PA and SSTP

[vertical]

Hi,

does anyone know about issues on using a MS SSTP VPN behind a PA. Especially when natting from a non-standard port (f.ex. 5002) to 443 port of the server.

The Logs look good, but shows 'incomplete' in the 'application' columns.

Kind regards.

[_slv_ · Accepted solution]

Hi Vertical

I'm not using MS SSTP but You can user app override to verify that it's working with it.

Take a look on How to Create an Application Override Policy

Regards

Slawek

[vertical]

Hi,

thanks for your fast reply. It took me a step forward. I've set the app override rule for the port 4916 now:

The app settings look look like this:

The traffic log shows this now:

Looks good for me but the traffic still doesnt reach the server on this port?

btw: traffic on pptp port works fine and i can establish a connection on the same server.

[_slv_]

Please share Your NAT redirection policy and security policy that allowing this traffic.

Regards

Slawek

[vertical]

Hi, sorry it was my fault. I had PBW rule on the wrong nic

But in the end your hint with the app-override solved the problem. Thank you veeeeery much

[_slv_]

I'm glad that You solve this problem.

regards

SLawek