Kerio Tech KERIO WINROUTE FIREWALL 6, Руководство администратора

Страница: 313 / 368

23.6 Example of a more complex Kerio VPN configuration
313
The following sections provide detailed description of the Kerio VPN configuration both for
the headquarter and the filial offices.
Headquarters configuration
1. Install WinRoute (version
6.1.0
or higher) at the default gateway of the headquarters
network.
2. Use Network Rules Wizard (see chapter 7.1 ) to configure the basic traffic policy in WinRoute .
To keep the example as simple as possible, it is supposed that the access from the local
network to the Internet is not restricted, i.e. that access to all services is allowed in step 4.
Figure 23.31 Headquarters — no restrictions are applied to accessing the Internet from the LAN
In step 5, select Create rules for Kerio VPN server . Status of the Create rules for Kerio
Clientless SSL-VPN option is irrelevant (this example does not include Clientless SSL-VPN
interface’s issues).
Figure 23.32 Headquarter — creating default traffic rules for Kerio VPN