Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Virupaksha
Explorer

Mac Address binding for IPSEC VPN users

Hi Folks,

We are using IPSEC VPN for the users so they can connect from home.
 
For the security perspective, we want to bind the mac address on the basis of IP address for the users, if they or anyone will log in from another device then they can't connect.
 
Is there any option is available to bind mac-address for the VPN users.
 
 
OS: R80.10 (both Management/Gateway)
 
 
0 Kudos
4 Replies

You may want to check Machine Certificate feature available in R80.40 as it seems to do exactly what you need:

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/C...

0 Kudos
Virupaksha
Explorer

HI Hristo,

 

Thanks for the reply.

 

We are using R80.10. Is there any documents to achieve?

 

 

0 Kudos
PhoneBoy
Admin
Admin

This feature was integrated into R80.40.
It may be available as a customer release for other versions through your local Check Point office.
Another approach is to simply prevent someone from logging in more than once at the same time, which is a simple Global Property setting.
0 Kudos
_Val_
Admin
Admin

why not using a machine certificate?

0 Kudos