Link to home
Start Free TrialLog in
Avatar of James Ross-Bowles
James Ross-BowlesFlag for United States of America

asked on

Sonicwall NSA 2400MX - SSLVPN - force clients to use sslvpn to route to a particular ip address

When users are logged onto the SSLVPN, how do i force them to access a particular website over the sslvpn, instead of via their own internet connection.  i am able to do this easily via openvpn's sslvpn by adding the websites ip to the list of private subnets.  how do i do this with the NSA 2400MX.

I tried adding, an address object and bind it to the WAN Zone, and then add that object to the SSLVPN's Client Route page, but its not working.
Avatar of James Ross-Bowles
James Ross-Bowles
Flag of United States of America image

ASKER

One caveat, i do not want to use the Tunnel All mode, is there a way to just route the one ip over the vpn, and not all of its internet traffic?
Avatar of Carl Dula
If you run your own dns server, and have the SSLVPN set to use that dns server, then you can add the www url to your dns such that it resolves to an ip address on your LAN, instead of the WAN.
Clear something up for us..   is the single IP you are wishing to route over the link on your LAN or on the WAN?  In other words, you want just that one ip to route over the VPN and out your default gateway, but all other Internet traffic should stay with the local client?
sorry for any confusion.  the address is on the wan.  is a website that will only allow connections from our office ip range . I can achieve this with tunnel all mode, but I don't want all traffic going over our wan just the traffic for things behind the firewall and that one particular website.
no replies?
ASKER CERTIFIED SOLUTION
Avatar of getzjd
getzjd
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
thanks, this got me looking in the right direction.