5.07 VPN Portal Add/Edit

[Steve_Fuller]

Not sure when it was added, but I' m get an add/edit option on all web portals. Not sure whether the end user changed any settings, but I don' t remember seeing this security flaw before. Any ideas on how to remove?

[neonbit]

Hi Steve, I believe they enabled it by default after one of the 5.x upgrades. You can disable the users from adding/editing the bookmarks through the CLI with the following commands: config vpn ssl web portal edit web-access (or whatever the portals name is) set allow-user-bookmark disable end This will still allow you to create the bookmarks through the management interface, but prevent vpn users from creating/editing their own bookmarks. They' ve added a checkbox for this feature in 5.2 so you can do it in the GIU :)

[Steve_Fuller]

set allow-user-bookmark disable

Thanks! I thought it might be personal bookmark but I wasn' t sure.