Skip to main content
Tipdrill
Tipdrill
Visitor III
September 21, 2016
Question

Forticlient limit to 1 connection

  • September 21, 2016
  • 2 replies
  • 19100 views
Hello,
I can restrict it to one single CONNECTION FortiClient IPSec per user?
If I create the user "Operator1" this can connect with 20 pc, 20 tablet....I would limit it to one single session\device .

Thank you

    2 replies

    emnoc
    emnoc
    New Member
    September 22, 2016

    yes you have that option under  the portal

     

     set limit-user-logins enable

     

     

    when enabled it allows one login ONLY 

     

    Tipdrill
    TipdrillAuthor
    Visitor III
    September 22, 2016

    emnoc wrote:

    yes you have that option under  the portal

     

     set limit-user-logins enable

     

     

    when enabled it allows one login ONLY 

     

    Under the portal? by cli? 

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    September 22, 2016

    a) for SSLVPN via portal:

    config vpn ssl web portal
       edit <portal_name_str>

          set limit-user-logins {enable | disable}

    this will only allow one login via SSLVPN per user (if enabled)

     

    b)

    config system global

    set policy-auth-concurrent {integer} if > 0, will only allow so many concurrent logins. This applies to identity based policies or portals only.

     

     

    c) IPsec VPN

    there is no way to restrict traffic from multiple source addresses. You can enable user authentication in the policy from <tunnel> to <internal> to use option b) above.

    emnoc
    emnoc
    New Member
    September 22, 2016

    there is no way to restrict traffic from multiple source addresses.

     

    FWIW for ipsec

     

    Depending on radius vendor you have various controls for restriction of multiple clients access based on radius updates and account start/stop records.

     

    Ken

     

    Terms & ConditionsAccessibility statement