topic Re: Static IP for SSL VPN in General Topics

Static IP for SSL VPN

mharding — Fri, 19 Feb 2010 22:05:22 GMT

I got to thinking about this the today.

Is there anyway to assign a static IP address in the SSL VPN? I'd like to assign one to myself so I can remote in and check on the firewall when I needed to do so.

Re: Static IP for SSL VPN

nrice — Fri, 19 Feb 2010 23:58:40 GMT

There is currently no way to break out a static IP from a pool and assign it to a specific user. You'd have to create a separate SSL VPN with the static address.

Re: Static IP for SSL VPN

shp555 — Wed, 07 Dec 2011 17:57:32 GMT

Is there a way to do this now? Figure I would ask again since this post is almost a year old.

Thanks!

Re: Static IP for SSL VPN

rapoint_person — Thu, 08 Dec 2011 16:49:33 GMT

Why not use the fact that you are identified as a user when logging in to the VPN-Portal? If the tunnel-interface is in it's own zone you can create security rules based on source user rather than static IP's.

Re: Static IP for SSL VPN

shp555 — Thu, 08 Dec 2011 17:03:57 GMT

That might end up being the solution. The only issue with that is currently all access controls of remote users is based on IP and not user, group, etc.

Re: Static IP for SSL VPN

mharding — Thu, 08 Dec 2011 22:00:52 GMT

In my specific case, I only allow certain IP address to connect to the management port of the PAN device. I would need the static IP address to enter on the PAN config.

Re: Static IP for SSL VPN

rapoint_person — Fri, 09 Dec 2011 09:03:13 GMT

I understand what you are saying, and I agree it would be ideal if we could use static IPs.

I'm just saying that using "source users" could be a workaround in some cases. For instance allowing the SSLVPN network to manage the box, but then limiting which users actually can access to the management interface with a user based security policy. Just want share some ideas of doing things differently by taking advantage of knowing the source users.