topic Setting user permissions with AD for certain devices and GP in General Topics

Setting user permissions with AD for certain devices and GP

ShinLor — Mon, 08 Jun 2020 23:54:54 GMT

Hello,

I am currently experiencing an issue with GP VPN. In AD we want to set user permissions to certain devices. However when we do this we cannot login to Global Protect VPN, it will say invalid user name or password. However if we set the permissions to all devices it works. We are needing permissions for only certain devices. Does anyone have any resolution for this?

Thanks so much!

Re: Setting user permissions with AD for certain devices and GP

BPry — Tue, 09 Jun 2020 02:58:59 GMT

@ShinLor,

How are you actually authenticating GlobalProtect? The AD restrictions likely aren't working because in most instances the firewall is going to be the client authenticating the user, not the end device. What exactly are you trying to accomplish? Do you want a user to only be able to use an issued device, or do you want to ensuring that the user is logging in from a specified issued device?