What's the best approach to filtering (Allow/Deny) access to specific terminals for VPN users?
Currently we have some ipsec ikev2 gateway which are allowed to connect to a certain LAN, and some other that are allowed to connect to an other LAN. But they always have access to the whole LAN they join (they can reach all the terminals inside that LAN)
We have many entries under Configuration > Security Policy > Policy Control
Close to the end, the following rule which I believe was created by default by firewall.
Probably it is the rule allowing to access the whole LAN.
What's the best approach to filtering, and allow VPN user to reach only the specified Address Group?
We have many entries under Configuration > Security Policy > Policy Control
Close to the end, the following rule which I believe was created by default by firewall.
Probably it is the rule allowing to access the whole LAN.
What's the best approach to filtering, and allow VPN user to reach only the specified Address Group?
0
All Replies
-
...follow0
-
Hi @phphil
Step1. you can add address object group(e.q. IP address, FQDN).
Step2. This policy’s Destination field choose that address group which you created on Step1.
0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 64 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 831 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight