How to Configure an Access Rule for a Client-to-Site VPN

To connect your routed client-to-site VPN to your network, you must add a forwarding access rule to direct traffic between the tunnel, the remote, and the home network.

Before You Begin

Before creating your forwarding access rules, gather the following information:

• The published VPN network(s)

• The VPN client network(s)

Step 1. Create Network Objects

Create static network objects for the published VPN network(s) and the VPN client network(s).

• Type – Select Generic Network Object.

• Include Entries – For each network, click + to add it to the list.

Open

For more information, see Network Objects. 

Step 2. Create a Pass Access Rule

Add a Pass access rule that allows traffic from the VPN clients to the published networks.

• Action – Select Pass.

• Source – Select the network object containing the VPN client network(s) created in Step 1. 

• Service – Select the allowed services, or Any to allow all services.

• Destination – Select the network object containing the published VPN network(s) created in Step 1.

• Connection Method – Select Dynamic NAT.

Open

For more information, see How to Create a Pass Access Rule.