Block internal IP on VPN

[freber]

Hi!

I have a working ipsec VPN so that people can access our entire internal LAN when outside the office.

My question is - Is it possible to block specific internal IPs when using this VPN? So that everyone can access our internal LAN except one specific server for example.

[Toshi_Esumi · Accepted solution]

Just add a deny policy for the specific destination(s) and place it above the current allow policy.