Re: NATing src & dst for site-to-site AND SecureClient There is something you can try. Edit your firewall properties, go to the "Remote Access" tab. If you can check the Hub Mode Configuration, that means that all traffic will be forced down to the firewall. This would mean that traffic to the 99.99.99.99 server would also come through the client-to-site VPN. From there it would go back into the site-to-site VPN. You would need to NAT the SR connections with the Hide NAT too, so you might need to change your NAT rule to be: Internal+IP pool | 99.99.99.99 | any | Hide IP | = | = Important note: Hub mode means all SR traffic comes to the firewall, it may not be ideal for you... this means they will access the web via the firewall, etc. If that isn't acceptable, then you can do the NAT thing you mention. |