|
Ingress
|
IKE
|
Permit
|
-
|
|
Ingress
|
ESP
|
Permit
|
-
|
|
Ingress
|
ICMP
|
Permit
|
This enables the PMTUD application to work
|
|
Ingress
|
All allowed services from any IP address to any local subnet
|
Permit
|
Due to the definition of the VPN Policy, this will be allowed only if traffic comes over ESP
|
|
Ingress
|
Default VPN policy
|
Deny
|
-
|
|
Egress
|
IKE
|
Permit
|
-
|
|
Egress
|
ESP
|
Permit
|
-
|
|
Egress
|
ICMP
|
Permit
|
This enables the PMTUD application to work
|
|
Egress
|
All allowed services from any IP address to any local subnet
|
Permit
|
This traffic is tunnelled using VPN
|
|
Egress
|
Default
|
Deny
|
-
|
