topic Re: Route based vpn vs Domain based VPN in Firewall and Security Management

Route based vpn vs Domain based VPN

Malik1 — Thu, 17 Nov 2022 08:04:52 GMT

Hi Experts,

I wanted to know if are there any advantages of using route based VPN over domain based VPN or vice-versa

Also, we already have a domain-based VPN setup and we need to have route based VPN for a client and I have to gone through sk109340 and it seems it's possible.

but according to sk31012 configuring route-based VPN we need to have an empty group (Simple Group) created and assigned as the VPN Domain.

but we are already using domain-based VPN and the object-group assigned to the VPN domain consists subnets that are part of the encryption domain. So how will both the VPN types work ?

Regards,

Re: Route based vpn vs Domain based VPN

Sam2 — Thu, 17 Nov 2022 20:00:19 GMT

Domain-based VPN will be preferred over route-based VPNs, so make sure that the new route based clients' IP ranges do not exist inside of any encryption domain on the firewall

Re: Route based vpn vs Domain based VPN

the_rock — Thu, 17 Nov 2022 20:18:20 GMT

Below article explains it pretty good:

http://www.internet-computer-security.com/VPN-Guide/Policy-based-vs-Route-based-VPN.html

Generally, I would say that lately, most vendors are moving towards route-based VPN tunnels. I believe PAN firewalls dont even support domain based any longer.