topic User-id is it possible to check computers? in General Topics https://live.paloaltonetworks.com/t5/general-topics/user-id-is-it-possible-to-check-computers/m-p/12467#M9117 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>One of our clients want to know if it is possible to build policies based on computer membership to AD groups.</P><P></P><P>In this situation we want to differentiate between computers that belongs to AD and which do not in purpose of VPN connections, so that users won't connect from private computers with SSL client.</P><P></P><P>Regards,</P><P>Piotr Bratkowski</P></BODY></HTML> Mon, 21 Nov 2011 09:50:19 GMT Support_CC 2011-11-21T09:50:19Z User-id is it possible to check computers? https://live.paloaltonetworks.com/t5/general-topics/user-id-is-it-possible-to-check-computers/m-p/12467#M9117 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>One of our clients want to know if it is possible to build policies based on computer membership to AD groups.</P><P></P><P>In this situation we want to differentiate between computers that belongs to AD and which do not in purpose of VPN connections, so that users won't connect from private computers with SSL client.</P><P></P><P>Regards,</P><P>Piotr Bratkowski</P></BODY></HTML> Mon, 21 Nov 2011 09:50:19 GMT https://live.paloaltonetworks.com/t5/general-topics/user-id-is-it-possible-to-check-computers/m-p/12467#M9117 Support_CC 2011-11-21T09:50:19Z Re: User-id is it possible to check computers? https://live.paloaltonetworks.com/t5/general-topics/user-id-is-it-possible-to-check-computers/m-p/12468#M9118 <HTML><HEAD></HEAD><BODY><P>Currently, we only do "user" identification through Active Directory. One option to acheive what you want is to use "Global Protect" feature for all internal and remote users to log in to corporate network. It basically replaces ssl-vpn for remote users. You can configure "Computer Name" under HIP Profile for Global protect users to be identified only when they try to login through that particular computer. Again, there is lot of manual work required for it to work, you need to manually enter each compuetr name under HIP profile and match registery entry realted to that computer.</P><P></P><P><A href="https://live.paloaltonetworks.com/docs/DOC-1757">https://live.paloaltonetworks.com/docs/DOC-1757</A></P><P></P><P>Please feel free to contact us if you have question.&nbsp;&nbsp; </P></BODY></HTML> Thu, 24 Nov 2011 03:09:03 GMT https://live.paloaltonetworks.com/t5/general-topics/user-id-is-it-possible-to-check-computers/m-p/12468#M9118 snisar 2011-11-24T03:09:03Z