23.5 Example of Kerio VPN configuration: company with a filial office
331
5.
Create a passive end of the VPN tunnel (the server of the branch office uses a dynamic IP
address). Specify the remote endpoint’s fingerprint by the fingerprint of the certificate of
the branch office VPN server.
Figure 23.20
Headquarter — definition of VPN tunnel for a filial office
6.
Customize traffic rules according to the restriction requirements.
•
In the
Local Traffic
rule, remove all items except those belonging to the local
network of the company headquarters, i.e. except the firewall and
LAN 1
and
LAN 2
.
•
Define (add) the
VPN clients
rule which will allow VPN clients to connect to
LAN 1
and to the network of the branch office (via the VPN tunnel).
•
Create the
Branch office
rule which will allow connections to services in
LAN 1
.
Summary of Contents for Firewall6
Page 1: ...Kerio WinRoute Firewall 6 Administrator s Guide Kerio Technologies...
Page 129: ...8 5 HTTP cache 129...
Page 404: ...404...
