topic ICMP Traffic from internal network to remote network VPN SSL in Mobile

ICMP Traffic from internal network to remote network VPN SSL

Fernandosilva — Fri, 05 Feb 2021 16:22:34 GMT

Hello!

In our environment we use VPN SSL with IP Office mode to acces the resources of the company.

Scenario;

1- User in your home access URL https://vpncompanie.my.com.br (in your personal computer).

2- An IP address is assigned to your personal computer;

When I ping this VPN SSL IP: 10.216.192.1 from my internal network company to external personal PC of the user the ICMP is droped.

How Can I enable this ping, from my internal network company to external personal PC on VPN SSL?

Re: ICMP Traffic from internal network to remote network VPN SSL

AlejandroH — Fri, 05 Feb 2021 19:53:22 GMT

Looks like there is a rule in your access policy that doesn’t allow for icmp-proto service to pass through. The rule name seems to be “unauthorized SSL VPN traffic”. You can check there.

Re: ICMP Traffic from internal network to remote network VPN SSL

Fernandosilva — Mon, 08 Feb 2021 13:29:20 GMT

I don't found this rule because is a implicit rule.

Re: ICMP Traffic from internal network to remote network VPN SSL

AlejandroH — Mon, 08 Feb 2021 21:33:04 GMT

It looks like this rule here is the one causing you problems, and it is not part of the implicit rules. There is a good chance when you go to that rule, there is a icmp service defined as part of a drop.

Re: ICMP Traffic from internal network to remote network VPN SSL

the_rock — Tue, 09 Feb 2021 01:36:08 GMT

It says "Map rules" and name is Unauthorized ssl vpn traffic...can you show us what that rule looks like? Appears thats whats actually blocking the traffic.

Andy