Skip to main content
Changuelco
New Member
April 19, 2017
Question

SSL VPN Internet Access lost after WAN-LLB implementation

Hi guys!

 

Im running on a 200D (5.4.2) WAN LLB. Before this I had a SSLVPN, not split tunneling, to route all the internet traffic through the fortigate when connected. After the implementation of the WAN LLB Im not able to create a policy from ssl.root to WAN LLB. 

 

Any idea?

 

Regards,

--

Changuelco

    3 replies

    pyy
    New Member
    April 19, 2017

    Hi Changuelco, WLB is a virtual interface and cannot support this configuartion as well policy route . I suggest to you to create a policy from ssl.root to one of the 2 wan interfaces and perform a policy route in order to route this traffic to internet ( example src ssl.subnet dst 0.0.0.0 0.0.0.0 to wan1). additional policy route should be added before this in order to stop the policy route for your local subnets .

     

     

    Changuelco
    New Member
    April 20, 2017

    That should be great... the only thing is when the WLB is configure, the interfaces attached to the WLB are not available to be selected on a firewall policy...

    SteveG
    New Member
    March 2, 2018

    Did you ever find a solution to this @changuelco?

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT