?
Solved

Sonicwall TZ170/180 Access Rules Question

Posted on 2009-05-15
2
Medium Priority
?
407 Views
Last Modified: 2013-11-16
How do I write the access rules to force all http/https traffic thru a VPN tunnel on a TZ170 or TZ180?

We have remote locations that use TZ170/180's to connect to our Corporate office with a point to point VPN tunnel for data access.  What I'd like to do is force them to also route thru the VPN tunnel for Internet traffic so that we can monitor where they go on the Internet with our Websense box.  Currently I can deny LAN to WAN traffic for the Web but I can't turn around and enable a LAN to VPN rule for Web traffic because there is no VPN destination choice on the TZ 170/180 like there is on my Pro2040.  Is there another way to accomplish this task?
0
Comment
Question by:keithmendez
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 17

Expert Comment

by:ccomley
ID: 24450610
Do you have Enchanced OS?

If so, you can achieve what you want, I'm pretty sure, using Policy Route. Make the target gateway for teh rule the Internet gate way at the FAR END of the VPN.

I don't think you can do it with Standard OS.

0
 
LVL 17

Accepted Solution

by:
ccomley earned 2000 total points
ID: 24450642
Unless you want ALL internet traffic diverted through the tunnel so only VPN traffic goes to the router.

Edit the VPN config on the "remote" end
Go into the "Network" tab
In the Destination networks section, select "Use This Tunnel as Default for All Internet Traffic"

0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question