We are using GP in an always on state.  From time to time our users need to disable it to user another VPN or when things just aren't working.   I would like to be able to allow our help desk to log in to our firewall and only be able to go to Network - Portals and Generate Ticket option.  This way a user calls in, they log in and generate the key/code to disable GP for whatever duration needed.   I figured out how to add a role that only shows portals in read only mode, but they can't generate a ticket.  If I change it to enable, then they can generate tickets, but they can also make configuration changes.  Good part is they can't commit them, but the changes do stick and then when an admin logs in it shows a commit waiting.   I also wouldn't care if this could be done using SSH.  I just need the option of say Teir 1 help desk to generate tickets to allow users to disable GP.   Anyone else figure this out or a work around?   Thanks   ... View more

Does anyone have a good solution/setup for providing external clients with VPN access?  Not regular users/company employees.   We need to be able to provide these external clients access to different resources internally. IE webpages, server access using RDP etc.  We would like to tie this into AD also.  I would prefer not to have to create a gateway/portal for each and every vendor/client.  Almost need a way to do some sort of mapping based on AD username or groups using one gateway/portal.   Thanks     ... View more