SSL VPN can route internet to Sangfor NSF

Hi

may i know Sangfor NSF or NGAF, for SSL VPN :

we can do some route the user sslvpn force to internet at Sangfor NSF / NGAF, meaning to say want to force internet through the easy connect when it is activated

can do for this one?

Hi, using Sangfor NSF or NGAF, you can configure SSL VPN to route user traffic through the internet when Easy Connect is activated. This setup ensures secure tunneling of all traffic, maintaining a secure connection to the corporate network on public networks.

Hi sir
for this line "configure SSL VPN to route user traffic through the internet" this one refer on application control or Nat or static route?

Hi,after vpn ssl configuration,you have to define a static route for allow the VPN client traffic to reach internet.

Also, It's recommended to control the traffic of the VPN users by defining some rules on application control

Hi Sir,

Static route point from virtual IP address at ssl vpn config?

Hello Dear

when Easy Connect is turned on, you may set up an SSL VPN to transport user traffic over the internet using Sangfor NSF or NGAF. By maintaining a secure connection to the corporate network on public networks, this configuration guarantees secure tunneling of all traffic.

hi, please take a look on my guide (replace xx with tt to make link clickable): hxxps://community.sangfor.com/forum.php?mod=viewthread&tid=10122

Sangfor NGAF and NSF both support routing SSL VPN traffic through the device, allowing you to force SSL VPN users to access the internet via the Sangfor firewall when using Easy Connect. This is typically done by enabling "Split Tunneling" or configuring routing policies that direct all internet-bound traffic through the NGAF/NSF, ensuring the traffic is inspected and secured before reaching the internet. You can customize these settings in the VPN configuration to meet security requirements.

I just got feedback from Sangfor support that NSF/NGAF does not support SSL VPN in full tunnel mode