TMS zl Management and Configuration Guide ST.1.1.100430

7-71
Virtual Private Networks
Configure an IPsec Client-to-Site VPN
You can use a previously configured address object or specify the
address manually. Alternatively, leave Any Address.
Figure 7-52. Add Policy Window
g. Optionally, select the Enable logging on this Policy check box if you
want to view log messages for this policy.
Note It is not recommended that you enable logging permanently, because
policy logging is processor-intensive. Use policy logging for troubleshoot-
ing and testing only.
h. Click Apply.
4. Allow IKE messages to the remote endpoints.
a. For Action, leave the default Permit Traffic.
b. For From, select Self.
c. For To, select the remote zone.
d. For Service, select isakmp.
e. For Source, specify the module’s local VP N gateway address.