Prefilter/Access Control with VPN's

[Ariel0092]

Hi everyone i have a doubt with the prefilter acl's that i would like you to clarify me. I have an FTD 6.2.3 running L2L and RA VPN, and the FTD is the terminal endpoint of theese vpn's,no a passthrough tunnel, and i want to filter individual connections of theese tunnels with no further inspection, so my question is i have to apply a prefilter rule or a tunnel rule? Becouse for my understanding on theese filters is that the tunnel rules applys for tunnels passing trhough the FTD, is that correct? 

Thanks and best regards.

[mikael.lahtela · Accepted solution]

Hi,

Yes you are correct, you should use pre-filter for tunnels that terminates on the device.
Tunnel rules are used for example GRE tunnels that pass through the device.

br, Mikael

[Ariel0092]

Thanks for the answer Mikael

Best regards!