topic Re: add policies to local vpn users in General Topics

add policies to local vpn users

FlexyZ — Fri, 27 Jan 2012 09:51:10 GMT

Can I add policies for specific local VPN users? - I can't add them from the source "users" field?

I am running PA500 4.1.1

Thanks

Re: add policies to local vpn users

jdelio — Fri, 27 Jan 2012 16:45:11 GMT

Can you please clarify or give us an example what you are wanting to accomplish?

Re: add policies to local vpn users

FlexyZ — Mon, 30 Jan 2012 21:22:49 GMT

sure; I want to make policies for vpn users. Meaning that a local user X on the PA500 only has access to different servers and user Y has access to other servers.

Thanks

Re: add policies to local vpn users

jseals — Sun, 05 Feb 2012 02:40:28 GMT

Hello,

If you are using Remote Access VPNs such as NetConnect or Global Protect you should be able to perform user-to-ip-mapping from the user's logins.

With this, you can then create user based security rules however you'd like.

If you are referring to IPsec VPN users, without any other type of user-to-ip-mapping you would need static IPs to be able to create a proper policy.

Thanks,

Jason