This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Whats the best way to allow unrestricted traffic accross a Site to Site SSL VPN?

Hi,

I have set up a Site to Site SSL VPN and it works fine as i can connect to hosts on the other sites, but does the VPN use the NAT & Firewall rules or is it open? Its just some users would like to be able to browse the network and be able to see Hosts on the other Site LAN not just the local LAN, is this doable?

Also we have services that must use Broadcasts to work as you dont actually set up IP addresses, the software just autodetects the Server with the Service. Im assuming this is using broadcast to acheive this. So is there a way to get the 2 connected Sites to act like 1 single LAN? Would 1:1 NAT do this?

I have tried looking at the Firewall Log to see where traffic is being allowed or blocked but I cannot see any entries that seem like there using the VPN.

Can anyone help?

Thanks

JK

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 9 years ago

A RED is an SSL VPN tunnel using a proprietary protocol. Do you have Gateway Forwards Pings enabled at Network Protection > Firewall > ICMP?

doesnt this mean that one UTM will then control both networks
Depends how you've setup the RED.

how do I bridge it
Have you setup an Interface on the UTM for the RED connection? https://www.sophos.com/en-us/support/knowledgebase/116573.aspx Once this is done, you bridge the interfaces at Interfaces & Routing > Bridging

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Scott_Klassen over 9 years ago

A RED is an SSL VPN tunnel using a proprietary protocol. Do you have Gateway Forwards Pings enabled at Network Protection > Firewall > ICMP?

doesnt this mean that one UTM will then control both networks
Depends how you've setup the RED.

how do I bridge it
Have you setup an Interface on the UTM for the RED connection? https://www.sophos.com/en-us/support/knowledgebase/116573.aspx Once this is done, you bridge the interfaces at Interfaces & Routing > Bridging

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data