FortiGate Version 3.0 MR4 Administration Guide
230 01-30004-0203-20070102
Firewall policy examples Firewall Policy
3 Select OK
4 Select Create New and enter or select the following settings for Home_User_2:
5 Select OK
Figure 128:SOHO network topology with FortiGate-100
The proposed network is based around a ForitGate 100A unit. The 15 internal
computers are behind the FortiGate unit. They now access the email and web
servers in a DMZ, which is also behind the FortiGate unit. All home based
employees now access the office network through the FortiGate unit via VPN
tunnels.
Interface / Zone Source: internal Destination: wan1
Address Name Source:
CompanyA_network
Destination: All
Schedule Always
Service ANY
Action IPSEC
VPN Tunnel Home2_Tunnel
Allow Inbound yes
Allow outbound yes
Inbound NAT yes
Outbound NAT no
Protection Profile Enable and select standard_profile