AndersW  Freshman Member

+1

Yes this is a complete lack of a simple feature. The nebula setup is missing the ability to chose the “External User Group” when setting up “Remote access VPN” This is possible when the device is onprem managed. There is a workaround. Create a Security policy to disable a specific AD group. But then you must maintain two…