Nokia IP60 - Security Appliance, User Manual

Page: 348 / 494

Setting Up Your Nokia IP60 Appliance as a VPN Server
348 Nokia IP60 Security Appliance User Guide
users are automatically assigned to the OfficeMode network, enabling you to configure special security
rules for them.
SecuRemote/SecureClient supports split tunneling, which means that VPN Clients can connect directly to
the Internet, while traffic to and from VPN sites passes through the VPN Server. In contrast, the L2TP VPN
Client does not support split tunneling, meaning that all Internet traffic to and from a VPN Client passes
through the VPN Server and is routed to the Internet.
Enabling the Nokia IP60 VPN Server for users connecting from your internal networks adds a layer of
security to such connections. For example, while you could create a firewall rule allowing a specific user on
the DMZ to access the LAN, enabling VPN access for the user means that such connections can be
encrypted and authenticated. For more information, see
Internal VPN Server on page 347.