JoeSch

To give a better understanding - any ideas?

Hi Zyxel_Jeff, thanks for your answer. But this is not working and therefore I need to use a second WAN-IP (home-office) and bring the SSL-port 443 through the tunnel. One reason is: When using a web-browser to access OWA (Outlook Web Access) on a port like you said 11111 then the second Exchange server redirects the port…

Yes, it is a site-to-site setup. All traffic is allowed inside vpn tunnel (on both sides of firewall rules).