SSL VPN and SNAT

Hi,

 

I am building some SSL VPN on a version 13 HF2 and it works fine so far but ...

 

On the firewall, I see that it is the real IP of the "external" that is initiating the connections towards the other devices. Even by putting some SNAT pool with an IP of the internal VLAN or mgmt, it still hits the firewall with real IP from external.

 

Every single hint is welcome to make the SSL VPN flows originate from a defined IP.

 

PS : btw, what would be the best practice for you: make the VPN SSL connections come from an IP in the mgmt VLAN or the internal one ?

 

Thanks in advance. Br,

 

/Olivier