topic Re: Allow traffic other than IPSec in General Topics

Allow traffic other than IPSec

mike.07 — Fri, 14 Oct 2022 14:09:18 GMT

Hi all,

Site A

Source Zone: test-DMZ

Interface: ae 1 (172.16.1.1)

Tunnel Interface is in internal-trust zone.

Static route set to destination 10.10.10.1

I have an IPsec tunnel between 2 sites.

However, i want to allow traffic from other sources to test-DMZ zone.

How can i deploy policy that will allow me to communicate from test-DMZ to outside internet and vice versa without breaking the IPsec connection?

Re: Allow traffic other than IPSec

JayGolf — Tue, 18 Oct 2022 02:55:26 GMT

Hi @mike.07 ,

Do you have specific public servers you would like the internet to access? Setting up access from the outside zone to your DMZ zone should not affect the tunnel you have between the two-sites.

Re: Allow traffic other than IPSec

mike.07 — Thu, 20 Oct 2022 18:40:25 GMT

HI Jay,

Yes, i need to allow access to one specific server, problem is it is a FQDN which resolves to multiple IPs.

Is there any way i can create Source NAT that would allow traffic to FQDN?