Connect VPN SSL by other WAN interface
Hi There,
We using Fortigate FG-60D.
please kindly advice in create policy.
we have 2 WAN connection.
WAN-2 dedicated for VPN connection to interface Port-1 (both for VPN IPSec point-to-point & VPN SSL for mobile user).
WAN-1 for daily operational.
Port-1 for Intranet.
Port-2 for front desk.
for our internal policy,
1. all front desk can't access our Intranet for work.
2. all front desk only connected to Port-2, and connect internet using WAN-1.
some staff front desk have special privilege to access Port-1, but must use vpn ssl connection.
1. we have create vpn ssl User for that staff
2. vpn ssl connection can be accessed by outside office.
summary for interfaces and policy:
1. WAN-1 for operational internet.
2. WAN-2 for dedicated to VPN IPSEC and VPN SSL
3. Port-1 for LAN
4. Port-2 for Wifi to Internet.
a. Port-1 -> WAN-1 is blocked.
b. Port-2 -> WAN-2 is allowed
c. VPNSSL(WAN-2) -> Port-1 is allowed
d. Port-1 -> WAN-2 is blocked
user can't connect to VPN SSL while use internet connection WAN-1.
looking for help / guidance please.
thanks in advance.
