New Guy Question

[mshroyer]

Hello all, 

I am trying to run a remote user through an SSL VPN to an IPSEC VPN that goes to a different remote location. For example, A district manager checking on convenience stores from home. Is this possible? I've got the tunnels to the stores and i can get the users dialed in with SSL (or IPSEC)....it's the middle part that is giving me trouble.

[Agent_1994]

I'd need to take a look in detail in order to give you an accurate answer, but...

Let's assume that the IPSEC VPN is working, and you have policies allowing traffic from the SSL VPN interface and user to the convenience stores.

Does this policy has NAT enabled? If not, does the IPSEC tunnel's phase 2 allows traffic from the SSL VPN address range to the convenience stores?

If you're not NATting, you will have to check routing and phase 2 parameters on the "remote" side too.