VPN-Filter on FTD L2L - Where do I assign it?

[Chess Norris]

Hello,

A customer have "sysopt connection permit-vpn" enabled on their FTD (6.6.4) and dont want turn it off as it might cause some VPN traffic stops working. I therefore want to add a vpn-filter  to a new L2L VPN that we configured. I know where to assign it for RA VPN using a group-policy, but cannot find where to assign it to a Site-To-Site VPN. I thought it would be under the Advanced-Tunnel section, but I can only see the option for sysopt permit-vpn. 

Thanks

Chess

[Milos_Jovanovic · Accepted solution]

Hi @Chess Norris,

You'll have to do it using FlexConfig, as this option is not present in FMC GUI (at least on v6.6.5, don't have newer next to me so I can't check).

You can find referent document here.

BR,

Milos

[Chess Norris]

@Milos_Jovanovic thanks. I just checked on my lab FTD running 7.0 and there is no option there either, so FlexConfig seams to be the way to go. I will try it in my lab first.

Best regards

/Chess