Users who SSL-VPN into the office need to route to a different subnet which is connected via an IPSEC VPN<\/p>
You should already have Address Setup for your SSL VPN Users and Address for Remote Site<\/p>
Add the below polices<\/p>
Policy :<\/p>
Incoming Interface <VPN interface to Remote Site>
Source Address VPN all
Outgoing Interface ssl.root
Destination Address SSLVPN_TUNNEL_ADDR1
Schedule Always
Service all
Action Accept<\/p>
Policy :<\/p>
Incoming Interface ssl.root
Source Address VPN SSLVPN_TUNNEL_ADDR1
Outgoing Interface <VPN interface to Remote Site>
Destination Address all
Schedule Always
Service all
Action Accept
Enable NAT
Use Dynamic IP Pool and Create a pool (<IP of Fortigate>-<IP of Fortigate>).<\/p>","protected":false},"excerpt":{"rendered":"
Users who SSL-VPN into the office need to route to a different subnet which is connected via an IPSEC VPNYou should already have Address Setup for your […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[1411,1412,1251,1250,1406,1409,1410,1408,1407],"class_list":["post-1953","post","type-post","status-publish","format-standard","hentry","category-random","tag-1411","tag-60c","tag-fortigate","tag-fortinet","tag-ipsec-vpn","tag-nat","tag-policy","tag-routing","tag-ssl-vpn"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t