topic Re: Office Mode IP assignment by client type in Mobile

Office Mode IP assignment by client type

rooKing — Mon, 20 May 2024 08:33:01 GMT

Hi CheckMates!

Is it possible to assign office mode IP addresses by client type?

For example, Capsule VPN Android users get IP address from one OM pool, SSL Network Extender user from another OM pool, Check Point Mobile users from yet another OM pool, etc.

Regards
rooKing

Re: Office Mode IP assignment by client type

PhoneBoy — Mon, 20 May 2024 14:39:55 GMT

Not aware of a way to do this at current.

Re: Office Mode IP assignment by client type

the_rock — Mon, 20 May 2024 18:11:06 GMT

Im 100% positive you canNOT do that.

Andy

Re: Office Mode IP assignment by client type

Duane_Toler — Mon, 20 May 2024 18:32:53 GMT

The others are correct. If you're looking to differentiate traffic by client type, then Access Roles are your answer here. You can define an Access Role object by client type, and use those in your policy.

For best results, you can also define an access role for your regular users and again use that in your policy. With this, you can remove the "legacy user access" rule for "Vpn_users@any" in the source column AND you can remove the RemoteAccess community from the VPN column. You will use the access roles to control VPN user traffic; either by your client type roles, or your user-identity roles, or both. Your user identity roles can refer to internal/local user, AD/LDAP users, LDAP OUs, AD security groups.... whatever you need.

Re: Office Mode IP assignment by client type

the_rock — Tue, 21 May 2024 07:48:24 GMT

excellent point!