Siemens SCALANCE M-800 Series Getting Started page 141

9. Configure the second firewall rule with the following settings:
10.Click "Set Values".
SCALANCE M-800 Getting Started
Getting Started, 06/2015, C79000-G8976-C337-04
Action
From
To
Source (Range)
Destination (Range)
Service
VPN tunnel between SCALANCE M-800 and S612
Drop
Internal
IPsec tunnel
0.0.0.0/0
(Prevents TCP data traffic between the internal network and the
remote network connected via the VPN tunnel.)
TCP all
3.4 Firewall with a VPN connection
141