Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

ACCESS SSL VPN FROM GEO IP AND DISABLE USER FEATURE

Good evening, I have two question:

a) It's possible to grant access vpn users only from region/country?

b) It's possible disable an user inetad disable him?

This feature are available in fortinet firewall but on sonicwall gen 7 ho to do?

Thanks in advance

Category: Entry Level Firewalls
Reply

Best Answer

  • CORRECT ANSWER
    TKWITSTKWITS All-Knowing Sage ✭✭✭✭
    Accepted Answer

    There is no way to 'disable' an account on a Sonicwall. The account either exists or it doesnt.

    That being said preventing SSLVPN access depends on how you have users setup. If the user is being authenticated via LDAP, disabling the account is your directory services should be enough to prevent the user from logging in or remove the account from the approriate group that allows it to login via SSLVPN.

    If the user is being authenticated locally on the Sonicwall, you can simply remove the user from the SSLVPN Services group. The account is still active but the user does not have the permissions to login via SSLVPN.

Answers

  • TKWITSTKWITS All-Knowing Sage ✭✭✭✭

    By default the global GEO-IP filtering list will be applied to inbound SSLVPN traffic. You can edit the global list, or you should be able to edit the access rule to use a custom list.

    Not sure what you are asking in part B.

  • InformatechInformatech Newbie ✭
    Thanks for your reply. For question b i Need to disable a vpn user for a bit of time. And when required, enable It. It s possibile?
Sign In or Register to comment.