Technical Tip: How to create policy from sslvpn to interface when destination is a VIP object
Description
When creating a firewall policy from 'ssl.root', 'mgmt' or any interface while the destination address is VIPobject, following error message 'Failed to save changes: entry not found' can appear.
This article describes how to overcome this error.
Solution
To overcome this issue on GUI go to SSL-VPN portals and select 'Full-access' or any portal already created.
In this example 'Full-access' is used, has Tunnel and web mode enable.
VIP object does not support web mode.
In that case, change the specific portal only to have Tunnel mode access.
After disable the web mode access create the policy from ssl.root, mgmt where in the destination as a vip object.
