Forum Discussion

lo's avatar
lo
Comet
12 days ago

Inquiry About Remote Port Forwarding on IPsec Tunnel

Hi all,

I am reaching out to seek clarification on a technical matter concerning our company's use of CATO SASE services. We currently utilize IPsec tunnels to connect our internal resources to the CATO Cloud, which has been instrumental in enhancing our network security and accessibility.

We are considering the implementation of remote port forwarding to allow our team members and partners to connect to our company's internal website using the CATO Public IP address through the IPsec tunnel. This would provide a secure and convenient way for remote access to our internal resources.

I have a few questions regarding this setup:

Is it technically feasible to use remote port forwarding on an IPsec tunnel within the CATO SASE environment?

Your expertise and guidance on this matter would be greatly appreciated. 

network
security
  • peter's avatar
    peter
    12 days ago

    Hello lo,

    Yes you can definitely use RPF with IPsec sites, to make services on those sites available to the outside world on a Cato allocated IP.

  • peter's avatar
    peter
    Icon for Cato Employee rankCato Employee
    12 days ago

    Hello lo,

    Yes you can definitely use RPF with IPsec sites, to make services on those sites available to the outside world on a Cato allocated IP.

  • NickH's avatar
    NickH
    Comet
    9 days ago

    We have various RPF's configured for exactly this function.   No issues at all and they also inherit CATO's GEO location filter if you have it configured which is useful.