Office mode traffic statefully allowed ?

[marcinw]

HI,

Is the RA - Office mode traffic, deployed in mode that traffic is going via  the firewall to the Internet, statefully allowed alike a traffic that is going from inside to outside, or  is being blocked and appropriate security rules have to be deployed? 

thanks

[PhoneBoy]

Appropriate security rules have to be in place.
Generally, that's done using rules involving the "RemoteAccess" VPN community so the Office Mode subnet does not need to be explicitly defined in the policy.
It can also be done with Access Roles, as Access Roles can be created based on Remote Access users.