Disable User LAN on SSL VPN

[Jabub]

Hello,

I have configured SSL VPN on Fortigate 500D. Problem is that a user who connects to a VPN have  access to its own LAN.

Is it possible block user LAN when is connect on SSL VPN ? 

Config of SSL VPN:

config vpn ssl settings set tlsv1-0 enable set servercert "ssl_generali_sk" set idle-timeout 1800 set auth-timeout 86400 set tunnel-ip-pools "SSLVPN_TUNNEL_ADDR1" set tunnel-ipv6-pools "SSLVPN_TUNNEL_IPv6_ADDR1" set dns-server1 10.213.44.10 set dns-server2 10.213.44.11 set source-interface "port11" set source-address "all" set source-address6 "all" set default-portal "tunnel-access" config authentication-rule edit 2 set groups "Radius_FSSO" set portal "Generali_VPN" next edit 4 set users "vpn_dr" set portal "VPN_DR" next end

Thank you