Restrict SSL VPN to WAN Alias

Question

I'm trying to configure an SSL VPN. Our WAN subnet has 5 IP addresses, with 4 aliases set up for the additional IPs: 
 
 Port2 
 Port2:0 
 Port2:1 
 Port2:2 
 Port2:3 
 
 Currently, I have a web server running on Port2:0 . 
 I want the SSL VPN to run exclusively on Port2 (the primary IP, not any aliases). However, when I enable SSL VPN, it appears to accept traffic on all aliases as well. 
 How can I restrict the SSL VPN to only listen on Port2 ?

Hardik_R · Answer

Hi Brennan Kostyniuk 
 You can try creating a Local ACL Administration > Device Access > Local service ACL exception rule & drop SSL VPN traffic destined to those Alias. Add local service ACL exception rule

Restrict SSL VPN to WAN Alias

Top Replies