Is it possible to have 2 portals and 2 gateways, each for different "VPN" connectivity and users?

[Jpergolizzi]

Hi, hoping someone can guide me. I am trying to see if it's possible to have, basically, 2 VPN's on the same firewall. One portal/gateway would be for employees using radius/AD/DUO authentication and the new one would be for consultants. Same authentication methods although the consultants would be in a different AD group for auth/DUO. Basically, the goal is to employ HIP controls for anti-virus on the employee VPN but not on the consultant VPN.

My thinking was to create a second portal and second gateway. I began looking at adding the portal but already have run into an issue. I choose the outside/untrust interface (it's the only public one) and want to select the ip address, there is nothing in the drop down list. I was thinking to use a different public NAT ip for the new portal, but there's nothing in the list at all.

So is this even possible and if so, how can I do it? Or is there a better way?

Thanks,

Jim

[Raido_Rattameister]

Yes you can have multiple portals / gateways.

Can be accomplished either with NAT or second IP on WAN interface.

Assuming you have more than 1 public IP then you can configure second IP with /32 mask.

Let's say your WAN subnet is 1.1.1.0/24

ISP GW IP is 1.1.1.1 and IP on your firewall 1.1.1.2/24

Just add additional IP 1.1.1.3/32 on WAN interface and then you can assign this 1.1.1.3/32 to second portal/gateway.

If you have only 1 WAN IP or if you have multiple ISPs then NAT comes handy (let us know if you prefer more details about NAT setup).

If auth method is the same then just keep 1 portal and assign different gateways to different users based on their AD group membership.