topic Re: Change Firewall "Policy" on VPN Client in Network Security

Change Firewall "Policy" on VPN Client

jsteffensen — Fri, 21 Feb 2020 08:17:02 GMT

1. Is it possible to push a Firewall-Policy "Permanent" to the VPN Client (to stay also when it is not connected to the VPN Gateway?)

2. Is it Possible to configure Manual "Access-list" or Filter-rules on the VPN Client built in Firewall?

3. If none is possible: How would you solve the situation technically that clients are NOT allowed at any time to connect directly to the Internet (except for the VPN gateway?)

Best Regards

Jarle Steffensen

Re: Change Firewall "Policy" on VPN Client

nkoerner — Thu, 21 Jul 2005 08:35:21 GMT

Hi Jarle

Due to the fact that the the policy is centrally pushed by the concentrator it is not possible to keep them permanent, nor to apply the filter manually!

May be you heard about the autoinitation feature, which allows you to start the client automatically in some defined networks, i know this is not that what you need but rather autoinitiate than nothing;-)

hope this helps

cheers Nico

Re: Change Firewall "Policy" on VPN Client

m.saunders — Fri, 30 Sep 2005 13:18:44 GMT

Turn off split tunnelling.

Re: Change Firewall "Policy" on VPN Client

jsteffensen — Mon, 03 Oct 2005 06:23:36 GMT

When connected - Yes.

But when not connected via VPN this does not prohibit the client accessing internet resources.

( when the VPN client is not active. )