UTM throught IPSEC VPN

[Centrocito]

Hello community 6

So my question is this:

If I have a branch office connected via IPSEC VPN site-to-site, do I need UTM licence on my 60D in the branch office or can I filter everything through my 100D in the main office?

Thanks

[rwpatterson · Accepted solution]

You can filter through the main 100D. Two drawbacks:

1) All the traffic has to go through that Internet pipe twice

2) If the 100D goes south (or that Internet connection), any branch being filtered through it is effectively down

[rwpatterson · Accepted solution]

You can filter through the main 100D. Two drawbacks:

1) All the traffic has to go through that Internet pipe twice

2) If the 100D goes south (or that Internet connection), any branch being filtered through it is effectively down

[Centrocito]

rwpatterson wrote:

You can filter through the main 100D. Two drawbacks:

1) All the traffic has to go through that Internet pipe twice

2) If the 100D goes south (or that Internet connection), any branch being filtered through it is effectively down

If I create the VPN by default it applies these settings we are talking about or do I need to configure anything additional??

[rwpatterson · Accepted solution]

Apply them to the policy vpn to Internet.

[Centrocito]

rwpatterson wrote:

Apply them to the policy vpn to Internet.

Thanks for the fast response and accuracy !

[rwpatterson]

Rare moment of slow time here....