Preventing unkown devices to connect to SSL VPN

[gordonf]

Hi,

I'm looking for a solution to prevent unkown device/ non-company provided Laptops to connect to our corporate VPN.

SSL VPN users are setup to authenticate via LDAP.

Besides the MAC host check solution what other options are available?

Many thanks

[emnoc]

You should look at host-check os-check 

Follow this KB and see what is useable for you, but you can control alot of aspects on what/who can access.

   https://kb.fortinet.com/kb/documentLink.do?externalID=FD36421

And lastly, you can deploy user-certificate along with the above.

https://socpuppet.blogspot.com/2020/04/sslvpn-fortigate-with-certificates.html

Ken Felix