topic Re: Mac Address binding for IPSEC VPN users in General Topics

Mac Address binding for IPSEC VPN users

Virupaksha — Mon, 01 Jun 2020 05:15:58 GMT

Hi Folks,

We are using IPSEC VPN for the users so they can connect from home.

For the security perspective, we want to bind the mac address on the basis of IP address for the users, if they or anyone will log in from another device then they can't connect.

Is there any option is available to bind mac-address for the VPN users.

OS: R80.10 (both Management/Gateway)

Re: Mac Address binding for IPSEC VPN users

HristoGrigorov — Mon, 01 Jun 2020 05:26:09 GMT

You may want to check Machine Certificate feature available in R80.40 as it seems to do exactly what you need:

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/Content/Topics/Machine-Certificate.htm

Re: Mac Address binding for IPSEC VPN users

Virupaksha — Mon, 01 Jun 2020 05:34:06 GMT

HI Hristo,

Thanks for the reply.

We are using R80.10. Is there any documents to achieve?

Re: Mac Address binding for IPSEC VPN users

PhoneBoy — Tue, 02 Jun 2020 05:49:48 GMT

This feature was integrated into R80.40.
It may be available as a customer release for other versions through your local Check Point office.
Another approach is to simply prevent someone from logging in more than once at the same time, which is a simple Global Property setting.

Re: Mac Address binding for IPSEC VPN users

_Val_ — Tue, 02 Jun 2020 06:56:03 GMT

why not using a machine certificate?