Avatar of James Ross-Bowles
James Ross-Bowles
Flag for United States of America asked on

Sonicwall NSA 2400MX - SSLVPN - force clients to use sslvpn to route to a particular ip address

When users are logged onto the SSLVPN, how do i force them to access a particular website over the sslvpn, instead of via their own internet connection.  i am able to do this easily via openvpn's sslvpn by adding the websites ip to the list of private subnets.  how do i do this with the NSA 2400MX.

I tried adding, an address object and bind it to the WAN Zone, and then add that object to the SSLVPN's Client Route page, but its not working.
VPNNetworking Hardware-Other

Avatar of undefined
Last Comment
James Ross-Bowles

8/22/2022 - Mon
James Ross-Bowles

ASKER
One caveat, i do not want to use the Tunnel All mode, is there a way to just route the one ip over the vpn, and not all of its internet traffic?
Carl Dula

If you run your own dns server, and have the SSLVPN set to use that dns server, then you can add the www url to your dns such that it resolves to an ip address on your LAN, instead of the WAN.
getzjd

Clear something up for us..   is the single IP you are wishing to route over the link on your LAN or on the WAN?  In other words, you want just that one ip to route over the VPN and out your default gateway, but all other Internet traffic should stay with the local client?
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
James Ross-Bowles

ASKER
WAN
James Ross-Bowles

ASKER
sorry for any confusion.  the address is on the wan.  is a website that will only allow connections from our office ip range . I can achieve this with tunnel all mode, but I don't want all traffic going over our wan just the traffic for things behind the firewall and that one particular website.
James Ross-Bowles

ASKER
no replies?
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER CERTIFIED SOLUTION
getzjd

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
James Ross-Bowles

ASKER
thanks, this got me looking in the right direction.