Technical Tip: How To communicate the SSL-VPN users from the LAN users

The client PC is connected to the Fortigate through Forticlient and the client PC is able to access the internet as well as the LAN users.

Note.

The split tunnel is disabled.

In rare cases, LAN users might need to communicate with the SSL VPN client machine so all we need to have is LAN to SSL VPN policy.  However, in our case Split tunnel is disabled hence Simple policy should be sufficient.

LAN user IP is >> 172.31.135.25

And the policy is between LAN to SSL VPN.

Check the sniffer which clearly shows that traffic is coming from 172.31.135.25(LAN PC) and it is sent out through 10.212.134.208(SSL-VPN interface).

2.384320 port2 in 172.31.135.25 -> 10.212.134.208: icmp: echo request
2.384420 ssl.root out 10.5.21.115 -> 10.212.134.208: icmp: echo request
2.386556 ssl.root in 10.212.134.208 -> 10.5.21.115: icmp: echo reply
2.386585 port2 out 10.212.134.208 -> 172.31.135.25: icmp: echo reply