Sangfor Community»Categories Product Network Secure with next version(NGAF) [VPN] - What is Different Directly and Indirectly?

[VPN] - What is Different Directly and Indirectly?

views: 3623 | comments: 3 | added to Favorites 0
Lights on | 提示:支持键盘翻页<-左 右->
    组图打开中,请稍候......
Created: 05 Jul 2018 20:25

Summary:

Hi, What is different between Directly and Indirectly? Tab:VPN > IPSec VPN > BasicWhen we should use one of this?

Reply

CTI LS Posted 06 Jul 2018 15:09
Hi,

You may use "Directly connects to Internet"
Azlan Posted 06 Jul 2018 14:49
Thanks for your feedback,

How about if user has two site using Sangfor NGAF.

HQ - Got Public IP
Branch - Public IP hold by router then NAT to NGAF.

HQ - of course using directly internet
Branch - which should consider?

Because this customer, their public IP dial up(PPPOE) on router and then they do NAT port 4009 to Sangfor NGAF.


Thanks
CTI LS Posted 06 Jul 2018 11:18
Hi,

By default should use "Directly connects to Internet"
Directly Connects to Internet refer to the device has a valid Public IP that can be used to connect the VPN from Client or Branch side.
Whereas Indirectly connects to Internet refer to the device has multiple WAN line, but one of it does not have a valid Public IP, yet it is gonna use to connect the VPN from Client or Branch side. Then, Client side needs to first trigger the VPN connection to HQ by using the valid Public IP, then HQ device will swap the connection to the WAN line without Public IP and continue the VPN connection.

Indirectly connects to Internet scenario is quite rare, unless you got the requirement, otherwise please use Directly connects to Internet.