topic Re: Disallow user from connecting to remote access in SASE and Remote Access

Disallow user from connecting to remote access

cp0102 — Mon, 27 Mar 2023 02:52:02 GMT

Hi,

We have configured a rule that drops traffic from a specific user group in in RemoteAccess. However the user in the group can still connect to VPN even though the traffic should be dropped based on the policy.

Is there a way to prevent user from connecting to VPN without disabling the user itself?

Thanks

Re: Disallow user from connecting to remote access

the_rock — Mon, 27 Mar 2023 03:29:47 GMT

Can you tell what rule allows the access based on the logs?

Andy

Re: Disallow user from connecting to remote access

PhoneBoy — Mon, 27 Mar 2023 12:54:55 GMT

Unfortunately, you would have to disable the user to prevent the user from being authenticated.

Re: Disallow user from connecting to remote access

the_rock — Mon, 27 Mar 2023 13:33:10 GMT

Interesting...I could have sworn it was possible before by blocking the access with the group or making sure that user was NOT part of below setting in RA community object in dashboard:

Re: Disallow user from connecting to remote access

PhoneBoy — Mon, 27 Mar 2023 21:15:58 GMT

You’re correct, but I don’t believe the original poster will do that since a specific policy rule was spoken of.

Re: Disallow user from connecting to remote access

the_rock — Mon, 27 Mar 2023 22:52:33 GMT

Im pretty sure with screenshot I sent, IF that user is included, they CAN connect to the site, but if rule does not allow them access, then they wont be able to connect to anything internally. I did it that way with few customers and worked just fine.

Andy