Skip to main content
TZ1
New Member
November 19, 2024
Question

VPN for some destinations not via lokal Home-IP

  • November 19, 2024
  • 2 replies
  • 715 views

A somewhat special problem:

 

Background:
The clicks on our homepage are to be analysed. Clicks that are made from the office (fixed IP address) can be filtered out so that they do not distort the result. However, some employees work from home and there are many different IP addresses and these cannot be filtered out.

 

I would therefore like to be able to specify in the VPN connection that calls to a specific domain do not go via the employee's local IP, but via the VPN connection and then via our fixed IP. This would also filter out these clicks via the fixed IP.

 

Is that possible?

 

2 replies

johnathan
Staff
Staff
November 20, 2024

That should be possible. Based on the question, you are doing split-tunneling and would just need to add the IP of your homepage to the split tunnel configuration. This will cause traffic for the homepage to go through your firewall and exit with it's public IP. 

Here would be the steps for SSLVPN: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enabling-split-tunnel-feature-for-SSL-VPN/ta-p/198108

Here would be the steps for IPsec dialup: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-split-tunnel-For-IPsec-VPN/ta-p/192266

Never trust a computer you can't throw out a window.
TZ1
TZ1Author
New Member
November 26, 2024

Thank you, I will try

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.