Senior Network Engineer – WatchGuard VPN & Multi-Site Network Troubleshooting

The client has three locations: Cypress, Texas – WatchGuard T125, 500 Mbps symmetrical Internet Midland, Texas – WatchGuard T25 Louisiana location – currently no firewall appliance Current connectivity: Cypress ↔ Midland: Site-to-site VPN Louisiana ↔ Cypress: IKEv2 on-demand/remote-access VPN Louisiana VPN uses split tunneling DNS for VPN clients points to the Cypress domain controller Current VPN authentication uses local WatchGuard credentials MFA is not currently enabled Louisiana users access resources located at Cypress QuickBooks and other business resources are part of the environment Primary Issue The Louisiana connection reportedly performs adequately during normal operation but regularly disconnects around approximately 3:00 PM. The current MSP performs an action that restores connectivity, but we need to determine the root cause rather than continuing the workaround. Internet speed at the Louisiana location has already been tested and appears adequate. What We Need Help With We need a senior engineer who can work remotely with our existing engineer to: Review the WatchGuard T125 and T25 configurations Review existing site-to-site and IKEv2 VPN configurations Analyze VPN/firewall logs around the recurring 3 PM failure Troubleshoot IKE/IPsec negotiation, SA lifetime and rekeying Review VPN/session timeout settings Check routing, DNS and split-tunnel configuration Evaluate MTU/MSS, latency, packet loss and tunnel performance Review firewall policies and scheduled events/tasks Determine exactly why the Louisiana VPN disconnects Evaluate Cypress ↔ Midland site-to-site VPN health and performance Evaluate performance of QuickBooks/resources accessed across the VPN Recommend whether Louisiana should have a WatchGuard firewall and permanent site-to-site VPN Review current VPN security and recommend MFA/stronger authentication Identify any configuration or architecture improvements across all three locations Document findings and recommended changes We will obtain configuration backups before production changes are made.Required Experience Please apply only if you have strong hands-on experience with: WatchGuard Firebox WatchGuard T-Series appliances IPsec / IKEv2 VPN troubleshooting Site-to-site VPNs Remote-access VPNs Routing and subnetting DNS and Active Directory networking VPN logs and packet-level troubleshooting Multi-site Windows business environments Troubleshooting latency, packet loss, MTU/MSS and intermittent VPN failures Experience troubleshooting QuickBooks Desktop or database applications across WAN/VPN connections is a plus.