topic Route traffic to certain website(s) through site to site VPN without Route All Traffic VPN set. in General Topics

Route traffic to certain website(s) through site to site VPN without Route All Traffic VPN set.

PradeepKShing — Mon, 06 Feb 2023 12:26:03 GMT

In existing site to site vpn tunnel setup between Head Office and Remote Office, there would be requirement that traffic to certain website
from remote office need to be routed through head office Internet connection through the existing site to site vpn tunnel.
However the requirement would not be to configure the site to site vpn tunnel in Route All Traffic through the vpn tunnel.

Please help to me to achieve this . Quick help really appreciated .

Regards

Pradeep

Re: Route traffic to certain website(s) through site to site VPN without Route All Traffic VPN set.

Raido_Rattameister — Mon, 06 Feb 2023 13:36:46 GMT

You can't route based on URL because routing decision needs to be done based on first packet but URL is 4th in best case (SYN, SYN ACK, ACK, HTTP GET).

You could set up Policy based forwarding using FQDN address object as destination to achieve this.

Re: Route traffic to certain website(s) through site to site VPN without Route All Traffic VPN set.

BPry — Mon, 06 Feb 2023 15:26:55 GMT

@PradeepKShing,

Just as a disclaimer to @Raido_Rattameister's suggestion (which is the only way you'd get something like this to actually work), this could also capture way more traffic than what you actually want. I'd highly recommend checking what the FQDN objects would actually include before adopting this solution and deciding if that'll actually work for you in this case. It's possible depending on the site that you'll be including a fair bit more traffic than you actually intent to.