This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocking Mac addresses from SSL VPN

Hello Everyone

I will explain the issue we came up with. In our company users use their company laptops to connect to the company through SSL VPN and then use remote desktop to connect to their computers. Some of the users they find it more comfortable to work from their personal PCs and they have downloaded the SSL VPN config and client installed it to their personal computers and they work without connecting from the company laptops.

We want to allow only the company laptops to have access to the SSL VPN and we were thinking to filter the Mac Address. I was reading inside the forum that this not possible.

Is it possible to filter the SSL VPN Connection based on the Mac Address of the Company Laptops?

Is there any other way to do it?

This thread was automatically locked due to age.

Top Replies

apijnappels 9 months ago +3 suggested

If you also use Sophos endpoint software you may be able to use Sophos heartbeat to reject clients without a heartbeat.

Parents

0 Vivek Jagad 9 months ago

Hello Nikolaos Zisis ,

Thank you for reaching out to the community, currently it is not supported and also there is an existing feature request - SFSW-I-1631.
Alternatively, you can configure Domain name for issuing company base laptops: Enter the DNS suffix (example: company.com or test.local) to add to the remote endpoint's network adapter. The suffix is appended to hostnames, forming an FQDN, to resolve the endpoint's DNS queries.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up -1 Vote Down

Cancel

Reply

0 Vivek Jagad 9 months ago

Hello Nikolaos Zisis ,

Thank you for reaching out to the community, currently it is not supported and also there is an existing feature request - SFSW-I-1631.
Alternatively, you can configure Domain name for issuing company base laptops: Enter the DNS suffix (example: company.com or test.local) to add to the remote endpoint's network adapter. The suffix is appended to hostnames, forming an FQDN, to resolve the endpoint's DNS queries.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up -1 Vote Down

Cancel

Children

0 wlogic 9 months ago in reply to Vivek Jagad

Vivek Jagad Would you please describe your so called alternative solution to "Blocking Mac addresses from SSL VPN" in much more detail?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to wlogic

hey wlogic , refer - Configure SSL VPN (remote access) with LDAP authentication. No alternative this remains a FR.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up -1 Vote Down

Cancel
0 wlogic 9 months ago in reply to Vivek Jagad

Vivek Jagad Your much more detailed description for your so called alternative solution to "Blocking Mac addresses from SSL VPN" which you have described with "DNS suffix ..... forming an FQDN, to resolve the endpoint's DNS queries." is Configure SSL VPN (remote access) with LDAP authentication, are you serious?
Sorry, but I have no other words for this ....
Cancel
Vote Up 0 Vote Down

Cancel