SSL VPN - Different Groups

Hello Ben,

I am glad to hear you were able to resolve your configuration issue.

All the SSL VPN users get their IP from the SSL VPN pool.

You can create different SSL VPN profiles and use Identity and Permitted Network Resources to segregate the traffic.

For example: 

SSLVPN_Admins

Policy Member = Admin1, Admin2

Permitted Network Resources = 172.16.150.100-172.16.150.105

SSLVPN_Sales

Policy Member = Sales1, Sales2

Permitted Network Resources = 10.10.10.100,10.10.10.101. 10.10.10.102

SSLVPN_HR

Policy Member = HR1, HR2

Permite Network Resources = 10.10.10.103, 10.10.10.104

You would need a Firewall rule for each SSL VPN profile you create, and select "Match known Users" accordingly in the Firewall Rule.

Regards,

After building the VPN-connection, the user is known to the XG.

Now I use the user/group directly within firewall rules at "Match known users"

Thanks Emmanuel, that worked.

Thanks for taking the time to update the Community! 

Regards,