Disallow user from connecting to remote access

[cp0102]

Hi,

We have configured a rule that drops traffic from a specific user group in in RemoteAccess. However the user in the group can still connect to VPN even though the traffic should be dropped based on the policy.

Is there a way to prevent user from connecting to VPN without disabling the user itself?

Thanks

[the_rock]

Can you tell what rule allows the access based on the logs?

Andy

[PhoneBoy]

Unfortunately, you would have to disable the user to prevent the user from being authenticated.

[the_rock]

Interesting...I could have sworn it was possible before by blocking the access with the group or making sure that user was NOT part of below setting in RA community object in dashboard:

 

[PhoneBoy]

You’re correct, but I don’t believe the original poster will do that since a specific policy rule was spoken of.

[the_rock]

Im pretty sure with screenshot I sent, IF that user is included, they CAN connect to the site, but if rule does not allow them access, then they wont be able to connect to anything internally. I did it that way with few customers and worked just fine.

Andy