Outbound policy executed on PEPVPN/IPSEC traffic

Hi ! We have a scenario where Balance 305’s routes all traffic into sentral HUB via PEPVPN.

On the HUB we learn default route over OSPF towards a LAN linknett.

We would like to be able to forward some of the remote LAN’s towards the HUB’s WAN access instead of internal to the HUB LAN. The solution seems to be executing the outbound policy also on incoming PEPVPN traffic and not only on local LAN traffic generated locally.

Hope this could be considered.