Change Order of Tunnels

The order of VPN tunnels is particularly important when more than one tunnel uses the same routes or when the routes overlap. A tunnel higher in the list of tunnels on the Branch Office IPSec Tunnels dialog box takes precedence over a tunnel below it when traffic matches tunnel routes of multiple tunnels.

You can change the order in which the Firebox attempts connections. You can only change the order of tunnels for manual VPN tunnels.

To change the policy order, from Fireware Web UI:

1. Select VPN > Branch Office VPN.
   The Branch Office VPN page appears.
2. Select a tunnel and click Move Up or Move Down to move it up or down in the list.
3. Click Save Order to save the tunnel order.

To change the tunnel order, from Policy Manager:

1. Select VPN > Branch Office Tunnels.
   The Branch Office IPSec Tunnels dialog box appears.
2. Select a tunnel and click Move Up or Move Down to move it up or down in the list.