What filter exceptions do I need to create to allow users to establish and
maintain a client-to-site VPN connection from within my LAN to an outside
destination?