Why does the MX appliance have a separate rulebase for VPN and it bypasses the main firewall rules?

[CarlT]

Hi Guys

Is there a reason the MX appliance have a separate rulebase for VPN and it bypasses the main firewall rules?, it means in some cases we have to duplicate the rulebase etc and it can make it confusing.

What is the thinking behind this? any plans to change in future?

[alemabrahao]

Good question, I think only the product design team will know how to answer.

[KarstenI]

I would not expect it to change anytime soon. But the rules that are only valid for VPN, are not needed in the general firewall area. Yes, at the beginning it is highly confusing. But over time, you'll get used to it. No, likely not loving it, but accepting it. 😉