topic SMB APPLIANCE Max ID Awareness session in Spark Firewall (SMB)

SMB APPLIANCE Max ID Awareness session

lajie93 — Fri, 27 Sep 2019 00:51:12 GMT

Hello team,

What is the (default) maximum number session for one ID Awareness account on for SMB appliance ?

And if allowed multiple session, how to limit it (for example at only one session)

Re: SMB APPLIANCE Max ID Awareness session

PhoneBoy — Fri, 27 Sep 2019 15:21:24 GMT

What do you mean by "session" in this context?

Identity Awareness primarily associates an identity with an IP address.
An identity can include a hostname and/or a username.
A given user can be associated with multiple IPs.
For Centrally Managed SMB appliances you definitely can restrict this to a single IP per user.
Not sure if you can restrict this on locally managed SMB devices.

As to the precise limit a given SMB appliance can handle, don't know.
Why the question?

Re: SMB APPLIANCE Max ID Awareness session

Pedro_Espindola — Fri, 27 Sep 2019 17:39:48 GMT

@PhoneBoy , locally managed appliances can restrict the number of users per IP.

In "Advanced Settings" there is the option "User Awareness - Assume single user per IP address", which is TRUE by default.

The opposite (restricting the number of IPs per user) is only possible for Remote Access as far as I know. This is done by setting "VPN Remote Access - Allow simultaneous login" to FALSE.