: