Skip to main content
bfakhriddi
bfakhriddi
New Member
August 25, 2021
Question

policy for specific user

  • August 25, 2021
  • 1 reply
  • 2551 views

Hi, I am trying to setup ipv4 policy for specific user with less limitations. I created user from LDAP , even group synced from LDAP , then when I am trying to set that user or group in the source its not letting me to Apply, its asking to add 

"One address, address group, or Internet service is required"  as a source , but my user is getting dynamic ip address by connecting with ssl vpn. And i cant select IP address for this user.  Anyone can advice how this can be set up?    FGT200, version 6.0.10    Thank you 

1 reply

ac1
ac1
Explorer III
August 26, 2021

In version 6.4.6 you can configure the policy with source network of SSLVPN tunnel and user or group, in destination anyone else. It works.

lobstercreed
lobstercreed
New Member
August 27, 2021

As alluded to by ac, you DO have to use a source address.  While the user's IP might be dynamic, I'm sure you can predict the range it will be in, so you can define an address object of the entire DHCP range and use that in the policy.  Then it will match both the address in X range and the user abc.  It will ignore other users in X range because it is AND logic.

Terms & ConditionsAccessibility statement