Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
Hi,
Currently we are using Firewall XG310 and SFOS v20 . My question is :
1. How to bind vpn user mac-address without asking their mac-address manually? Could sophos FW detect it automatically ?
2. Could we set vpn user state duration ? Example : 1 month or 2 month. So, after reach their last date, it will disable those user automatically.
Thanks.
Hello Trio Fandi ,
Thank you for reaching out to the community, MAC binding option for SSL VPN client is not supported. REF - Bind MAC address to a user.
And there is a Disconnect dead peer after option and Disconnect idle peer after: Under the SSL VPN Global config, but none option provides an option for a month or 2 month...
There is an option policy wise as well, when you create a SSL VPN policy:
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Hi Vivek Jagad ,
User state that I mean are Enable/Disable, in the Authentication->User Menu, as shown below (Yellow Box mark) :
Regarding Question no.1 , could we see vpn user connected mac-address ? Or any report for generate it ?
Thanks
