topic Re: Remote Access VPN in SASE and Remote Access

Remote Access VPN

Sanjay_S — Mon, 09 Mar 2020 15:44:49 GMT

Hi All,

Need your help in the below request.

We have enabled the Mobile access blade in the VSX environment. Everything is working fine. However, customer wants to disable the Firewall option in the Endpoint Security as they think that it is blaocking Mcafee updates in the remote access users machine.

Please let me know how to disable it in the VSX environment? Also what is the use of the option

Global Properties > Remote Access > Endpoint Security VPN > Enable Firewall Policy?

Do i need to make changes here at the above options or somewhere else? Any help is much appreciated.

Thanks all in advance.

Regards,

Sanjay S

Re: Remote Access VPN

PhoneBoy — Wed, 11 Mar 2020 18:40:38 GMT

That should do it.

Re: Remote Access VPN

Sanjay_S — Thu, 12 Mar 2020 09:22:08 GMT

Thank you PhoneBoy for your reply :). Will make the changes here at the below path today.
Global Properties > Remote Access > Endpoint Security VPN > Enable Firewall Policy

Re: Remote Access VPN

Sanjay_S — Tue, 26 May 2020 13:47:33 GMT

Hi All,
Instead of disabling the Firewall, we have created a new rule in the Desktop policy for inbound rule from the McAfee servers to all the users on Any services. I can see the encrypted traffic is leaving the firewall but not seeing the replies from the local machine from where the users connects to VPN. Any suggestions? I have created no nat rule as well. Any settings that i missed?

Re: Remote Access VPN

G_W_Albrecht — Tue, 26 May 2020 14:36:37 GMT

Did you follow Remote Access VPN Administration Guide R80.10 and Higher p.65 ff ? Outbound should not be an issue, though, that is allowed by default.

Re: Remote Access VPN

Sanjay_S — Tue, 26 May 2020 14:47:18 GMT

Hi ALbrecht,
Thank you for the reply. The issue is not with the Outbound but with the Inbound.