ACCESS SSL VPN FROM GEO IP AND DISABLE USER FEATURE
Good evening, I have two question:
a) It's possible to grant access vpn users only from region/country?
b) It's possible disable an user inetad disable him?
This feature are available in fortinet firewall but on sonicwall gen 7 ho to do?
Thanks in advance
Best Answer
-
TKWITS Community Legend ✭✭✭✭✭
There is no way to 'disable' an account on a Sonicwall. The account either exists or it doesnt.
That being said preventing SSLVPN access depends on how you have users setup. If the user is being authenticated via LDAP, disabling the account is your directory services should be enough to prevent the user from logging in or remove the account from the approriate group that allows it to login via SSLVPN.
If the user is being authenticated locally on the Sonicwall, you can simply remove the user from the SSLVPN Services group. The account is still active but the user does not have the permissions to login via SSLVPN.
0
Answers
By default the global GEO-IP filtering list will be applied to inbound SSLVPN traffic. You can edit the global list, or you should be able to edit the access rule to use a custom list.
Not sure what you are asking in part B.