Skip to main content
mshroyer
New Member
August 29, 2017
Question

New Guy Question

  • August 29, 2017
  • 1 reply
  • 2492 views

Hello all, 

I am trying to run a remote user through an SSL VPN to an IPSEC VPN that goes to a different remote location. For example, A district manager checking on convenience stores from home. Is this possible? I've got the tunnels to the stores and i can get the users dialed in with SSL (or IPSEC)....it's the middle part that is giving me trouble.

    1 reply

    Agent_1994
    New Member
    August 29, 2017

    I'd need to take a look in detail in order to give you an accurate answer, but...

    Let's assume that the IPSEC VPN is working, and you have policies allowing traffic from the SSL VPN interface and user to the convenience stores.

    Does this policy has NAT enabled? If not, does the IPSEC tunnel's phase 2 allows traffic from the SSL VPN address range to the convenience stores?

    If you're not NATting, you will have to check routing and phase 2 parameters on the "remote" side too.

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT