Exclude VPN traffic from rules with ANY in VPN field.

[Gusa2727]

Hi, is there a way to avoid some vpn traffic matching rules with VPN field set to ANY? Thanks!

[Danny · Accepted solution]

Yes there is.

Best practice is to configure your VPN rules directly after the firewall management rules in the beginning of your rulebase.

At the end of your VPN section you should create a VPN STEALTH rule that drops all other VPN traffic that has not been accepted before.

Done. Now VPN in excluded from the ANY VPN field in your rules.

[Gusa2727]

Thank you very much!