topic Re: Is there a feature to map specific mac address to specific user in GP VPN in GlobalProtect Discussions

Is there a feature to map specific mac address to specific user in GP VPN

Vijaygvasan — Mon, 02 Aug 2021 11:27:40 GMT

Hi Team,

I have a situation where users a should not be able to login to user b machine as the same goes to user b as well.

Is there a way to map the HIP profile to a specific user like mapping the specific mac address to a specific user so that the mentioned user alone gets logged in to that specific system or machine.

Kindly share any documents related to this.

Thanks

Vijay

Re: Is there a feature to map specific mac address to specific user in GP VPN

Mick_Ball — Tue, 03 Aug 2021 18:39:37 GMT

This really should be done at domain level authentication...

HIP cannot prevent this but you can have a security policy that states....

User A with HIP computer A allow

and....

User A with HIP computer B deny.

and visa versa...

Re: Is there a feature to map specific mac address to specific user in GP VPN

Vijaygvasan — Wed, 04 Aug 2021 03:53:43 GMT

Is there any document regarding this how to do them

Re: Is there a feature to map specific mac address to specific user in GP VPN

Mick_Ball — Wed, 04 Aug 2021 18:08:01 GMT

There is documentation on Hip and there is documentation on user based policies. I doubt there is one that combines both as not really a firewall issue but you can combine the 2.

regarding the domain level restrictions, probably yes but not here....