Skip to main content
firewalluser
firewalluser
New Member
March 14, 2020
Question

SSLVPN Isolation Issue

  • March 14, 2020
  • 1 reply
  • 4562 views

Hi All, 

 

I'm trying to allow users that connect to the SSLVPN to allow all traffic between their workstations. My current config allow SSLVPN interface to connect to several VLANS. I assume I cannot point the same interface (SSLVPN) to itself; meaning adding a rule where SSL-VPN tunnel interface (ssl.root) is both set in the "from interface" and to the "to interface".

 

How can I configure the SSLVPN so the users are not isolated?

 

Please see screenshot.

 

Thank you,

 

Dave

 

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    March 14, 2020

    Yes, you can. I saw the same question a month or two ago. I doubted it first so I tested it to allow VPN client to client communications. It worked. You just need to test it yourself. It's not going to hurt anything.

    firewalluser
    firewalluserAuthor
    New Member
    March 14, 2020

    Hi and thank you for responding. What exactly did you do to get it working?

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    March 14, 2020

    Just added an allow policy from ssl.root to ssl.root interface.

    Terms & ConditionsAccessibility statement