Chapter 23
Kerio VPN
290
Note:
Remote VPN clients connecting to
WinRoute
are included toward the number of persons
using the license (see chapters
and
). Be aware of this fact when deciding on what license
type should be purchased (or whether an add-on for upgrade to a higher number of users for
the license should be bought).
Hint:
VPN clients correctly connected to the firewall can be overviewed in the
Administration Con-
sole
, section
Status
→
VPN clients
. For details, see chapter
Basic configuration of traffic rules for VPN clients
Figure 23.7
Common traffic rules for VPN clients
•
The first rule allows connection to the VPN server in
WinRoute
from the Internet.
To restrict the number of IP addresses from which connection to the VPN server will
be allowed, edit the
Source
entry.
By default, the
Kerio VPN
service is defined for TCP and UDP protocols, port
4090
. If
the VPN server is running at another port, this service must be redefined.
•
The second rule allows communication between the firewall, local network and VPN
clients.
If the rules are set like this, all VPN clients can access local networks and vice versa (all local
hosts can communicate with all VPN clients). To restrict the type of network access available
to VPN clients, special rules must be defined. A few alternatives of the restrictions settings
within
Kerio VPN
are focused in chapter
Note:
1.
If the
Network Rules Wizard
is used to create traffic rules, the described rules can be gen-
erated automatically (including matching of VPN clients with the
Source
and
Destination
items). To generate the rules automatically, select
Yes, I want to use Kerio VPN
in Step 5.
For details, see chapter
2.
For access to the Internet, VPN clients use their current Internet connections. VPN clients
are not allowed to connect to the Internet via
WinRoute
(configuration of default gateway
of clients cannot be defined).
3.
For detailed information about traffic rules, refer to chapter
Summary of Contents for KERIO WINROUTE FIREWALL 6
Page 1: ...Kerio WinRoute Firewall 6 Administrator s Guide Kerio Technologies s r o...
Page 157: ...12 3 Content Rating System Kerio Web Filter 157 Figure 12 7 Kerio Web Filter rule...
Page 247: ...19 4 Alerts 247 Figure 19 14 Details of a selected event...
Page 330: ...Chapter 23 Kerio VPN 330 Figure 23 55 The Paris filial office VPN server configuration...
Page 368: ...368...
