topic Re: Why AD user account without access role object can access to Endpoint VPN? in Firewall and Security Management

Why AD user account without access role object can access to Endpoint VPN?

Kirill — Mon, 30 Nov 2020 03:55:00 GMT

Hello, I have enabled Identity Awareness blade and created allowing rule for Remote access VPN users.

I added some users in Access role object, and they have access to VPN, it's ok. But when i try to make authorization in Endpoint VPN with AD account which is not in the access role object it has access too, authorization is successful. How is it can be possible ?

Re: Why AD user account without access role object can access to Endpoint VPN?

Wolfgang — Mon, 30 Nov 2020 06:57:36 GMT

@Kirill

it's normal behaviour. Users are authenticated but has no rights to anything if no rule for this user exist.

Authentication is possible for all user included here on the remote access community:

Wolfgang