• SonicOS 7.1
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• IPSec VPN Overview
  • About Virtual Private Networks
  • VPN Types
    • IPsec VPN
    • DHCP over VPN
    • L2TP with IPsec
    • SSL VPN
  • VPN Security
    • About IKEv1
    • About IKEv2
    • Mobility and Multi-homing Protocol for IKEv2 (MOBIKE)
    • About IPsec (Phase 2) Proposal
    • About Suite B Cryptography
  • VPN Base Settings and Displays
    • Policies
    • Active Tunnels
    • Settings
  • IPv6 VPN Configuration
• Site to Site VPNs
  • Planning Site to Site Configurations
  • General VPN Configuration
    • Configuring Settings on the General Tab
    • Configuring Settings on the Network Tab
    • Configuring Settings on the Proposals Tab
    • Configuring Settings on the Advanced Tab
  • Managing GroupVPN Policies
    • Configuring IKE Using a Preshared Secret Key
    • Configuring IKE Using 3rd Party Certificates
    • Downloading a GroupVPN Client Policy
  • Creating Site to Site VPN Policies
    • Configuring with a Preshared Secret Key
    • Configuring with a Manual Key
    • Configuring with a Third-Party Certificate
    • Configuring the Remote SonicWall Network Security Appliance
    • Configuring VPN Failover to a Static Route
• VPN Auto Provisioning
  • About VPN Auto Provisioning
    • Defining VPN Auto Provisioning
    • Benefits of VPN Auto Provisioning
    • How VPN Auto Provisioning Works
      • About Establishing the IKE Phase 1 Security Association
      • About Establishing IKE Phase 2 using a Provisioned Policy
  • Configuring a VPN AP Server
    • Starting the VPN AP Server Configuration
    • Configuring VPN AP Server Settings on General
    • Configuring VPN AP Server Settings on Network
    • Configuring Advanced Settings on Proposals
    • Configuring Advanced Settings on Advanced
  • Configuring a VPN AP Client
• Rules and Settings
  • Adding a Tunnel Interface
    • Creating a Static Route for the Tunnel Interface
  • Route Entries for Different Network Segments
  • Redundant Static Routes for a Network
• Advanced
  • Configuring Advanced VPN Settings
  • Configuring IKEv2 Settings
  • Using OCSP with SonicWall Network Security Appliances
    • OpenCA OCSP Responder
    • Loading Certificates to Use with OCSP
    • Using OCSP with VPN Policies
• DHCP over VPN
  • DHCP Relay Mode
  • Configuring the Central Gateway for DHCP Over VPN
  • Configuring DHCP over VPN Remote Gateway
  • Current DHCP over VPN Leases
• L2TP Servers and VPN Client Access
  • Configuring the L2TP Server
  • Viewing Currently Active L2TP Sessions
  • Configuring Microsoft Windows L2TP VPN Client Access
  • Configuring Google Android L2TP VPN Client Access
• AWS VPN
  • Overview
  • Creating a New VPN Connection
  • Reviewing the VPN Connection
    • Configuration on the Firewall
    • Configuration on Amazon Web Services
  • Route Propagation
  • AWS Regions
  • Deleting VPN Connections
• SonicWall Support
  • About This Document

Policies

All defined VPN policies are displayed in the NETWORK | IPSec VPN > Rules and Settings on the Policies tab.

Each entry displays the following information:

• Name – The default name or user-defined VPN policy name.
• Gateway – The IP address of the remote firewall. If the wildcard IP address, 0.0.0.0, is used, it is displayed as the IP address.
• Destinations – The IP addresses of the destination networks.
• Crypto Suite – The type of encryption used for the VPN policy.
• Enable – Shows whether the policy is enabled. A checked box enables the VPN Policy. Clearing the box disables it.
• Configure – Options for managing the individual VPN policies:
  • Edit icon allows you to edit the VPN policy.
  • Delete icon deletes the policy on that line. The predefined GroupVPN policies cannot be deleted, so the Delete icons are dimmed.
  • Export icon exports the VPN policy configuration as a file for local installation by SonicWall Global VPN Clients.

The following buttons are shown in the Policies table:

Search	Standard search engine to help locate specific VPN policies.
+Add	Accesses the VPN Policy window to configure site to site VPN policies.
Delete	Deletes the selected (checked box before the VPN policy name in the Name column first). You cannot delete the GroupVPN policies.
Delete All	Deletes all VPN policies in the VPN Policies table except the default GroupVPN policies.

You can refresh the active tunnels by using the Refresh option at the top of the Policies and Active Tunnels tables.

Some statistics about the VPN policies are also summarized below the table, for both site to site and GroupVPN policies:

• Number of policies defined
• Number of policies enabled
• Maximum number of policies allowed

You can define up to four GroupVPN policies, one for each zone. These GroupVPN policies are listed by default in the VPN Policies table as WAN GroupVPN, LAN GroupVPN, DMZ GroupVPN, and WLAN GroupVPN. Clicking on the Edit icon in the Configure column for the GroupVPN displays the Security Policy window for configuring the GroupVPN policy.

A VPN Policy cannot have two different WAN interfaces if the VPN Gateway IP is the same.