Policies

All defined VPN policies are displayed in the NETWORK | IPSec VPN > Rules and Settings on the Policies tab.

Each entry displays the following information:

• Name – The default name or user-defined VPN policy name.
• Gateway – The IP address of the remote firewall. If the wildcard IP address, 0.0.0.0, is used, it is displayed as the IP address.
• Destinations – The IP addresses of the destination networks.
• Crypto Suite – The type of encryption used for the VPN policy.
• Enable – Shows whether the policy is enabled. A checked box enables the VPN Policy. Clearing the box disables it.
• Configure – Options for managing the individual VPN policies:
  • Edit icon allows you to edit the VPN policy.
  • Delete icon deletes the policy on that line. The predefined GroupVPN policies cannot be deleted, so the Delete icons are dimmed.
  • Export icon exports the VPN policy configuration as a file for local installation by SonicWall Global VPN Clients.

The following buttons are shown in the Policies table:

Search	Standard search engine to help locate specific VPN policies.
+Add	Accesses the VPN Policy window to configure site to site VPN policies.
Delete	Deletes the selected (checked box before the VPN policy name in the Name column first). You cannot delete the GroupVPN policies.
Delete All	Deletes all VPN policies in the VPN Policies table except the default GroupVPN policies.

You can refresh the active tunnels by using the Refresh option at the top of the Policies and Active Tunnels tables.

Some statistics about the VPN policies are also summarized below the table, for both site to site and GroupVPN policies:

• Number of policies defined
• Number of policies enabled
• Maximum number of policies allowed

You can define up to four GroupVPN policies, one for each zone. These GroupVPN policies are listed by default in the VPN Policies table as WAN GroupVPN, LAN GroupVPN, DMZ GroupVPN, and WLAN GroupVPN. Clicking on the Edit icon in the Configure column for the GroupVPN displays the Security Policy window for configuring the GroupVPN policy.

A VPN Policy cannot have two different WAN interfaces if the VPN Gateway IP is the same.