Kerio-tech Firewall6 Manual do Utilizador descarregar pdf (Página 333)

100

101

23.5 Example of Kerio VPN conﬁguration: company with a ﬁlial oﬃce

333

In this case, it would be meaningless to create rules for the Kerio VPN server and/or the

Kerio Clientless SSL-VPN, since the server uses a dynamic public IP address). Therefore,

leave these options disabled in step 5.

Figure 23.23 A ﬁlial — it is not necessary to create rules for the Kerio VPN server

This step will create rules for connection of the VPN server as well as for communication

of VPN clients with the local network (through the ﬁrewall).

Figure 23.24 Filial oﬃce — default traﬃc rules for Kerio VPN

When the VPN tunnel is created, customize these rules according to the restriction re-

quirements (Step 6).

3. Customize DNS conﬁguration as follows:

• In conﬁguration of the DNS Forwarder in WinRoute, specify DNS servers to which

DNS queries which are not addressed to the company.com domain will be for-

warded (primary and secondary DNS server of the Internet connection provider

by default).

• Enable the Use custom forwarding option and deﬁne rules for names in the

filial.company.com domain. Specify the server for DNS forwarding by the IP

address of the remote ﬁrewall host’s interface (i.e. interface connected to the

local network at the other end of the tunnel).

1 2 ... 328 329 330 331 332 333 334 335 336 337 338 ... 403 404

Comentários a estes Manuais

Sem comentários

Kerio-tech Firewall6 Manual do Utilizador Página 333

Comentários a estes Manuais