VPN: Site to Site and Remote Access SSL VPN Tunnel Type

UTM Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 4 replies
Answers 1 answer
Subscribers 1 subscriber
Views 16609 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN Tunnel Type

BlueRue over 9 years ago

What type of tunnel does the SSL VPN create?

Full or Split, if it creates a full tunnel is there a way to change it to split?

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 9 years ago

You configure it for either, based on what you add to the Local Networks list for the SSL VPN profile. It'll only be full if you populate with a 0.0.0.0 definition.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BlueRue over 9 years ago in reply to Scott_Klassen

So by setting:

It will be a split tunnel, and allow them to only access that server/host and nothing else on the network?

No to make it a full tunnel I would in that list add "External" and "Internal" networks?
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 9 years ago in reply to BlueRue

You should add ANY built-in network definition.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago in reply to BlueRue

To be clear, if you wanted to only offer "Server" and the internet connection, you would just add :"Internet." That would not be a Full tunnel as you'd get with vilic's correct prescription for that.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 9 years ago in reply to BlueRue

To be clear, if you wanted to only offer "Server" and the internet connection, you would just add :"Internet." That would not be a Full tunnel as you'd get with vilic's correct prescription for that.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data