Endpoint Security On Demand - distinguishing compliance policy per user group.

[Pawel_Topczewsk]

Hi,

Is there any chance to distinguish ESOD "Compliance" per user or user group.

The only possibile option I am aware of is to apply a ESOD policy directly to GW properties. So the only way i do see at this particular time is to create VSX context to distinguish Remote Access users and place propert perimeter verification when trying to establish User2Site tunnel.

If You know better way, please educate me asap

[Gaurav_Pandya]

Hi Pawel,

Yes. ESOD is pushed to gateway but you can fine tune access related things with applying Mobile access rules by creating Native applications, Web applications. Also there is a way to do drive mapping and other things with Native applications. You can apply to particular users or groups.

https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/23024.htm#o23211