SSL VPN without NAT?

Forum|Forum|6 years ago
April 30, 2020
8 replies
11636 views

Can an SSL VPN run without NAT?

FortiClient 10.200.0.x -> Router 10.0.0.1 -> FGT 10.0.0.10 -> Internal Network 10.0.0.X

Running into a problem with internal software trying to connect back to the client but it only sees the client as 10.0.0.10 and not 10.200.0.x. Is it as simple as disable NAT on the policy? Or is there more to it than that?

Thanks

6.0

Best answer by Toshi_Esumi

If the internal software makes contact to the clients spontaneously, don't forget to add a policy toward ssl.root.

rwpatterson

New Member

Scratch this entry.

rwpatterson

New Member

NAT should only be needed on policies facing the Internet. Any policy that doesn't reach out to public space should be safe to have NAT disabled.

random_guyAuthor

Explorer

OKay, so I can simply disable NAT on the policies... I'll give it a go.

Toshi_EsumiAnswer

SuperUser

If the internal software makes contact to the clients spontaneously, don't forget to add a policy toward ssl.root.

Sign up

Login with SSO

Login to the community

Login with SSO