add policies to local vpn users

[FlexyZ]

Hi

Can I add policies for specific local VPN users? - I can't add them from the source "users" field?

I am running PA500 4.1.1

Thanks

[jdelio]

Can you please clarify or give us an example what you are wanting to accomplish?

[FlexyZ]

sure; I want to make policies for vpn users. Meaning that a local user X on the PA500 only has access to different servers and user Y has access to other servers.

Thanks

[jseals]

Hello,

If you are using Remote Access VPNs such as NetConnect or Global Protect you should be able to perform user-to-ip-mapping from the user's logins.

With this, you can then create user based security rules however you'd like.

If you are referring to IPsec VPN users, without any other type of user-to-ip-mapping you would need static IPs to be able to create a proper policy.

Thanks,

Jason