Mac Address binding for IPSEC VPN users

[Virupaksha]

Hi Folks,

We are using IPSEC VPN for the users so they can connect from home.

For the security perspective, we want to bind the mac address on the basis of IP address for the users, if they or anyone will log in from another device then they can't connect.

Is there any option is available to bind mac-address for the VPN users.

OS: R80.10 (both Management/Gateway)

[HristoGrigorov]

You may want to check Machine Certificate feature available in R80.40 as it seems to do exactly what you need:

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/C...

[Virupaksha]

HI Hristo,

Thanks for the reply.

We are using R80.10. Is there any documents to achieve?

[PhoneBoy]

This feature was integrated into R80.40.
It may be available as a customer release for other versions through your local Check Point office.
Another approach is to simply prevent someone from logging in more than once at the same time, which is a simple Global Property setting.

[_Val_]

why not using a machine certificate?