Restrict the local DHCP service

Restrict the local DHCP service to the VPN client virtual IP address use.

1. Create the following Expression Network element "Node-internal" (negation of the built-in Zone element):

   ~Node-internal

2. Open the Engine cPP Template for editing.
3. Before the Automatic Rules Insert Point, add the following rule:

   Source: NOT Node-internal
   Destination: $$ Valid DHCP Servers for Mobile VPN clients, DHCP Broadcast Destination
   Service: BOOTPS (UDP)
   Action: Discard
   

4. Save the template policy.
5. Refresh the policies of all firewalls involved in the VPN to activate the new configuration.