Route the internet traffic of SSL VPN client through gateway and apply the CFS policies

Description

How to route the internet traffic of SSL VPN client through the sonicwall gateway and apply the CFS policies?

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Step 1: Please enable the option of tunnel all mode under Manage > Connectivity > SSL VPN > Client Settings, then Client Route tab under Default Device Profile on the sonicwall.

         Image

Step 2: Please go to Manage > System Setup > Network > Zones and click on configure for the SSL VPN Zone.

Image

Step 3Enable the option Enable Client CF Services.

 

 

 

 Image

 

Note :Users  connecting  to the sonicwall from the SSL VPN client  there internet connection will go through the sonicwall and according to their user credentials the CFS policy will be imposed users will be blocked/allowed as per the policy.


 

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

 

 

Step 1: Please enable the option of tunnel all mode under SSL VPN ->client route settings on the sonicwall.

         Image

Step 2: Please go to Network -> Zones and click on configure for the SSL VPN Zone.

Image

Step 3Enable the option Enforce content filtering services and keep the CFS policy as “default.

 

 

 Image

 

 

 

Note : Users  connecting  to the sonicwall from the SSL VPN client  there internet connection will go through the sonicwall and according to their user credentials the CFS policy will be imposed users will be blocked/allowed as per the policy.

 

Related Articles

  • How to use the NSM Firewall Migration App
    Read More
  • How to create a dedicated user with the least privileges for the SSO agent
    Read More
  • How can I configure BGP (Border Gateway Protocol) with single ISP and advertise your public network?
    Read More
not finding your answers?