IMPORTANT
Action required: Apply the fix for SNS firewall disks.
Please follow the procedure described in the How to update my SSD Firmware - Stormshield Knowledge Base article (authentication required).
Configuring firewall B
VPN policy
To correspond to the IPsec policy, traffic has to come from the virtual network B Net-B-Virt and contact the virtual network A Net-A-Virt.
NAT policy
- Rule 1 allows translating traffic from real network B Net-B-Real to virtual network B Net-B-Virt before the IPsec module (Options column).
- Rule 2 allows redirecting packets going to virtual network B Net-B-Virt to internal real network B Net-B-Real.
Ensure that virtual and real networks have the same sub-network mask.
Filter policy