Kerio Tech 6 - page 301

23.5 Example of Kerio VPN conﬁguration: company with a ﬁlial oﬃce

301

In step 5, select Create rules for Kerio VPN server. Status of the Create rules for Kerio

Clientless SSL-VPN option is irrelevant (this example does not include Clientless SSL-VPN

interface’s issues).

Figure23.15 Headquarter— creating default traﬃc rules for Kerio VPN

This step will create rules for connection of the VPN server as well as for communication

of VPN clients with the local network (through the ﬁrewall).

Figure23.16 Headquarter— default traﬃc rules for Kerio VPN

When the VPN tunnel is created, customize these rules according to the restriction re-

quirements (see item 6).

Note: Tokeep the example as simple and transparent as possible, only traﬃc rules relevant

for the Kerio VPN conﬁguration are mentioned.

3. Customize DNS conﬁguration as follows:

•In the WinRoute’s DNS module conﬁguration, enable DNS forwarder (forwarding

of DNS requests to other servers).

•Enable the Use custom forwarding option and deﬁne rules for names in the

filial.company.com domain. Specify the server for DNS forwarding by the IP

address of the remote ﬁrewall host’s interface (i.e. interface connected to the

local network at the other end of the tunnel).