possible create a global protect rule base on MAC Address?

[sam99my]

is that possible to set sslvpn/globalprotect to check client pc MAC address before they connect? to make sure only valid MAC address able to connect.

[rmonvon]

Hi...If the MAC address is stored somewhere on the PC like in a registry key, you can define a custom HIP object/profile to check for the MAC address value.  MAC address checking is not common since a laptop will have 2 MACs from the Ethernet and wireless ports, and it can be lost/stolen.  The better method is client certificate where you can revoke the client cert when device is lost/stolen.

Thanks.