Endpoint Security VPN IP Pools

[Terry]

Hello,

We have Checkpoint VPN setup on R77.30. One of the requirements is that we have a separate "DHCP" assignment for network engineers to allow for more significant restrictions on everyone else. I can't think of a way to do this with IP Pools. Has anyone had this requirement in the past? How did you accomplish this? 

[G_W_Albrecht · Accepted solution]

Using Identity Awareness and Access Roles in rule base.

[Terry · Accepted solution]

We can use the user.dat file to assign a different range to different AD user groups. I thought I'd share this method as well.