topic Re: Endpoint Security VPN IP Pools in Endpoint

Endpoint Security VPN IP Pools

Terry — Mon, 16 Dec 2019 14:52:49 GMT

Hello,

We have Checkpoint VPN setup on R77.30. One of the requirements is that we have a separate "DHCP" assignment for network engineers to allow for more significant restrictions on everyone else. I can't think of a way to do this with IP Pools. Has anyone had this requirement in the past? How did you accomplish this?

Re: Endpoint Security VPN IP Pools

G_W_Albrecht — Mon, 16 Dec 2019 15:47:47 GMT

Using Identity Awareness and Access Roles in rule base.

Re: Endpoint Security VPN IP Pools

Terry — Fri, 10 Jan 2020 20:32:48 GMT

We can use the user.dat file to assign a different range to different AD user groups. I thought I'd share this method as well.