I think what Barry is saying is that a DNAT and a VPN Tunnel are two different solutions and don't work well together. In general, your IPsec endpoint will not be visible to an IP in the tunnel on the other side.
Please explain what you wnat to accomplish - I think it's a lot easier with the UTM than you expect.
I think what Barry is saying is that a DNAT and a VPN Tunnel are two different solutions and don't work well together. In general, your IPsec endpoint will not be visible to an IP in the tunnel on the other side.
Please explain what you wnat to accomplish - I think it's a lot easier with the UTM than you expect.