Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
d3xmeister
New Contributor

VPN connected clients only allowed to communicate with one host

Hi, we Have a F600E, which is the single main router, firewall and DHCP server to a single LAN. What we want is when a group of VPN clients connect with FortiClient VPN to this device and network, they should only be able to communicate with one machine in that LAN, which is a file server. We don't want VPN connected clients to have access to any other local machines in that network.

 

How can we achieve this ? Thanks

1 Solution
ozkanaltas
Valued Contributor III

Hello @d3xmeister ,

 

You can achieve this request with a firewall policy. You can configure a firewall policy with your user group and allow access to the File server. For example, if you configure a policy like this, you can give access users to the file server.

 

Source Interface: SSL.root

Destination Interface: <File_Server_Network_Interface>

Source: ssl.vpn.ip.pool -- User group 

Destination: <File server IP>

Service: SMB-FTP-SFTP ( You can add or remove services as related to your file server service)

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW

View solution in original post

If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
2 REPLIES 2
ozkanaltas
Valued Contributor III

Hello @d3xmeister ,

 

You can achieve this request with a firewall policy. You can configure a firewall policy with your user group and allow access to the File server. For example, if you configure a policy like this, you can give access users to the file server.

 

Source Interface: SSL.root

Destination Interface: <File_Server_Network_Interface>

Source: ssl.vpn.ip.pool -- User group 

Destination: <File server IP>

Service: SMB-FTP-SFTP ( You can add or remove services as related to your file server service)

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
d3xmeister
New Contributor

I haven't tried this solution yet, but sounds logical that this would work, Thank you

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors