Hi,
I have an user which don't have access to our server when she is on VPN.
Once I add the user to VPN-SSL-ADMIN-GRP, she get access to all the server.
So I went to User's group to manage the server, but once I am in, there is no server on it, it is empty.
So how is it managed ? I want to create a group to allow access to only a few server, not everything.
Thank you for your help and sorry for by bad french.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi @torrgovin ,
The user group created under User & Authentication tab, has to be called under "VPN -> SSL-VPN settings" and associate the respective VPN portal for each user group as show in attached screenshot.
In the SSL-VPN portal you can define the server which user should have access to once the VPN is connected along with other client side settings. This is configured using Predefined bookmark or even you can simply access them using Quick launch. Your Firewall policy with the User-group will decide whether user should be allowed to access the resource or not.
The section you have highlighted in yellow in your question above, is to call a remote user group and map them to a Local Firewall user group and then you can use them under VPN/Firewall policies.
Best Regards,
Hi @torrgovin,
To restrict the user from accessing the servers, you need to check the firewall policies. You can create a new group for that user and create a new firewall policy accordingly.
Regards,
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1645 | |
1070 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.