Do I need to set the VPN Community when using Access Roles?

[sascham]

Hello Checkmate community,

if I use access roles for non-VPN and VPN client users, do I need to separate them and set the VPN community to "RemoteAccess" or can they coexist in the same rule with the VPN community "any"? Currently I have them combined into one rule and it works, but I am not sure if this is best practice.

The user identities come from the same identity source (Identity Collector).

Thank you in advance.

Kind regards
Sascha

[_Val_ · Accepted solution]

The answer is yes, if a network security rule has "Any" in the VPN tab, it will be applied to both encrypted and cleartext traffic