Skip to main content
technician
technician
New Member
April 4, 2017
Question

does VPN recognizes PBR

  • April 4, 2017
  • 1 reply
  • 5213 views

Hi, our internet Firewall is a Fortigate 100D. We were required to use 3rd party vpn softwares like express vpn, Astrill VPN, HMA VPN, etc. mainly because we need to access some China based websites which is much faster going thru vpn. 

 

But the problem is every time we connect thru vpn, our public IP changes and this VPN public IP is not recognize by the China based website mainly because they had set a filter for security purposes. In order for us to solve this temporarily, besides connecting to the vpn, we added a "route add" in our Windows 7 computers. This is to ensure that when vpn is connected traffic going to the specific China based websites will not route thru vpn traffic, instead will just route to our local ISP traffic to be recognise by the China based website. Other than the China based websites, all other traffics route thru the VPN connection. 

 

Is there a way to do this via Fortigate? 

 

Thanks

Jeff

    1 reply

    Alby23
    Alby23
    New Member
    April 4, 2017

    Sorry, bad reply.

    MikePruett
    MikePruett
    New Member
    April 4, 2017

    You can (I have done it) deployed software based VPN's like OpenVPN on the inside of the network and then use policy based routes to send the interesting traffic to the tunnel.

     

    It is cumbersome and I much prefer just using the built in IPSec configuration of the Gate but you can definitely do it.

    technician
    technicianAuthor
    New Member
    April 5, 2017

    ok but where do I point the destination? the gateway IP of the vpn? It even brings my second problem that whenever they successfully connects to the vpn, any policy is being bypassed thus giving them access to all restricted sites like social, video stream, etc

     

    Thanks

    Jeff

    Terms & ConditionsAccessibility statement