Forums

Resolved
0 votes
I'm back to ask for help.
I'm trying the Dynamic VPN function, I have configured two firewalls on two different ISPs.
Firewall 1 works correctly, sees the public ip address and is ok, firewall 2 instead (under DMZ) fails to take the public ip address.
The two firewalls are configured in exactly the same way, with the following extensions:
Dynamic VPN
Filter and Proxy Report
Gateway Antivirus
Gateway Management Community
Port Forwarding
I no longer know what proof to do
Thursday, January 10 2019, 11:03 AM
Share this post:
Responses (2)
  • Accepted Answer

    Tuesday, January 15 2019, 09:10 AM - #Permalink
    Resolved
    0 votes
    Thank you very much, I will try the solution with OpenVPN because IPsec is not giving me great satisfaction
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, January 10 2019, 11:14 AM - #Permalink
    Resolved
    0 votes
    The dynamic firewall won't work behind any form of NAT. Normally this includes DMZ. Your only options are Static IPsec for Business (best configured with IKEv2 but IKEv1 can be made to work) or a manual configuration of OpenVPN Site-to-Site following this HowTo. If either end have a dynamic IP, OpenVPN may be the better route because IPsec does not recover so well from a change in IP's.
    The reply is currently minimized Show
Your Reply