Temporarily disable a VPN site in all VPNs
You can disable a site that has been manually added to the Gateway. The site is disabled globally in all VPNs.
To remove the automatic site from an NGFW Engine that acts as a VPN Gateway, disable automatic VPN site management. There must be at least one enabled site.
For more details about the product and how to configure features, click Help or press F1.
Steps
-
Open the list of sites for the gateway in one of the following ways:
- Right-click a Firewall element, select Edit <element type>, then browse to .
- Open the properties of the External VPN Gateway element, then click the Sites tab.
- Right-click the site, then select Properties.
- On the VPN References tab, deselect the Enable cell.
- Click OK.
-
Save the changes in one of the following ways:
- In the Engine Editor, click Save and Refresh.
- In the External VPN Gateway Properties dialog box, click OK.
Next steps
Engine Editor > VPN > Sites
Use this branch to select the protected IP addresses that are behind the gateway.
Option | Definition |
---|---|
Add and update IP addresses based on routing | When selected, the site content updates automatically according to changes made in the routing configuration for the NGFW
Engine (for interfaces that are not disabled). Note: When the option is not selected, you must manually define the addresses that you want to be routable through the VPN.
|
Search | Opens a search field for the selected list. |
Up | Navigates up one level in the navigation hierarchy. Not available at the top level of the navigation hierarchy. |
Tools |
|
Left pane | Shows elements that you can add to the site definition. |
Add | Adds the selected element to the site content. |
Remove | Removes the selected element from the site content. |
Search | Opens a search field for the selected element list. |
Up | Navigates up one level in the navigation hierarchy. Not available at the top level of the navigation hierarchy. |
New | Creates an element of the specified type. |
Tools |
|
Right pane | Allows you to change the IP addresses that are included in the site definition. |