topic Re: SSL Network Extender Office Mode Remote VPN cannot access DMZ subnets in SASE and Remote Access

SSL Network Extender Office Mode Remote VPN cannot access DMZ subnets

RCCO — Tue, 27 Oct 2020 19:56:17 GMT

I am running the SSL Network Extender with a handful of remote access users on a R80.30 gateway Cluster.

I can authenticate users successfully and they can access internal networked resources as configured by the various policy rules.

I am totally unable to connect to any servers in directly attached subnets though. Anything in one of my DMZ VLAN interfaces is unreachable. I don't even get a hit in the logging that i can use to see if something is allowed or dropped. I can get a log entry if i was to say ping the VLAN interface or the Cluster VIP but if i ping a server in the subnet, nothing.

I am using Office Mode and a local IP Pool.

Thanks in advance of your help.

Re: SSL Network Extender Office Mode Remote VPN cannot access DMZ subnets

PhoneBoy — Tue, 27 Oct 2020 20:28:40 GMT

That sounds like your DMZ networks aren't included in your Remote Access encryption domain.

Re: SSL Network Extender Office Mode Remote VPN cannot access DMZ subnets

RCCO — Tue, 27 Oct 2020 20:34:28 GMT

Thanks Phone Boy. That makes sense. I wasn't sure if that applied only to "normal" VPNs. Where is this configured in SSL Network Extender VPNs?

Re: SSL Network Extender Office Mode Remote VPN cannot access DMZ subnets

RCCO — Tue, 27 Oct 2020 20:41:20 GMT

It's ok, just found it.

Great! thanks for your help.