Connecting IPSec Remote to internal interface

Hi Buket Bidik,

Thank you for reaching out to the Communtiy! 

Unfortunately, the listening interface must be in the WAN zone for IPsec site-to-site VPN. It's not possible to configure IPsec site-to-site VPN on an interface that is in a LAN zone. 

Thanks,

Hi Patel, 

Thanks for your reply. İ mean client to site vpn, not site to site. İs this also not possible? 

Hi Buket Bidik,

No, IPsec Remote and site-to-site VPN can't use an interface that is in the LAN zone. 

Thanks,

Okay. Then how can i connect vpn clients to the wan interface from internal network? İs there a way to do this?

Hi Buket Bidik,

The remote access VPN feature is designed for remote users and not for the users on the internal network. 

However, if you really need your internal users to connect to the firewall through VPN, try to use SSL remote access VPN, since it by default can connect to all interfaces, it might work for the users in the LAN zone. 

Thanks,