Cannot reach destination host in SSLVPN

03/26/2020 46 10095

DESCRIPTION:

There are two interfaces in bridged mode each of them assigned to a different zone.

Connecting to the SSLVPN, it's impossible to reach the destination host.

CAUSE:
The issue is related to the bridged mode between two interfaces in two different zones.

RESOLUTION:

When you configure the SSLVPN profile, the firewall will automatically create an access rule for the LAN zone to permit the traffic from the SSLVPN  | Go to Firewall | Access Rules and select SSLVPN to LAN

If you try to reach the destination host, doing a packet monitor you can see the traffic dropped due to "Policy Dropped".

To allow the traffic to pass through the firewall, you need to create the same access rule from the other zone (i.e. the zone of the secondary bridged I/F) allowing the traffic from the SSLVPN | Go to Firewall | Access Rules and select SSLVPN to custom_zone.