How to Configure an Access Rule for a Client-to-Site VPN

To connect your routed client-to-site VPN to your network, you must add a forwarding access rule to direct traffic between the tunnel, the remote, and the home network.

Before You Begin

Before creating your forwarding access rules, gather the following information:

The published VPN network(s)
The VPN client network(s)

Step 1. Create Network Objects

Create static network objects for the published VPN network(s) and the VPN client network(s).

Type – Select Generic Network Object.
Include Entries – For each network, click + to add it to the list.

For more information, see Network Objects.

Step 2. Create a Pass Access Rule

Add a Pass access rule that allows traffic from the VPN clients to the published networks.

Action – Select Pass.
Source – Select the network object containing the VPN client network(s) created in Step 1.
Service – Select the allowed services, or Any to allow all services.
Destination – Select the network object containing the published VPN network(s) created in Step 1.
Connection Method – Select Dynamic NAT.

For more information, see How to Create a Pass Access Rule.