Dual ISP for SSL VPN

dpayne — Wed, 19 Jan 2011 12:29:41 GMT

I am having trouble getting SSL VPN to work on a newly added modem. Essentially, I want to add a new ISP connection to my PA and configure it to be used for SSL VPN. I tried to add a PBF rule, but apparently, pbf requires traffic to cross zones. So far, I have tried to create a loopback interface in a new zone, and make that zone the source for the PBF rule, but no matter what, I cannot get any interfaces for that link to respond from the outside. If i connect the connection directly to a workstation, it works without issues, so I do not suspect an ISP issue. All of my other implamentations use the PBF for default outbound traffic as well as SSL VPN, and this seems to work. Does anyone out there have any experience with this setup? I do have an active ticket open, but there seems to be some confusion about how this has to work.

Re: Dual ISP for SSL VPN

pkruse — Mon, 24 Jan 2011 19:01:40 GMT

Hello,

Are you saying you have a second ISP and you want to use it for inbound SSL/VPN traffic?

If this is the case you could acheive this pretty easily by setting up a second set of ingress egress ports with their own virtual router.assign each a unique zone and configure it as normal. within the VR you can point to the ingress interface of the first virtual router. This will get around any routing and zone issues.

~Phil

topic Re: Dual ISP for SSL VPN in General Topics

Dual ISP for SSL VPN

Re: Dual ISP for SSL VPN