possible create a global protect rule base on MAC Address?

sam99my — Thu, 03 May 2012 07:45:19 GMT

is that possible to set sslvpn/globalprotect to check client pc MAC address before they connect? to make sure only valid MAC address able to connect.

Re: possible create a global protect rule base on MAC Address?

rmonvon — Thu, 03 May 2012 14:40:51 GMT

Hi...If the MAC address is stored somewhere on the PC like in a registry key, you can define a custom HIP object/profile to check for the MAC address value. MAC address checking is not common since a laptop will have 2 MACs from the Ethernet and wireless ports, and it can be lost/stolen. The better method is client certificate where you can revoke the client cert when device is lost/stolen.

Thanks.

topic possible create a global protect rule base on MAC Address? in General Topics

possible create a global protect rule base on MAC Address?

Re: possible create a global protect rule base on MAC Address?