Restrict VPN Access to desregistered devices

[pedropaolo]

In my environment, I have some endpoints that had FortiClient installed and were managed by EMS. From there, they retrieved the necessary VPN configurations to connect to the corporation's servers.

The users lost their license because they were not seen for a period longer than what is defined in EMS Settings > EMS license timeout. As a result, they are no longer being managed/monitored by FortiEMS.

Is there any way to block these users' access to the VPN? Or force them to rejoin EMS?

[sjoshi]

Hi pedropaolo,

You can use MAC binding to filter the user that connects to the SSL VPN.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-client-MAC-binding-supported-platf...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-MAC-address-check-on-SSL-VPN-connections/t...