Allow Mobile VPN with SSL Users to use Resources Through a BOVPN Tunnel

1. Connect to Fireware Web UI for the Firebox at Site A.
   This is the Firebox that the SSL VPN users connect to.
   
2. Select VPN > Mobile VPN with SSL.
   The Mobile VPN with SSL page appears.

3. Select the Activate Mobile VPN with SSL check box.
4. In the Allowed Resources section, select Specify allowed resources.
5. Add the IP addresses of the trusted networks on both the local and remote Firebox.
   For this example, for the IP address of the trusted network at Site A, add 10.0.1.0/24.
   For the IP address of the trusted network at Site B, add 10.50.1.0/24.
6. Add the network addresses for any other networks you want to make available to your SSL VPN users.
   For example, you could add the optional networks on the local and remote Firebox.
7. Make a note of the address specified in the Virtual P Address Pool text box. You use this address when you set up tunnel routes to the resources. Click Save.
8. Select VPN > Branch Office VPN.
   The Branch Office VPN page appears.
9. In the Tunnels list, select a tunnel and click Edit.
   The Edit Tunnel dialog box appears. The existing tunnel route between the devices at Site A and Site B appears in the Addresses list.

10. On the Addresses tab, click Add.
    The Tunnel Route Settings dialog box appears.

11. In the Local IP section, from the Choose Type drop-down list, select Network IPv4.
12. In the Network IP text box, type 192.168.113.0/24.
    This is the network IP address assigned to your SSLVPN users for this example. You can find this IP address in the Mobile VPN with SSL Configuration dialog box, in the IP Address Pool text box.
13. In the Remote IP section, from the Choose Type drop-down list, select Network IPv4.
14. In the Network IP text box, type 10.50.1.0/24.
    This is the trusted network IP address of the remote Firebox for this example.
15. Click OK.
    The new tunnel route is added to the Addresses list.

16. Click Save.

The Firebox at Site A now allows traffic from Mobile VPN for SSL users through the BOVPN tunnel to the remote network at Site B.

1. Open Policy Manager with the configuration file for the Firebox at Site A.
   This is the Firebox that the SSL VPN users connect to.
   Policy Manager appears with the selected configuration file.
2. Select VPN > Mobile VPN > SSL.
   The Mobile VPN with SSL Configuration dialog box appears.

If you select the Force all client traffic through tunnel check box, the Firebox allows access to all resources, and you can skip steps 3, 4, and 5.

3. In the Allowed Resources section, select Specify allowed resources.
4. Add the IP addresses of the trusted networks on both the local and remote Firebox.
   For this example, for the IP address of the trusted network at Site A, add 10.0.1.0/24.
   For the IP address of the trusted network at Site B, add 10.50.1.0/24.
5. Add the network addresses for any other networks you want to make available to your SSL VPN users.
   For example, you could add the optional networks on the local and remote Firebox.
6. Make a note of the address specified in the Virtual IP Address Pool text box. You use this address when you set up tunnel routes to the resources. Click OK.
   Policy Manager appears.
7. Select VPN > Branch Office Tunnels.
   The Branch Office IPSec Tunnels dialog box appears.
8. Select a tunnel and click Edit.
   The Edit Tunnel dialog box appears. The existing tunnel route between the devices at Site A and Site B appears in the Addresses list.

9. On the Addresses tab, click Add.
   The Tunnel Route Settings dialog box appears.

10. In the Local text box, type 192.168.113.0/24.
    This is the network IP address assigned to your SSLVPN users for this example. You can find this IP address in the Mobile VPN with SSL Configuration dialog box, in the IP Address Pool text box.
11. In the Remote text box, type 10.50.1.0/24.
    This is the trusted network IP address of the remote Firebox for this example.
12. Click OK.
    The new tunnel route is added to the Addresses tab.

13. Click OK. Save the configuration to the Firebox.

The Firebox at Site A now allows traffic from Mobile VPN for SSL users through the BOVPN tunnel to the remote network at Site B.

1. Select VPN > Branch Office Tunnels.
   The Branch Office IPSec Tunnels dialog box appears.
2. Select a tunnel and click Edit.
   The Edit Tunnel dialog box appears. The existing tunnel route between the devices at Site A and Site B appears in the Addresses list.

3. On the Addresses tab, click Add.
   The Tunnel Route Settings dialog box appears.

4. In the Local IP section, from the Choose Type drop-down list, select Network IPv4.
5. In the Network IPtext box, type 10.50.1.0/24.
   This is the IP address of the local network of the Firebox at Site B for this example.  
6. In the Remote IP section, from the Choose Type drop-down list, select Network IPv4.
   
7. In the Network IP text box, type 192.168.113.0/24.
   This the network IP address assigned to your SSLVPN users at Site A for this example. You can find this IP address in the Mobile VPN with SSL Configuration dialog box, in the IP Address Pool text box.
8. Click OK.
   The new tunnel route is added to the Addresses list.

9. Click Save.
   

The Firebox at Site B is now configured to accept traffic from Mobile VPN for SSL users through the BOVPN tunnel.

1. Open Policy Manager with the configuration file for the Firebox at Site B.
   Policy Manager appears with the selected configuration file.
2. Select VPN > Branch Office Tunnels.
   The Branch Office IPSec Tunnels dialog box appears.
3. Select a tunnel and click Edit.
   The Edit Tunnel dialog box appears.The existing tunnel route between the devices at Site A and Site B appears in the Addresses list.

4. On the Addresses tab, click Add.
   The Tunnel Route Settings dialog box appears.
5. In the Local text box, type 10.50.1.0/24.
   This is the IP address of the local network of the Firebox at Site B for this example.  
   
6. In the Remote text box, type 192.168.113.0/24.
   This the network IP address assigned to your SSLVPN users at Site A for this example. You can find this IP address in the Mobile VPN with SSL Configuration dialog box, in the IP Address Pool text box.
7. Click OK.
   The tunnel route is added to the Addresses tab.

8. Click OK. Save the configuration to the Firebox.

The Firebox at Site B is now configured to accept traffic from Mobile VPN for SSL users through the BOVPN tunnel.