SSLVPN Isolation Issue

[firewalluser]

Hi All, 

I'm trying to allow users that connect to the SSLVPN to allow all traffic between their workstations. My current config allow SSLVPN interface to connect to several VLANS. I assume I cannot point the same interface (SSLVPN) to itself; meaning adding a rule where SSL-VPN tunnel interface (ssl.root) is both set in the "from interface" and to the "to interface".

How can I configure the SSLVPN so the users are not isolated?

Please see screenshot.

Thank you,

Dave

[Toshi_Esumi]

Yes, you can. I saw the same question a month or two ago. I doubted it first so I tested it to allow VPN client to client communications. It worked. You just need to test it yourself. It's not going to hurt anything.

[firewalluser]

Hi and thank you for responding. What exactly did you do to get it working?

[Toshi_Esumi]

Just added an allow policy from ssl.root to ssl.root interface.