Blocking Mac addresses from SSL VPN

Question

Hello Everyone 
 
 I will explain the issue we came up with. In our company users use their company laptops to connect to the company through SSL VPN and then use remote desktop to connect to their computers. Some of the users they find it more comfortable to work from their personal PCs and they have downloaded the SSL VPN config and client installed it to their personal computers and they work without connecting from the company laptops. 
 We want to allow only the company laptops to have access to the SSL VPN and we were thinking to filter the Mac Address. I was reading inside the forum that this not possible. 
 Is it possible to filter the SSL VPN Connection based on the Mac Address of the Company Laptops? 
 Is there any other way to do it?

apijnappels · Answer

If you also use Sophos endpoint software you may be able to use Sophos heartbeat to reject clients without a heartbeat.

Vivek Jagad · Answer

Hello Nikolaos Zisis ,

Thank you for reaching out to the community, currently it is not supported and also there is an existing feature request - SFSW-I-1631.
Alternatively, you can configure Domain name for issuing company base laptops: Enter the DNS suffix (example: company.com or test.local) to add to the remote endpoint's network adapter. The suffix is appended to hostnames, forming an FQDN, to resolve the endpoint's DNS queries.

Blocking Mac addresses from SSL VPN

Top Replies