I've been playing about with these for a few days and I'm getting stumped a little.
The only way I can connect both clients is by placing an "Any IPv4" or "Any" in the local networks tab.
That then gives the remote client access to all (as you would expect)
However, the issue is......... I've not put any firewall rules in to allow it!!
Using a Preshared Key
If I use a preshared key, I don't get any option to allow automatic firewall rules. Nothing. So I can only assume it puts them in although I can't see them under any rule (manual or automatic). So not quite sure whats going on there. If I place a manual firewall rule at the top with the source of the remote ipsec vpn pool, any service, anywhere, block, it doesn't have any effect?? That's serious stuff!
If I use a certificate
If I use a certificate, I get the option to use automatic firewall rules. If I choose not to (ie leave it unticked), access is granted to everything as above. So that's not right either.
If I use a more restrictive network (rather than any)
Both clients won't connect as there is no policy for 0.0.0.0/0. I can also use "internet" instead of "Any" but get the same results ie access to everything
I'm stuck and can't use IPsec (which I need to use) and can't understand why a remote client can bypass the top firewall rule which is set to block anything coming from it?
This thread was automatically locked due to age.
