Microsoft Intune Integration with Mobile VPN with SSL

Microsoft Intune is a cloud-based endpoint management tool that organizations can use to manage users and devices. The Intune Company Portal app enables members of an organization to download and install organization-approved apps.

This document describes how to configure Microsoft Intune to make the WatchGuard Mobile VPN with SSL client available to devices in your organization through Company Portal.

Contents

• Microsoft Intune Integration with Mobile VPN with SSL
  • Contents
  • Integration Summary
  • Before You Begin
  • Configure Microsoft Intune
    • Create an .intunewin File
    • Add the App in Microsoft Intune
  • Test the Integration

Before You Begin

Before you begin these procedures, make sure that you:

• Download the Mobile VPN with SSL client. For more information, go to Download the Client Software.
• Have a global administrator or user management administrator account to log in to Microsoft Intune.
• Create a user in Microsoft Intune or synchronize an on-premises Active Directory user to Microsoft Entra ID and assign the user an Intune Plan 1 license.
• Download the Microsoft Win32 Content Prep Tool from GitHub.
• Enroll your Windows devices in Microsoft Intune.

Configure Microsoft Intune

To configure Microsoft Intune, you must:

1. Create an .intunewin File.
2. Add the App in Microsoft Intune.

Create an .intunewin File

To add the Mobile VPN with SSL client as an app in Microsoft Intune, you must first use the Microsoft Win32 Content Prep Tool to convert the WatchGuard Agent installer to the .intunewin format.

To create an .intunewin file:

1. On your computer, create a new folder and copy the Mobile VPN with SSL client to the folder. In our example, we name the folder Mobile VPN with SSL Client.
2. Create a new folder for the output. This is the folder where the .intunewin file is created when the process completes. In our example, we name the folder Mobile VPN with SSL Output.
3. From a Command Prompt window, go to the folder you downloaded the Microsoft Win32 Content Prep Tool file to.
4. Run the IntuneWinAppUtil.exe file with no parameters.
   
5. Type the path of the source folder you created in Step 1. In our example, we type:
   C:\Users\<username>\Documents\Mobile VPN with SSL Client
6. Press Enter.
7. Type the file name of the Mobile VPN with SSL client executable. In our example, we type:
   WG-MVPN-SSL_2026_1.exe
8. Press Enter.
9. Type the path of the output folder you created in Step 2. In our example, we type:
   C:\Users\<username>\Documents\Mobile VPN with SSL Client Output
10. Press Enter.
11. Type N.
12. Press Enter.
    The .intunewin file is created in the output folder.

    

Add the App in Microsoft Intune

When you add an app to Intune, you define the details shown for the app in Company Portal and configure settings such as device requirements, detection rules, and user assignments.

To add the Mobile VPN with SSL client app in Microsoft Intune:

1. Log in to Microsoft Intune as an administrator.
2. Select Apps > All Apps > Create.
   The Select App Type page opens.
3. From the App Type drop-down list, select Windows App (Win32).

   

4. Click Select.
   The Add App page opens.
5. Click Select App Package File.
   The App Package File page opens.
6. From the App Package File drop-down list, select the .intunewin file you created in Create an .intunewin File.

   

7. Click OK.
   The Add App page opens with additional tabs.
8. On the App Information page, in the Publisher text box, type a name. In our example, we type WatchGuard Mobile VPN with SSL.

9. In the App Version text box, type the full version number of the Mobile VPN with SSL client. In our example, we type 2026.1.0.

   

10. Click Next.
    The Program page opens.
11. In the Install Command text box, enter the Mobile VPN with SSL client executable file name followed by the silent and verysilent parameters. In our example, we type: 
    "WG-MVPN-SSL_2026_1.exe" /autokill /silent /verysilent
12. In the Uninstall Command text box, enter this command:
    "C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\unins000.exe" /silent /verysilent
    

    

13. Click Next.
    The Requirements page opens.
14. For Check Operating System Architecture, select Yes. Specify the Systems the App Can Be Installed On.
15. Select the Install on x86 System and Install on x64 System check boxes.
16. From the Minimum Operating System drop-down list, select the minimum operating system used at your organization. In our example, we select Windows 10 1607.

    

17. Click Next.
    The Detection Rules page opens.
18. From the Rules Format drop-down list, select Manually Configure Detection Rules.
19. Click Add.
    The Detection Rule page opens.
20. From the Rule Type drop-down list, select File.
21. In the Path text box, type
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL
22. In the File or Folder text box, type
    wgsslvpnc.exe
23. From the Detection Method drop-down list, select String (version).
24. From the Operator drop-down list, select Equals.
25. In the Value text box, enter the full version number of the Mobile VPN with SSL client with a .0 appended to the end of the value. In our example, the full version number is 2026.1.0, so we type 2026.1.0.0.

    

26. Click OK, then click Next until the Assignments page opens.
27. On the Assignments page, select an assignment type. You can assign the app to all users, all devices, or groups that you have created.
28. Click Next.
29. Click Create.
    The Intune package uploads.

Test the Integration

You can test the integration in the Company Portal app. If the app did not install automatically, you can download it from the Microsoft Store.

To test the integration:

1. Open Company Portal and log in with the Microsoft Entra ID user.

   

2. Select the published app, then click Install.
   Wait a few moments. After the installation completes, the computer might restart.
3. Verify that you can connect to the VPN. For more information about how to connect to the VPN, go to Connect to Your Private Network.