User based policies possible?

[TC_Hessen]

Hi, we use a fotigate 100C with fortios 4. Is there any possibility to create a user based policy so that some pptp user can access some internal services and some other pptp user some others? We have an external member who should have access to one switch-port, but not to our internal network. Any other members should have full access.

[abelio]

Hello, no, you cannot do that with pptp; maybe using some extra auth could help to deny access to the other hosts using 2 policies for pptp users, but the solution for your scenario is to use ssl vpn for example. regards