SSL-Gateway

davidstillert — Wed, 11 Apr 2012 02:01:24 GMT

I'm using a PA-500 to connect our network to 2 ISP's. I'm using policy based forwarding which works great but if I add a static entry for ISP-2 it breaks SSL-VPN access. I have a public IP assigned to a loopback which is in the untrust zone. It works if I remove the static route for ISP-2 and replace it with a static route for ISP-1 which is the ISP that I access the SSL-gateway with. Has anyone ever got this to work. Right now if ISP-1 goes down my policy rule will disable itself and my second rule will take over but whenever I commit it complains that it is shadowing the first rule.

Thanks,

Re: SSL-Gateway

rmonvon — Wed, 11 Apr 2012 13:38:02 GMT

Hi...Most likely ISP-2 is only permitting traffic with IP address that it assigned to you for security reasons. If you are using ISP-1's public IP address and ISP-2 is not permitting ISP-1's IP address, then the traffic will be dropped.

Thanks.

topic Re: SSL-Gateway in General Topics

SSL-Gateway

Re: SSL-Gateway