FLEX 200H - how to restrict VPN access to a single AD group?

Fabio_Dangelo

Hello

I need to restrict SSL VPN access to a single group. Is it possible?

Firmware V1.21(ABWV.0)

thank you

Zyxel_Kay

Hi @Fabio_Dangelo

If you're looking to authenticate your SSL VPN access with an Active Directory (AD) server, the USG FLEX H series firewall does support this feature.

For detailed instructions and more information, please refer to this article:

https://community.zyxel.com/en/discussion/22814/usg-flex-h-series-remote-access-vpn-with-ad

Fabio_Dangelo

Hello Kay!

Maybe my English is not good enough. My fault.

I want to restrict AD authentication only to users that belong to a specific group. This was an easy task with USG110 firewall… with H series I don't know how to do it.

thank you.

Zyxel_Kay

Hi @Fabio_Dangelo

Could you please provide details on how you configured the AD group and SSL VPN on the USG110? It would be especially helpful if you could share the configuration file and any relevant screenshots. We would like to review the setup on the USG110 to assist you better with the USG FLEX H series.

Fabio_Dangelo

Hello Kay

USG 110 is gone.

Other ZyXEL support technician told me it is not already an option on H series. Is it that correct?

Zyxel_Kay

Hi @Fabio_Dangelo

Could you please clarify if you're referring to the external group ID feature?

Fabio_Dangelo

Kay… that interface is from an older firewall.

I'm using FLEX H series firewall now.

Zyxel_Kay

Hi @Fabio_Dangelo

Currently, the USG FLEX H series does not support this feature. However, we have submitted it as a feature request in our Ideas section. You can check out the post here:

https://community.zyxel.com/en/discussion/26099/external-group-user-object-support-for-remote-vpn-on-usg-flex-h

Feel free to vote and leave a comment. Your input will help us evaluate this feature request.