One directional VPN tunnel for SQL

[chad.taylor]

I need to create a tunnel on my Cisco 3005 Concentrator to a client's firewall. The only purpose for the tunnel is to send only SQL (port 1521) traffic from my site to client's and not in the other direction. For security reasons all other traffic should be denied. Is this possible?

[umedryk · Accepted solution]

If your intention is to have your remote side not to communicate to a third site with or without encryption, you can enforce the policy on your remote site such that it should have the split tunnelling disabled. On the other hand, you cannot have the one way secured traffic from your site to your remote site.