Hi All, I'm familiar with the CLI commands to move policy IDs before or
after another specific ID, but is there a way to script a move a newly
created policy to the top, regardless of what the other IDs are? I'm
trying to create a script to add an IS...
Thanks @funkylicious That's what I thought might be the case.
Unfortunately, the customer has many conflicting security profiles and
SSL-VPN web profiles, so we can't yet use the manager to push down the
header policy. Resolving these is a work-in-pr...
The type "dynamic" is for dial-up IPsec, typically used for remote users
as an alternative to SSL-VPN.For site-to-site you'll usually use
"static" or "ddns" type, to restrict the tunnel to the specific remote
peer you want to communicate with.
Firewall policy will only control the traffic traversing the tunnel once
it is already established. @ebilcari's article is your best bet. Using
the address object mentioned earlier, you can use the template below,
but there are some caveats: Best to ...
Hi Reza, You can create a new address object under Policy & Objects →
Addresses, with type Geography, and select United Kingdom as the
country. After creating the address object, you can restrict sources
under VPN → SSL-VPN Settings using the object ...
