AnsweredSSLVPN - Negated Split Tunneling

Author
vinch100
New Member
  • Total Posts : 8
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/08/23 07:02:40
  • Status: offline
2019/08/19 07:45:35 (permalink)
0

SSLVPN - Negated Split Tunneling

Hello,
 
we want to achieve a special case where our external users would use the VPN for all traffic EXCEPT some well known VoIP Gateway that we want them to access through their local breakout, IPSec VPN has the command ipv4-split-exclude but I cannot find the same feature on SSL-VPN... any idea ?
 
Best regards
 
Vincent
#1
Kenundrum
Gold Member
  • Total Posts : 148
  • Scores: 15
  • Reward points: 0
  • Joined: 2008/05/15 10:25:50
  • Location: Rhode Island, US
  • Status: offline
Re: SSLVPN - Negated Split Tunneling 2019/08/19 10:02:42 (permalink) ☼ Best Answerby vinch100 2019/08/19 11:59:54
0
This is by no means an elegant solution... but theoretically would work.
You can turn on split tunneling and then make the routed addresses be all the address space except the VOIP gateway. You'll probably have to create an address with all IPs before the address, and another with all the IPs after it and put both in the tunnel portal config. I've had to do something similar with packet captures in the past and it did work.

NSE4
Some FGT500Es, 500Ds, 60Ds at work
FWF60E, FWF80CM at home
#2
vinch100
New Member
  • Total Posts : 8
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/08/23 07:02:40
  • Status: offline
Re: SSLVPN - Negated Split Tunneling 2019/08/19 12:00:49 (permalink)
0
Thank you Kenundrum, that sound like a good workaround !
#3
neonbit
Expert Member
  • Total Posts : 515
  • Scores: 67
  • Reward points: 0
  • Joined: 2013/07/02 21:39:52
  • Location: Dark side of the moon
  • Status: offline
Re: SSLVPN - Negated Split Tunneling 2019/08/20 09:41:37 (permalink)
0
6.2 introduced a negate feature for firewall addresses (in address groups). They work well with policies, but have never tested for SSLVPN tunnel mode. Worth giving it a try as it's alot easier to configure.
#4
Jump to:
© 2019 APG vNext Commercial Version 5.5