Request for Guidance on Configuring Per-User Firewall Policies for SSL VPN Access
Hello Team,
We are currently working on configuring per-user firewall policies for SSL VPN access using both LDAP and Azure IdP (with MFA) to restrict access to specific destinations for individual users.
Our FortiGate firewall is successfully integrated with Microsoft Azure IdP for SSL VPN authentication using token-based MFA. Additionally, we have integrated our on-premises Active Directory with the FortiGate firewall for SSL VPN access.
However, when creating firewall policies, we are encountering a limitation where policies are applied at the group level, rather than allowing us to define policies for individual users.
Can someone advise on the best workaround for this scenario? Specifically:
Do we need to create individual user groups in Active Directory and Azure IdP for each user to achieve per-user control?
Alternatively, is there a method to configure this directly on the FortiGate firewall?
We are also utilizing FortiClient EMS for managing remote access VPN policies. If there's a way to allow or restrict specific destinations for individual users through EMS, please advise that as well.
Thanks
