topic Re: Restricting certain users from AD to login Capsule Connect in SASE and Remote Access

Restricting certain users from AD to login Capsule Connect

PJ_WONG — Fri, 22 Nov 2024 06:38:46 GMT

Hi CheckMates,

I have a security gateway with remote access enabled, integrated with an AD server. I figured that both Endpoint Security VPN and Capsule Connect will only use one same user database.

I want to separate the databases so that certain users are restricted from logging into Capsule Connect.

What I’ve Tried:
I created a policy to drop traffic from restricted users, but they can still log in to Capsule Connect (though they can't access internal servers).

My Question:
Is there a way to manage VPN users for Endpoint Security VPN and Capsule Connect separately, so I can restrict certain users from logging into Capsule Connect entirely?

Any suggestions are appreciated.
Thank you!

Regards,
PJ

Re: Restricting certain users from AD to login Capsule Connect

AkosBakos — Fri, 22 Nov 2024 10:38:41 GMT

Hi @PJ_WONG

Have you tried to restrict the users by group membership in RemoteAccess?

VPN communities -> RemoteAccess

But it is for only Remote Access, and the Capsule Connect, almost the same....

Now i'm checking the guides 🙂

Akos

Re: Restricting certain users from AD to login Capsule Connect

PhoneBoy — Fri, 22 Nov 2024 14:40:16 GMT

Not currently, this would be a Request for Enhancement.