topic Re: Mobile Acces - IPSecVPN in SASE and Remote Access https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Acces-IPSecVPN/m-p/23150#M13276 <HTML><HEAD></HEAD><BODY><P>Pretty sure we don't get group information from TACACS+.</P><P>As such, whatever groups are associated with the generic profile are associated with all users.</P><P>We can get group information from LDAP/AD or RADIUS.</P></BODY></HTML> Wed, 29 Aug 2018 23:14:56 GMT PhoneBoy 2018-08-29T23:14:56Z Mobile Acces - IPSecVPN https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Acces-IPSecVPN/m-p/23149#M13275 <HTML><HEAD></HEAD><BODY><P>I need configure a Remote Access VPN with&nbsp;TACACS+&nbsp;for this I configure a&nbsp; User group with a generic profile that make the TACACS authentication for this point it works, but for the authorization policy when I create more groups and more policies the Firewall associate for each user all the groups that I create,&nbsp;how&nbsp;authorization for VPN works?</P></BODY></HTML> Wed, 29 Aug 2018 22:35:11 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Acces-IPSecVPN/m-p/23149#M13275 Gregory_Gustavo 2018-08-29T22:35:11Z Re: Mobile Acces - IPSecVPN https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Acces-IPSecVPN/m-p/23150#M13276 <HTML><HEAD></HEAD><BODY><P>Pretty sure we don't get group information from TACACS+.</P><P>As such, whatever groups are associated with the generic profile are associated with all users.</P><P>We can get group information from LDAP/AD or RADIUS.</P></BODY></HTML> Wed, 29 Aug 2018 23:14:56 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Acces-IPSecVPN/m-p/23150#M13276 PhoneBoy 2018-08-29T23:14:56Z