How to force FClient to only validate connections only via SSO

Forum|Forum|1 year ago
April 1, 2025
2 replies
786 views

Hi all,

Users connecting via VPN must be validated via SSO (the IdP is Azure). The problem arises if the user chooses to authenticate via LDAP; the queries reach the server, allowing an attacker to cause a DoS.

Force this option in fclient is not an option cause anyone from outside our organization could do it.

Has anyone encountered this problem?

Thnks in advance!

yderek

Staff

HI, @lexdef

Is your intention to block the Dos/DDOS attack targeting on your LDAP server using SSLVPN ?

When you say the user trying to use LDAP credentials, do they successfully logged in? Or you just seeing the attempt that some random user trying to access your SSLVPN using LDAP credential against your LDAP server