Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

ACCESS SSL VPN FROM GEO IP AND DISABLE USER FEATURE

Good evening, I have two question:

a) It's possible to grant access vpn users only from region/country?

b) It's possible disable an user inetad disable him?

This feature are available in fortinet firewall but on sonicwall gen 7 ho to do?

Thanks in advance

Category: Entry Level Firewalls
Reply

Best Answer

  • CORRECT ANSWER
    TKWITSTKWITS Community Legend ✭✭✭✭✭
    Answer ✓

    There is no way to 'disable' an account on a Sonicwall. The account either exists or it doesnt.

    That being said preventing SSLVPN access depends on how you have users setup. If the user is being authenticated via LDAP, disabling the account is your directory services should be enough to prevent the user from logging in or remove the account from the approriate group that allows it to login via SSLVPN.

    If the user is being authenticated locally on the Sonicwall, you can simply remove the user from the SSLVPN Services group. The account is still active but the user does not have the permissions to login via SSLVPN.

Answers

  • TKWITSTKWITS Community Legend ✭✭✭✭✭

    By default the global GEO-IP filtering list will be applied to inbound SSLVPN traffic. You can edit the global list, or you should be able to edit the access rule to use a custom list.

    Not sure what you are asking in part B.

  • Thanks for your reply. For question b i Need to disable a vpn user for a bit of time. And when required, enable It. It s possibile?
Sign In or Register to comment.